Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
File: eXpIzBPiAOLT84r4MxjRvK9vYzE.mft (raw, json)
Hash identifier: pwuellWllyr7IP6BjkhItj+11gSgUdVieSYIdUG/N7k=
Subject key identifier: 5D:32:AE:07:23:3A:F9:55:D7:8F:71:2C:5B:F1:37:29:00:39:7E:B4
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 019A2B1E7D4A2191F24DECDE9B13967D47F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
Manifest number: 16FD
Signing time: Tue 28 Oct 2025 14:00:09 +0000
Manifest this update: Tue 28 Oct 2025 14:00:09 +0000
Manifest next update: Wed 29 Oct 2025 14:00:09 +0000
Files and hashes: 1: 7BO8TZ7ATCsCuTGlJnm0y-khSyU.roa (hash: x6i25XfL4F0gRp6H2u4+rOMQs65WiJ45VD9+0G2z3+I=)
2: FWiPIHCHDr0uKdyZ_foi8pOa3qE.roa (hash: DmpIUKQykitdg60h0JYisIxDWolUrUFXqS52YO726hw=)
3: aNixjFy8ziG3vjf15zAVaRB-c8A.roa (hash: EnnotKECMV4Ndd6+GZEZZLejmbdDUCzQTSAS/USoOkg=)
4: eXpIzBPiAOLT84r4MxjRvK9vYzE.crl (hash: qjlBtsKI3WJ67Qo+HEsR56tnrKzTQhGNyJnGwMrGBfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:7d:4a:21:91:f2:4d:ec:de:9b:13:96:7d:47:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Oct 28 14:00:09 2025 GMT
Not After : Oct 29 14:00:09 2025 GMT
Subject: CN=5d32ae07233af955d78f712c5bf1372900397eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:94:16:cd:30:55:7c:8c:e0:69:a4:0e:da:
f9:0e:b3:a2:90:3c:19:ec:b1:11:de:ad:45:27:f0:
d3:18:c9:98:d5:58:a8:1e:77:83:68:b2:a1:28:19:
72:a7:5c:e4:36:19:61:a7:7c:d2:9d:c3:4a:1b:22:
e2:a0:63:d2:74:58:2f:cb:16:c0:ce:12:a1:52:e1:
9b:3b:aa:d2:2f:fb:77:d6:73:fa:61:2a:eb:e9:94:
c9:90:0b:15:c7:d3:f5:8e:d6:72:3b:e7:e9:74:0f:
b8:2a:6e:ed:35:7d:29:ce:34:f8:83:5c:8a:60:fa:
94:41:c2:3c:85:9f:b6:72:a1:2f:56:00:35:75:bd:
03:0a:12:37:23:8c:0e:a8:ee:14:45:59:15:2f:86:
78:0b:ac:ec:0f:56:44:92:5c:f1:af:5d:50:79:86:
cd:2f:99:3a:f4:7e:f6:71:a2:59:de:6a:0c:f9:5f:
b3:dd:c8:78:3a:33:55:f1:83:14:56:62:2d:0e:92:
6c:2d:2b:d7:15:96:98:dc:00:5b:a5:d2:91:ef:9a:
52:65:de:e8:c0:2f:f4:91:77:29:4f:5d:fa:c9:47:
4b:f0:60:63:1d:8a:52:83:c1:2e:c4:fc:25:47:63:
d7:ee:ed:97:b8:2a:b9:d3:99:95:ae:92:2f:ce:f6:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:32:AE:07:23:3A:F9:55:D7:8F:71:2C:5B:F1:37:29:00:39:7E:B4
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b6:1d:8b:e4:13:30:86:64:e9:7f:9a:2b:1b:49:44:f9:28:
3c:bf:53:4b:62:93:3f:c9:7c:ac:63:15:f6:4f:f1:9c:4e:20:
bc:66:60:41:e5:ee:ee:4a:b9:12:bc:9b:52:5a:bb:7f:38:b5:
8b:5b:47:25:da:73:6d:13:6d:5e:8a:3b:2f:25:06:4e:c0:e4:
2c:6a:da:dc:30:1d:23:8c:64:37:66:18:fe:24:e0:9e:da:9c:
f3:e9:56:a7:42:73:03:de:4e:4f:51:dc:bd:c3:67:b9:06:82:
65:00:53:e2:37:2f:95:e1:e1:f5:43:09:01:5a:2b:62:c5:da:
a5:69:3c:1a:d0:28:65:66:78:92:b6:f3:9c:23:1a:f9:b3:94:
ec:73:ec:44:0f:f8:22:61:e4:5e:6b:80:ae:d0:55:f6:cd:db:
8b:fd:9f:e6:d3:b9:0f:10:74:61:9b:73:b6:d4:54:a6:52:e2:
a6:0e:55:d6:82:2d:28:f5:82:79:12:60:1e:6a:63:04:72:20:
50:38:cf:83:20:3a:c7:58:26:50:d9:22:16:b5:ad:97:4c:b6:
48:25:d2:c5:be:4f:8c:e8:11:c1:ab:73:0b:04:37:8c:6a:5f:
b3:80:80:44:cd:59:1a:4f:27:c6:83:30:11:32:07:3f:51:45:
a3:dd:48:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:02:41 2025 by rpki-client