Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
File: eaOyw2It-eh5guqDUJeKbJh1p8g.mft (raw, json)
Hash identifier: ZRjYSr4jTtcBWlGsIQvKVTko3mFkJ/TEwNztaUXvLjc=
Subject key identifier: E9:56:C5:28:E9:EA:DA:0A:AB:49:98:D4:12:A3:73:02:A3:60:03:E5
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 019A70DC556364C20F333C23597FA92FFCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 03:01:19 +0000
Manifest this update: Tue 11 Nov 2025 03:01:19 +0000
Manifest next update: Wed 12 Nov 2025 03:01:19 +0000
Files and hashes: 1: 16vis8mKCMw0Lqb7iG4NH7TCbeU.roa (hash: 7jQbnk7QOCJ8ZAWzucJtV6/4pdB8lxfRJErUH5wxQnk=)
2: WmLDow5KPtPm7R4XsODNb3nK6Og.roa (hash: 4GYJeuCBXCBDgFT4ZnecJgi27g3BGxeNgDA7fyyOWHA=)
3: eaOyw2It-eh5guqDUJeKbJh1p8g.crl (hash: zjz51gVuRQmOFoEnJ69dfr/n0830offVQZacnTI8RbU=)
4: sKFV1IZJE6PHOD4OWD9PuwV-r0c.roa (hash: FEZExqLNwEb0ZHJP/qaT8YTmmptHTZovCZeuHCrrdBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:55:63:64:c2:0f:33:3c:23:59:7f:a9:2f:fc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Nov 11 03:01:19 2025 GMT
Not After : Nov 12 03:01:19 2025 GMT
Subject: CN=e956c528e9eada0aab4998d412a37302a36003e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:09:7b:37:2a:b1:46:64:52:23:10:48:43:40:
35:dc:c7:69:73:32:95:0d:96:ee:18:54:9e:5c:7d:
65:cb:e0:1b:8b:60:aa:3b:42:90:fb:9e:27:e5:18:
7f:c7:bb:1a:e2:e9:a4:cd:c8:ba:49:96:b6:5e:73:
78:ca:f4:c7:a7:a0:bb:e0:70:01:88:44:56:86:dd:
c4:75:58:36:3b:07:18:50:fb:6d:be:0c:56:2c:74:
f3:e7:d5:36:79:c3:af:8d:0e:4b:4f:33:53:21:27:
00:b7:f4:03:b1:a5:e4:52:1c:f7:a3:96:ed:a7:47:
d6:bf:e0:3f:e6:a7:20:84:8a:dd:9e:56:d5:21:91:
ba:ee:17:22:df:69:b1:4b:7c:76:91:da:c5:ef:01:
5c:06:44:84:d1:4e:a3:50:d8:ea:bb:91:54:0e:d1:
97:ee:8d:3b:b9:34:1b:f4:ed:af:29:a5:17:80:ce:
c9:e5:17:10:e1:00:3a:c5:70:ad:9a:29:54:82:c1:
1a:70:5a:b0:17:0b:e2:40:a1:2b:79:aa:c4:f0:f1:
46:3f:9f:07:3c:aa:04:1a:e5:49:61:ed:a4:ae:bc:
85:4b:11:c7:0b:b8:8b:f9:3b:b7:d4:6b:fb:4d:cc:
eb:dd:15:bb:f7:24:06:ff:d6:91:68:99:50:a0:47:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:56:C5:28:E9:EA:DA:0A:AB:49:98:D4:12:A3:73:02:A3:60:03:E5
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1b:8e:f0:e2:3d:f8:a2:bc:69:c6:ca:7f:9f:82:95:99:15:
fa:94:76:39:02:d9:a1:9a:b5:42:8e:a5:95:d8:3f:b8:a6:83:
36:e3:ce:8c:54:cd:8e:62:85:ae:c1:7f:40:5b:d6:12:6f:57:
54:a2:0b:29:dd:01:b6:5a:55:ef:c4:76:a8:a9:79:95:25:4e:
1a:84:c8:18:c5:39:b5:62:6f:69:80:bd:36:63:d8:9d:0d:69:
e3:ba:4e:07:ac:9d:46:11:64:84:52:da:2a:36:b8:f6:ab:e0:
56:a9:0b:63:9b:29:75:b1:2c:22:61:a2:8a:11:2f:4e:5b:75:
43:eb:4c:9a:9e:32:d1:51:bf:97:4d:78:66:81:ba:5f:6b:91:
be:16:d3:cb:5c:c4:57:fd:5e:32:8c:5e:0a:15:dd:2c:93:60:
29:93:44:7e:92:a5:8e:81:5c:d2:84:32:5b:12:bb:ce:4d:0a:
84:5f:f5:62:bb:61:77:6c:ab:54:52:d1:71:43:ee:69:49:b4:
f7:e5:5b:53:49:de:89:9f:c0:54:21:63:2f:d1:77:0a:c8:70:
f0:e4:5d:98:68:99:53:c0:8d:3c:bd:01:5a:95:7a:6d:df:d8:
f1:16:ee:47:9a:2b:bc:72:d5:87:50:2a:12:d1:50:1e:36:22:
30:2f:1e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:15 2025 by rpki-client