Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File: ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier: 9byfUXf9tU28mbzyoepoVclwyHXfWrZWxZxuTUvWgmk=
Subject key identifier: 3A:7D:43:EA:0F:AE:A8:55:D4:BA:B6:B0:DD:68:89:58:E2:48:3E:D2
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 019A7149A0EB6C213361F36A60DA3BA68A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number: 1736
Signing time: Tue 11 Nov 2025 05:00:41 +0000
Manifest this update: Tue 11 Nov 2025 05:00:41 +0000
Manifest next update: Wed 12 Nov 2025 05:00:41 +0000
Files and hashes: 1: L1ShoUFH_3QzKX_ke8HAX0Fww6c.roa (hash: FUc2MDD+4o/7JlgpFpcB29tfev/YxELBDTuLaAO672I=)
2: ZrX8NZOF_lteMSM3oZka22ZVn3E.roa (hash: cAb9eZ4FePRwUO0ACpP0sUggRm8S5e53qPUlHsPvg2Q=)
3: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: pJ3caBZaom6NXO2bNA9U56KXbHINLvz4Q/L4bKSTGgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a0:eb:6c:21:33:61:f3:6a:60:da:3b:a6:8a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Nov 11 05:00:41 2025 GMT
Not After : Nov 12 05:00:41 2025 GMT
Subject: CN=3a7d43ea0faea855d4bab6b0dd688958e2483ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5c:37:82:80:c9:21:84:b9:c2:ad:9e:7b:ea:
83:1b:c6:d7:bf:58:5d:fd:46:1b:c0:e1:7b:65:d6:
4d:e6:3d:f5:5e:98:b4:ee:de:c5:e5:58:a6:41:48:
22:1a:80:59:ec:26:f5:59:cb:0b:54:35:f5:94:ac:
44:dd:74:16:8b:dd:07:1d:2e:31:72:f1:f2:88:79:
fa:4d:09:be:e4:35:50:bd:85:f9:be:44:5f:3f:e8:
d0:58:38:55:c6:f7:3d:7b:f6:44:06:ee:6b:3e:5a:
00:de:82:b8:69:06:a9:5c:d2:8d:5f:bf:7a:1b:de:
2b:bf:f2:c6:46:ac:04:0c:3e:09:fa:9a:8e:21:c5:
81:bc:64:f4:37:de:ed:c7:47:6b:16:4b:48:e5:72:
d3:45:3a:bd:69:13:f6:43:7b:c4:75:41:b0:21:06:
26:2c:43:24:b1:63:e3:4a:7d:01:61:5a:88:ff:a9:
22:6f:29:34:81:62:0f:d8:47:d5:60:71:af:07:80:
31:49:bf:5c:7f:57:bc:1e:31:3e:57:31:05:97:1e:
c7:eb:b4:e7:55:fb:92:5a:15:10:41:4d:4b:7c:e4:
c0:db:47:60:05:ca:88:35:a0:52:b4:36:7c:52:db:
7d:05:81:3e:45:d8:5c:72:17:c6:f6:57:1f:1a:c5:
6e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7D:43:EA:0F:AE:A8:55:D4:BA:B6:B0:DD:68:89:58:E2:48:3E:D2
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5a:56:ab:4e:02:a6:db:9c:c0:b8:2d:60:31:eb:08:14:8c:
7b:33:06:93:6c:bb:79:7e:f0:84:5e:3d:ed:93:c3:54:b8:a8:
59:74:a4:6f:d4:23:1f:15:fc:b5:ea:74:21:1b:ab:d6:80:7b:
5e:34:1e:b5:75:1e:12:32:c6:9f:07:20:34:55:21:eb:48:0c:
12:e4:18:31:47:22:aa:ea:1d:53:a2:dd:30:f4:0e:76:33:ae:
d8:be:9f:6b:90:66:9b:de:e8:f0:c8:f8:82:6b:3d:62:e2:a9:
de:8a:1e:ad:dc:c1:0a:f9:4d:1c:e1:49:52:ad:76:b6:0f:94:
97:45:05:5e:e8:e5:d3:fa:00:23:3c:79:fd:1e:62:38:e0:53:
96:3f:6e:b6:18:e9:ed:21:a0:cd:26:b8:2c:5e:a3:1b:90:6b:
f4:b6:e5:fb:de:d1:bf:19:df:8d:4b:50:46:ff:a7:06:9e:96:
e1:37:1f:b2:9f:f4:45:5a:15:44:03:a7:a0:3f:c2:bc:8b:ba:
f3:8a:36:db:37:44:4f:4b:28:c4:a2:48:8d:f7:0b:e8:8e:d9:
b8:88:43:d9:c8:df:ef:c0:c7:8f:7c:13:cf:4b:50:4c:70:4b:
10:36:c4:50:e2:30:ca:21:97:12:22:3d:5c:77:b4:d8:1d:8a:
9a:04:eb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:32 2025 by rpki-client