Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File: eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier: Tv12L4805va+RnanSZMgdu6IvG8tgZ7qbq28eEykDS0=
Subject key identifier: CD:D8:65:DD:9B:79:98:16:C7:2C:B1:D5:50:87:E3:80:2A:03:EB:6D
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 019A70007775B99BF92422E05926EC4C894E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number: 0F33
Signing time: Mon 10 Nov 2025 23:01:10 +0000
Manifest this update: Mon 10 Nov 2025 23:01:10 +0000
Manifest next update: Tue 11 Nov 2025 23:01:10 +0000
Files and hashes: 1: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=)
2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: yXDg+pP4eDfbsGDV/4FBPXFwwpUTNAI8lW02MwfRBK8=)
3: j19e3OGI3m7IPEQhb3MKwpoUOCs.roa (hash: +WycMWrDP/rwdaeXbKTNVGF1PSRCM5JvbxR88xQEwA0=)
4: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:00:77:75:b9:9b:f9:24:22:e0:59:26:ec:4c:89:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Nov 10 23:01:10 2025 GMT
Not After : Nov 11 23:01:10 2025 GMT
Subject: CN=cdd865dd9b799816c72cb1d55087e3802a03eb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:1f:86:71:a6:53:79:49:6c:02:e1:70:f7:
56:45:da:5a:cf:40:79:54:32:50:f3:b1:7c:fb:77:
2d:44:7d:44:5a:02:a3:76:d0:ba:15:d6:21:37:a9:
e8:ea:d2:ee:15:ce:1d:5c:b0:92:6c:d1:e8:8c:37:
96:b2:30:bf:49:db:e6:45:70:37:2c:5f:f7:6d:63:
89:8b:e5:03:49:19:95:56:21:61:71:ef:d3:5a:d5:
d3:f7:6d:a7:2b:28:69:39:f2:8a:36:37:91:3c:b4:
d5:ff:b5:61:4f:02:fd:b2:d0:c2:d3:e2:30:15:e1:
f4:e5:ea:84:7c:a4:c6:f6:56:29:5b:b1:b6:03:74:
99:f1:ad:48:21:08:0e:89:de:2c:78:ea:33:0b:68:
c5:ed:9b:7b:46:30:65:4e:4d:d9:81:7b:08:89:74:
20:8e:a4:ba:08:29:3c:04:36:4e:b2:d1:1b:92:d4:
98:b3:5c:ac:01:cf:75:53:de:2b:db:7a:7a:cd:da:
95:b7:8c:b0:36:c7:52:54:30:55:0e:1a:2a:41:63:
7e:50:2b:c9:62:53:4e:b4:d2:ef:c6:da:5c:41:d9:
f2:49:a6:c8:91:58:51:61:77:07:8e:22:18:10:f1:
0f:56:a7:ab:13:b6:74:c1:ca:12:06:05:df:8f:78:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D8:65:DD:9B:79:98:16:C7:2C:B1:D5:50:87:E3:80:2A:03:EB:6D
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9a:dc:46:42:13:90:48:59:bc:7b:1c:0c:aa:a3:a4:1a:c0:
f2:19:d7:8c:ac:d8:cd:eb:56:46:7d:60:ea:b9:d7:35:56:a7:
d1:2e:6b:a6:70:c3:52:ec:2c:20:b7:d2:bc:0b:79:69:a8:47:
f8:f9:4e:25:04:34:fc:8e:78:93:bc:7d:c8:83:d5:a5:2f:66:
bc:7c:d9:ff:a4:8b:c0:ab:9f:b7:3a:f4:ec:af:ec:1f:27:b6:
d0:21:21:29:57:f1:5c:78:5b:c4:ce:93:32:95:43:63:b6:f7:
ce:0c:65:51:f2:17:c6:b2:50:f3:32:f9:e2:a6:30:66:3e:7c:
2b:c0:58:20:fa:db:4f:02:d2:76:bc:9d:de:b1:e4:37:42:6c:
29:c4:59:92:db:33:0e:19:0c:8d:3d:c5:27:45:e9:34:bc:51:
b3:f9:48:b7:b8:1c:97:25:87:be:5c:39:43:6d:51:84:d4:98:
c5:d1:d0:eb:9a:29:eb:80:40:ff:fa:49:b1:9d:b9:64:09:fe:
dc:ba:6b:8a:35:8e:94:04:65:ad:63:3e:ee:40:44:8d:64:97:
16:d1:e2:6d:43:d4:41:0a:63:4a:69:b7:5a:b7:2c:e9:be:94:
33:b6:6c:e4:ae:fc:fb:d5:8e:fc:1c:b5:3c:6f:19:5d:2e:62:
55:24:d6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 05:27:39 2025 by rpki-client