Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier: 4SQwx2M/UdrePCZst0jnTOLiY//wAJ0dHuaMrVQ95yQ=
Subject key identifier: DF:61:87:1D:F4:59:99:48:B5:E5:9A:36:12:FD:3D:3D:EF:63:26:E8
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 019A72257F79BA26E1CF4BCA70BC8A11B91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:00:51 +0000
Manifest this update: Tue 11 Nov 2025 09:00:51 +0000
Manifest next update: Wed 12 Nov 2025 09:00:51 +0000
Files and hashes: 1: 4-Hd07EQEQSMnF-RmoIQG-f-msw.roa (hash: 5L2RHjf2nHKLV7uL0XKnWxDBxm9LnDeMDKIuvtcOWVI=)
2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: POuWF0MJH+4AO9k7GljjGunowDWFLaDDRfHQ4wo8Vzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:7f:79:ba:26:e1:cf:4b:ca:70:bc:8a:11:b9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Nov 11 09:00:51 2025 GMT
Not After : Nov 12 09:00:51 2025 GMT
Subject: CN=df61871df4599948b5e59a3612fd3d3def6326e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:aa:43:71:2f:48:ad:45:b8:9a:42:1e:b0:
c2:59:d5:7c:9f:13:f7:08:cb:fc:74:7a:47:87:75:
e7:28:59:af:af:3a:29:a2:3d:f0:02:32:08:f5:5d:
25:1a:01:de:d0:8b:9b:db:ec:28:34:8d:b5:7e:da:
59:15:62:2e:85:2b:d6:59:20:48:e4:2c:25:bb:e7:
b5:bb:37:a0:9b:83:5d:26:d0:cc:c6:54:ab:7c:ec:
d0:06:3e:4e:3e:d8:d9:8d:cd:56:70:39:78:79:ec:
d7:c9:1e:e8:51:de:64:7e:49:a5:d5:8c:ca:49:53:
cb:62:3f:3a:6a:47:c0:39:49:d3:ca:58:3b:2f:20:
04:53:14:72:c3:0d:c6:08:f0:a0:d6:ed:27:c9:af:
82:39:33:82:d9:5f:2c:35:3f:06:af:d5:c5:e9:4d:
84:e1:3f:87:f6:dd:6a:c4:e0:40:7d:dc:74:7b:38:
12:c5:65:b0:4d:25:29:36:b7:c2:47:19:c3:d9:3a:
0a:63:11:af:0a:83:2f:46:f4:6f:3f:b0:be:3b:d0:
33:1b:37:05:2a:63:73:ba:dc:5a:18:53:7b:df:a2:
1c:1a:65:08:ab:a4:3f:6f:63:50:d5:de:29:7a:a7:
60:62:bd:e0:60:af:e1:c3:17:26:dc:a5:01:e4:d6:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:61:87:1D:F4:59:99:48:B5:E5:9A:36:12:FD:3D:3D:EF:63:26:E8
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b1:0c:2b:61:2e:bc:52:68:94:78:41:ee:49:56:9c:53:83:
94:cf:59:15:60:24:24:44:5c:1c:0b:f3:e4:2b:a9:d1:29:18:
49:72:35:bb:76:31:3f:a3:6a:80:51:1b:67:93:e5:a3:a0:ce:
f2:47:d8:4a:22:a5:2e:6b:98:00:e1:1b:d5:1f:13:00:50:61:
e3:6c:c0:19:aa:99:7f:38:30:04:ed:6a:01:d6:74:33:f7:12:
a6:95:ff:5b:d7:2a:46:e6:6f:06:54:1e:57:35:29:53:e8:52:
d4:89:ec:a2:1c:ea:a5:c6:59:0f:6f:12:27:1d:c0:bb:8a:b9:
c8:8f:79:a1:4e:f8:23:4c:00:98:6c:6a:0e:34:f9:83:65:0f:
8b:70:70:e0:65:0b:c9:23:01:d1:e2:e5:5a:b6:62:f0:7f:b1:
29:20:6e:e4:9d:2e:3e:da:72:8d:98:1d:32:57:12:f2:ea:56:
f2:64:83:61:c9:99:92:b5:1c:67:03:85:a9:9f:c4:25:af:8d:
8b:ed:c5:7f:93:a4:1a:4e:01:fb:f3:06:4f:e1:ed:04:e8:90:
c0:37:d6:f4:bb:22:d8:c4:99:b7:14:88:be:9f:8e:0e:44:f5:
1e:b9:eb:07:db:a8:6c:a3:05:71:7a:62:17:ed:39:fa:4d:0d:
13:07:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:01 2025 by rpki-client