Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
File: eXpIzBPiAOLT84r4MxjRvK9vYzE.mft (raw, json)
Hash identifier: yMrMKT20NL0gZFOMh2XzHpIoYYztguEZp0fXBzLfo68=
Subject key identifier: A7:3C:DF:3E:0A:B5:BC:7B:EE:80:BB:56:AE:3D:05:43:58:51:10:9D
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 0199FCC66EEE969F8ABB65D2AF8A79B21607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 14:01:26 +0000
Manifest this update: Sun 19 Oct 2025 14:01:26 +0000
Manifest next update: Mon 20 Oct 2025 14:01:26 +0000
Files and hashes: 1: 7BO8TZ7ATCsCuTGlJnm0y-khSyU.roa (hash: x6i25XfL4F0gRp6H2u4+rOMQs65WiJ45VD9+0G2z3+I=)
2: FWiPIHCHDr0uKdyZ_foi8pOa3qE.roa (hash: DmpIUKQykitdg60h0JYisIxDWolUrUFXqS52YO726hw=)
3: aNixjFy8ziG3vjf15zAVaRB-c8A.roa (hash: EnnotKECMV4Ndd6+GZEZZLejmbdDUCzQTSAS/USoOkg=)
4: eXpIzBPiAOLT84r4MxjRvK9vYzE.crl (hash: gw6QUSN4OnFhBrRj6s5KYUDk1wf5TTx686eYpXVAbhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:6e:ee:96:9f:8a:bb:65:d2:af:8a:79:b2:16:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Oct 19 14:01:26 2025 GMT
Not After : Oct 20 14:01:26 2025 GMT
Subject: CN=a73cdf3e0ab5bc7bee80bb56ae3d05435851109d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e0:92:6e:61:60:3f:25:b1:6a:97:0c:10:ad:
f1:9c:b7:5b:9a:ef:10:37:4e:e5:ea:67:e1:bb:f4:
b6:7e:4c:b7:66:40:0b:cc:f3:3b:67:05:b0:15:10:
f0:04:f3:21:ff:03:a3:ed:60:25:34:20:f8:56:d0:
ad:47:95:47:da:17:51:86:7f:ce:89:80:cc:8b:86:
14:78:48:45:62:9b:52:bb:5e:4e:f7:b4:52:d1:5a:
e9:3a:5f:a1:d6:8c:63:0d:70:a4:a8:c4:89:fa:a1:
b4:84:41:9f:b5:1f:30:c0:77:34:1e:e9:5f:68:ca:
bf:d7:fb:6e:58:39:28:40:6e:48:35:5d:a1:59:ca:
e2:75:51:da:4b:78:82:d1:2a:dc:66:fa:c1:86:90:
89:49:72:a8:e6:61:bd:5a:4e:03:7a:e8:eb:dd:3b:
d9:fc:53:cc:19:b0:c1:1a:65:3d:ce:dc:b2:09:0f:
f9:44:4b:e7:64:24:66:fa:06:98:fd:10:90:40:0d:
6e:2e:34:c0:2c:6b:ca:b8:b7:ee:5a:bf:6d:0c:ed:
6d:db:38:70:d7:e4:cd:42:32:1d:7f:22:00:84:f7:
4a:4e:68:b1:90:15:a7:9c:e5:6d:6f:7f:6e:aa:b6:
91:3c:46:68:3d:ae:2d:0e:fe:e5:c8:a5:4a:8f:f4:
fa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3C:DF:3E:0A:B5:BC:7B:EE:80:BB:56:AE:3D:05:43:58:51:10:9D
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:53:86:8a:a0:fb:ef:83:43:5e:54:e6:65:a1:79:04:9f:81:
3a:cd:ec:38:a7:fa:39:8c:3f:fe:60:b3:34:3f:e5:b7:d2:f4:
12:c2:99:54:9d:5e:0f:b4:d7:94:d9:5c:b2:ff:db:af:cf:9c:
8b:00:a5:b6:7f:45:6f:31:ad:12:8b:7d:fd:6d:ca:43:68:b0:
41:4d:80:b6:c7:b9:4b:81:79:a1:49:86:c4:5a:0b:15:17:12:
5f:d8:e5:96:69:07:0c:0e:cf:fd:d8:ce:de:84:e0:05:38:89:
af:6a:1b:86:ad:3c:5c:e0:41:96:9d:4c:45:70:59:c6:eb:0d:
f2:09:20:c6:e3:6c:3d:61:65:2f:c8:70:f5:70:bf:21:37:e5:
61:85:01:52:57:b5:02:b2:df:5e:cc:59:65:2c:92:3e:f8:d8:
37:d6:bc:bd:a0:31:55:0d:59:83:66:0e:24:d6:f9:6a:c3:ed:
f6:5b:16:3a:7a:cd:de:bc:f3:5b:e7:8a:dd:dc:cc:de:df:5b:
a5:40:05:10:2f:e3:c5:26:6d:88:a4:ac:2b:26:2a:3a:dd:a5:
24:81:93:ba:6d:08:8a:5b:6c:66:3a:f3:16:a8:34:32:a4:65:
34:ad:aa:e1:6c:e0:b7:7f:4d:f6:9c:7f:3d:f4:e9:47:8e:89:
35:d9:a0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:43 2025 by rpki-client