Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier: BibvSU5KcfbGs2qO6oeVQZDYxEtL91fbmmBYrorOwtI=
Subject key identifier: E1:F3:8E:D1:D5:91:B5:72:57:6A:D0:70:9E:F3:B1:48:5B:8B:62:A9
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 019A24E637C2B3750D8680943D5D62C36EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 09:00:58 +0000
Manifest this update: Mon 27 Oct 2025 09:00:58 +0000
Manifest next update: Tue 28 Oct 2025 09:00:58 +0000
Files and hashes: 1: 1-15VXX8nVt-lY3LiGzv1Jr6OcwM.roa (hash: SlkmWz0jcL6xUXUhTFQpLdotJEVgcyVB/xztx7GovmM=)
2: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: BB7jTnYJWQp8K2i1iEYh8oZ/tecrJKg26cvub2Qg+9E=)
3: gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa (hash: +WQhnu3iWgtDqgj16Fdo45N/RQNl/1eQLYZcURm+NBk=)
4: tMCKKQ7T7_7JMjdc5UvMftnS0Sc.roa (hash: kzZ53feDoHQUM5QIs7aC6l1igadYhsq3pYnx3tG/SUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:37:c2:b3:75:0d:86:80:94:3d:5d:62:c3:6e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Oct 27 09:00:58 2025 GMT
Not After : Oct 28 09:00:58 2025 GMT
Subject: CN=e1f38ed1d591b572576ad0709ef3b1485b8b62a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:73:ad:a5:8b:17:f4:fe:17:c2:bf:42:85:
79:38:5d:e6:0f:0e:ad:50:f0:0a:c6:df:fd:28:3d:
ff:cf:a5:7b:f1:60:c1:0b:0a:fc:35:44:b3:4c:df:
29:16:0f:ed:4e:ee:e0:68:25:42:9c:9a:6f:fe:12:
4d:a1:80:09:ff:18:dc:31:68:fb:87:55:c9:18:c6:
df:ca:00:06:01:04:32:43:cc:26:22:fc:b6:50:38:
65:8b:cc:49:a9:4b:9d:84:ef:6d:68:03:cb:ab:2e:
f3:a3:f4:d9:03:92:aa:4b:1d:89:99:32:5e:fa:43:
5e:cd:e9:00:35:82:8b:a7:3d:90:e0:f4:8d:bd:3e:
0a:83:21:e3:54:d8:71:e3:43:9a:93:64:a5:5f:bc:
99:1a:21:09:07:3f:7a:da:cd:40:7c:e7:b8:5c:46:
4e:b4:14:8c:e7:05:ca:0d:bc:02:92:c7:38:ff:ce:
79:3f:51:db:a5:69:78:e4:f4:34:01:fd:c4:57:45:
9f:48:a2:31:e9:a9:74:4a:7c:8f:2b:b9:8a:2e:1c:
e5:b3:15:e1:af:6b:ff:23:38:1c:74:60:c0:b7:ed:
82:d6:e8:05:23:2b:70:bf:76:52:b3:5a:07:04:10:
ad:7e:20:03:1e:39:a4:96:75:a8:e5:94:5b:aa:dd:
ad:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F3:8E:D1:D5:91:B5:72:57:6A:D0:70:9E:F3:B1:48:5B:8B:62:A9
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:53:7b:e7:df:a4:d9:d1:fb:66:e4:e3:0f:59:87:f0:23:2c:
e9:35:0b:5a:c7:ff:87:9d:75:77:d7:17:d0:1a:0e:8a:f3:07:
d9:63:1e:2b:05:fd:4e:8c:75:54:0c:fa:47:91:43:f7:94:2a:
0b:29:19:1a:d7:ef:73:1b:83:16:fe:a1:f9:61:54:a0:41:98:
99:3a:bb:4e:85:9e:d2:e6:90:96:5f:2d:64:c6:e3:e3:2b:f1:
8f:a5:4a:68:51:e0:1a:f1:17:e9:3b:c7:a9:5e:73:6b:bd:34:
04:de:ce:1c:77:3a:81:08:cf:d0:e0:d4:92:78:64:a7:0e:dc:
69:0e:8a:34:a9:39:46:22:a0:2e:7c:91:f8:9a:65:f2:48:a8:
e0:16:b7:17:d7:f3:93:c9:c0:01:7b:42:8a:18:ea:4e:fa:09:
6c:a4:ce:14:9b:de:bc:0e:c5:c3:10:e4:fd:d9:8b:fe:6b:c3:
b0:71:9f:e7:55:8b:9b:8b:65:97:12:1c:37:0b:d6:c6:98:61:
ee:fc:db:f9:c6:51:dc:1d:53:d6:7d:05:bc:99:0e:e6:d3:c9:
00:d3:e1:43:74:8f:e4:70:e8:f7:3c:57:b0:9b:f2:ca:ab:a3:
f6:52:f8:c7:2c:4c:b7:0f:99:b3:6c:85:57:1b:52:87:6d:06:
80:be:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:47:27 2025 by rpki-client