Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
File: eLBPuvqja3H8027KULX-DojdNVE.mft (raw, json)
Hash identifier: tVj09T9eS0SMkxp/L3uVUckgW4lJNtGlX0rUT9icvL8=
Subject key identifier: 32:4E:0D:27:D0:99:21:6E:A4:0E:14:F9:8F:89:03:3D:BE:02:97:77
Authority key identifier: 78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
Certificate issuer: /CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Certificate serial: 019A334674A435F953A7D79922FDEE29F10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
Manifest number: 16FF
Signing time: Thu 30 Oct 2025 04:00:46 +0000
Manifest this update: Thu 30 Oct 2025 04:00:46 +0000
Manifest next update: Fri 31 Oct 2025 04:00:46 +0000
Files and hashes: 1: _bd1uUXdWfimJKjSRLsLwjuEcR8.roa (hash: uctm/cSaahCT9GH/ghFykbr6OfbIpXkqwxi32eXN9Ao=)
2: bqoiPzwRe4PUMqiK_-uqiOSrT8g.roa (hash: zxBqKx04g5nB2wdjrM/3iI8Vlwm/BGdUl98rn328O3U=)
3: eLBPuvqja3H8027KULX-DojdNVE.crl (hash: eVixfzXypdf/nCpwWKgt7HatVi2/CNZOvtGlLbM7tZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:46:74:a4:35:f9:53:a7:d7:99:22:fd:ee:29:f1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Validity
Not Before: Oct 30 04:00:46 2025 GMT
Not After : Oct 31 04:00:46 2025 GMT
Subject: CN=324e0d27d099216ea40e14f98f89033dbe029777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:2f:68:30:2c:fa:61:06:9f:22:25:12:13:
5e:1e:59:9a:84:1c:ab:26:df:f7:55:40:32:66:96:
83:3f:55:bd:4e:bb:ab:01:c7:5d:fb:16:c8:ba:1c:
e8:22:0b:1d:f5:3c:c6:db:ca:76:9e:41:fd:95:eb:
55:bf:ea:24:df:5f:d4:a7:ea:24:e7:61:ec:28:97:
fe:0b:2d:e8:c1:2b:cc:85:1b:bb:bc:dd:a0:5e:48:
70:b0:19:6d:06:88:fa:43:63:69:37:c2:05:c1:d8:
09:da:40:dd:c7:7b:fe:63:67:66:90:bf:ba:02:15:
56:bc:02:f5:a0:bd:d2:de:a3:dd:74:a9:23:21:0f:
76:d0:88:5a:e6:f6:d0:94:77:6b:75:3b:9e:73:1e:
80:81:1d:b5:53:0b:ef:34:e0:a3:3c:1f:b4:bc:86:
24:4b:1a:35:cb:cc:1a:a9:9a:7f:e7:4a:cd:bc:93:
0d:90:66:db:3e:65:bc:bc:07:82:d4:56:f0:92:4f:
b9:b0:1c:d6:28:40:85:b3:36:28:a1:63:e4:60:3f:
cb:61:d4:05:22:d1:01:1d:08:aa:57:72:99:96:80:
de:26:58:d0:07:e4:a4:eb:98:59:bd:7c:c9:0e:76:
81:2f:5e:90:9d:e5:23:68:ef:ff:5e:8f:a4:cc:f1:
a7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4E:0D:27:D0:99:21:6E:A4:0E:14:F9:8F:89:03:3D:BE:02:97:77
X509v3 Authority Key Identifier:
keyid:78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1d:92:3f:2d:22:6f:31:91:de:a4:3f:4a:f7:87:e9:87:c0:
3c:9c:46:62:35:6f:bd:c2:e5:11:15:8e:5b:16:6c:46:c8:69:
dd:8a:bc:3b:42:4b:4d:69:1a:95:cb:24:e4:a0:88:47:58:69:
84:13:31:c4:df:f9:d5:67:0d:85:85:52:65:93:f3:cd:0e:c7:
ee:a5:78:42:cb:92:f5:29:57:47:31:64:e3:be:b4:73:34:2c:
ef:17:38:c0:8e:1c:82:4a:03:6d:a0:7d:ab:0e:09:9a:8d:89:
58:e5:a3:6a:04:db:3a:32:85:5e:82:62:b7:4a:40:ef:3b:a8:
0d:63:4f:c5:dc:1c:9e:bc:4c:34:00:e8:6e:44:8f:9b:89:46:
40:86:5a:db:28:67:de:36:8b:66:65:71:92:db:27:cb:e7:88:
5b:50:b9:e8:01:a9:04:d9:eb:b9:bf:1b:97:5b:8d:20:64:66:
1f:79:8b:1e:e2:3f:e2:9e:02:eb:3b:bf:b5:f6:4c:22:dd:aa:
84:85:92:03:e9:ea:fe:19:e1:d1:45:58:83:d8:d8:6b:55:c4:
66:8e:6b:67:7b:f5:65:f4:9d:a0:8c:40:b6:f3:97:b1:17:ee:
75:ea:a9:e9:65:9b:17:c2:0b:ab:05:bc:5a:19:d8:14:74:ff:
13:c8:6d:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZozRnSkNflTp9eZIv3uKfEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YjA0ZmJhZmFhMzZiNzFmY2QzNmVjYTUwYjVmZTBlODhk
ZDM1NTEwHhcNMjUxMDMwMDQwMDQ2WhcNMjUxMDMxMDQwMDQ2WjAzMTEwLwYDVQQD
EygzMjRlMGQyN2QwOTkyMTZlYTQwZTE0Zjk4Zjg5MDMzZGJlMDI5Nzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2EvaDAs+mEGnyIlEhNeHlmahByr
Jt/3VUAyZpaDP1W9TrurAcdd+xbIuhzoIgsd9TzG28p2nkH9letVv+ok31/Up+ok
52HsKJf+Cy3owSvMhRu7vN2gXkhwsBltBoj6Q2NpN8IFwdgJ2kDdx3v+Y2dmkL+6
AhVWvAL1oL3S3qPddKkjIQ920Iha5vbQlHdrdTuecx6AgR21UwvvNOCjPB+0vIYk
Sxo1y8waqZp/50rNvJMNkGbbPmW8vAeC1Fbwkk+5sBzWKECFszYooWPkYD/LYdQF
ItEBHQiqV3KZloDeJljQB+Sk65hZvXzJDnaBL16QneUjaO//Xo+kzPGnMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJODSfQmSFupA4U+Y+JAz2+Apd3MB8GA1UdIwQY
MBaAFHiwT7r6o2tx/NNuylC1/g6I3TVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUxCUHV2cWphM0g4MDI3S1VMWC1Eb2pkTlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jNDFjNzQtMGI4Mi00MGU3LWEwYmYt
MGFhZTFjY2Q4NzRiLzEvZUxCUHV2cWphM0g4MDI3S1VMWC1Eb2pkTlZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9jNDFjNzQtMGI4Mi00MGU3LWEwYmYtMGFhZTFjY2Q4NzRi
LzEvZUxCUHV2cWphM0g4MDI3S1VMWC1Eb2pkTlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnh2SPy0i
bzGR3qQ/SveH6YfAPJxGYjVvvcLlERWOWxZsRshp3Yq8O0JLTWkalcsk5KCIR1hp
hBMxxN/51WcNhYVSZZPzzQ7H7qV4QsuS9SlXRzFk4760czQs7xc4wI4cgkoDbaB9
qw4Jmo2JWOWjagTbOjKFXoJit0pA7zuoDWNPxdwcnrxMNADobkSPm4lGQIZa2yhn
3jaLZmVxktsny+eIW1C56AGpBNnrub8bl1uNIGRmH3mLHuI/4p4C6zu/tfZMIt2q
hIWSA+nq/hnh0UVYg9jYa1XEZo5rZ3v1ZfSdoIxAtvOXsRfudeqp6WWbF8ILqwW8
WhnYFHT/E8ht9g==
-----END CERTIFICATE-----
Generated at Thu Oct 30 06:38:28 2025 by rpki-client