Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier: HGn3pkwfl9aJVG/vRNLKpak3DQx0uyO1oU0+c2g6izY=
Subject key identifier: BD:70:53:31:32:7E:A8:72:D1:16:69:B7:FC:5E:41:7E:56:FE:5D:9A
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 019A09DC57DCC0612D6444FE171BB0D4232E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number: 0B42
Signing time: Wed 22 Oct 2025 03:00:26 +0000
Manifest this update: Wed 22 Oct 2025 03:00:26 +0000
Manifest next update: Thu 23 Oct 2025 03:00:26 +0000
Files and hashes: 1: 2nu94bRpDMa-mlfbsC1YR4mecUE.roa (hash: Q8+h45/Keq7mex3FbK0PPZB2TjbV76+31mEqnwydPl4=)
2: GFp4I3LPH9Bw9YNNwWHq6X0Ax-w.roa (hash: h4/2+JBtszFNERDw2wk+3LUP56k2mKHWWkwlM0aD/BM=)
3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: lxE7mfllcrtZH0sjkkqMHy/XgH6vAhRYAdp2LWa9DJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:57:dc:c0:61:2d:64:44:fe:17:1b:b0:d4:23:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Oct 22 03:00:26 2025 GMT
Not After : Oct 23 03:00:26 2025 GMT
Subject: CN=bd705331327ea872d11669b7fc5e417e56fe5d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:08:af:f6:83:41:93:01:37:30:9f:40:b8:
ad:87:48:47:ba:f0:25:36:45:ab:3c:65:62:3e:d7:
b1:31:d2:75:51:df:df:53:0b:c3:75:3a:c6:a8:71:
91:0c:3b:bc:0a:f6:1c:2f:ef:88:0c:c6:0a:17:2b:
23:d5:6a:49:5b:8e:5c:8e:e4:8e:c2:fb:69:9d:f5:
2e:c1:d9:ac:15:1f:bf:a9:26:ec:6c:9c:19:f1:3e:
3d:9a:7f:bc:4d:64:6d:25:1a:f2:2e:ed:d6:d3:d1:
d7:61:82:0a:1f:b8:f2:de:f0:d9:f0:44:4a:e1:ce:
db:f5:25:00:0b:26:b6:85:41:f3:f7:51:6b:b3:0c:
0a:a4:f3:a6:10:0e:71:11:2e:1f:ff:3d:57:ce:ce:
eb:09:1b:54:c8:ca:0e:e5:c0:06:02:f6:d0:b0:c9:
0c:5a:18:90:db:66:21:12:20:29:53:ec:ec:2c:93:
e5:f8:7d:28:f6:43:87:ab:28:77:14:28:69:f4:01:
fb:d3:e9:4f:e2:d7:6d:39:d3:09:ba:39:3a:15:b3:
c6:4d:2d:45:d4:c6:74:06:20:c0:f8:6d:4b:71:3e:
ad:23:65:7f:16:8d:40:8c:92:28:e5:14:4f:b0:0b:
40:22:18:3a:70:90:b1:1b:11:d1:ec:7d:2f:2c:8b:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:70:53:31:32:7E:A8:72:D1:16:69:B7:FC:5E:41:7E:56:FE:5D:9A
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:da:a4:0c:4a:7a:35:0b:6b:68:89:7d:61:e7:d5:96:43:2f:
75:0a:41:48:72:6a:e0:8d:ec:3a:ec:74:c1:4e:68:c6:2b:39:
58:ca:c9:af:af:a1:e3:63:e1:6c:8c:16:56:d6:d5:e4:f5:fd:
ad:0a:6a:6a:cb:83:52:fc:8d:b3:62:b6:d6:62:ca:d8:08:f5:
b8:6f:e5:b7:83:e8:47:c9:46:ea:26:3f:73:32:3d:b4:3c:e2:
db:2f:7d:10:17:a9:88:3f:b7:eb:bd:08:95:60:12:cc:69:f9:
6d:59:a8:8f:e8:c8:b3:b4:9f:b0:11:5b:d6:25:74:c1:f8:7b:
0f:34:3f:e0:b4:d1:9c:9f:98:61:9d:d7:e4:1e:cc:7c:d4:b3:
0c:83:15:43:52:5b:a4:9b:25:07:e5:a1:7b:d9:19:92:d8:0c:
75:a7:b2:4a:03:14:3c:33:07:bf:02:eb:7a:8f:82:c0:e0:4d:
3e:cb:dd:55:7a:87:d4:99:fd:d6:2d:82:14:d2:3d:76:2c:6f:
ea:cf:0e:b8:aa:c4:fc:da:9b:f6:94:7c:dd:fc:ce:d4:01:b5:
a7:74:a3:bf:ca:7a:d2:59:25:7b:25:53:a2:30:e1:ef:96:ee:
9c:44:e0:3b:9e:b9:47:34:10:a3:95:e2:ac:6b:b7:d4:c2:25:
3f:a6:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:31:45 2025 by rpki-client