Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
File: eJaox-m6CdLx1EhjZwviE_wMohA.mft (raw, json)
Hash identifier: 4ff+DaTFfNFY5IZ4Ps/YXsUWZx1vYm9kpKhlJ1uk+Z8=
Subject key identifier: FF:8D:0A:51:60:0E:4D:76:11:A3:04:AE:C8:C5:71:94:4A:66:3A:07
Authority key identifier: 78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10
Certificate issuer: /CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210
Certificate serial: 019A7337F52284E61CFE1670BAE8F6894EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
Manifest number: 02C8
Signing time: Tue 11 Nov 2025 14:00:38 +0000
Manifest this update: Tue 11 Nov 2025 14:00:38 +0000
Manifest next update: Wed 12 Nov 2025 14:00:38 +0000
Files and hashes: 1: eJaox-m6CdLx1EhjZwviE_wMohA.crl (hash: aigxVHfEQDRSLvhUf8XjBHW47xNtWwbcRJBbej4+ZlU=)
2: wduzAoCV3X_HT3SwkAkhVbUpjvk.roa (hash: xcQexB5syiRJfDRPxaM63gktKvSVatGww4DJIDGRPJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:37:f5:22:84:e6:1c:fe:16:70:ba:e8:f6:89:4e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210
Validity
Not Before: Nov 11 14:00:38 2025 GMT
Not After : Nov 12 14:00:38 2025 GMT
Subject: CN=ff8d0a51600e4d7611a304aec8c571944a663a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:e9:bf:10:5e:14:f4:d7:07:c7:32:7f:f4:
89:7a:0d:70:2a:29:3a:db:e5:32:4a:26:0b:c5:35:
26:62:dd:40:f3:04:0b:b9:ca:15:22:9e:75:5a:d6:
b8:78:29:38:c6:cb:43:dd:ca:04:9e:fb:79:d9:d2:
0c:29:e1:4a:bf:aa:04:70:78:d1:c0:20:92:8d:78:
61:c0:06:16:22:ba:9b:3c:c1:b9:00:ab:4c:59:81:
cc:8d:46:18:0c:9d:8e:0b:39:a6:f3:2a:7e:d3:1e:
e9:88:95:df:d4:a5:b4:ee:c9:66:c1:0b:9c:bc:e1:
30:06:d8:0d:fe:f2:8e:cc:9d:13:bb:1a:f5:03:94:
b8:57:0f:65:54:47:47:f3:1c:71:5f:2e:67:c2:8d:
8a:eb:d7:cf:0f:5c:c3:1f:67:98:83:6b:f9:8f:1a:
e9:d9:27:5d:97:63:1e:49:5a:94:7a:0b:eb:4e:5b:
f0:8b:a8:26:9d:75:af:c1:fc:2e:10:5d:23:28:67:
c1:a8:8d:9a:89:eb:fe:09:c9:ca:d1:63:1c:fc:d6:
b0:70:c9:e7:a5:60:e2:3b:0f:40:fb:62:d8:d7:b0:
34:7a:ba:cf:cf:9b:c2:28:b2:03:df:32:a3:25:d2:
fe:d5:2a:76:e8:18:ea:ae:ad:3f:70:55:7b:94:5f:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8D:0A:51:60:0E:4D:76:11:A3:04:AE:C8:C5:71:94:4A:66:3A:07
X509v3 Authority Key Identifier:
keyid:78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6d:d8:87:15:b7:2f:b6:9f:83:41:d4:86:bb:c9:b5:c5:fc:
e2:53:cd:55:ea:47:24:1f:0b:54:90:8a:ba:2d:98:8a:44:70:
3c:4b:41:00:2c:be:13:fe:9f:29:75:27:4a:d3:36:24:e2:d9:
3c:10:51:fc:08:df:63:1c:0c:53:68:16:f9:76:73:b7:f2:6e:
f0:a4:41:f7:2f:0c:df:67:c2:d2:f9:0b:33:7f:cf:30:a0:21:
07:55:27:9a:d2:d0:38:47:b6:f3:16:e1:38:d1:da:67:39:9a:
40:b9:a5:01:5f:30:a0:d5:41:13:f9:dc:bf:53:d4:1a:e6:b6:
8f:72:18:4d:5a:04:6f:0e:98:8f:f5:15:c4:a5:56:0a:66:63:
6b:de:08:2d:86:df:53:bf:cd:7d:f2:30:01:15:f3:4b:9b:5c:
ff:bd:5f:56:15:9f:07:52:27:2a:ea:3a:c1:c2:e1:4b:b6:54:
9c:51:5a:00:e2:48:7c:66:72:7a:aa:08:82:0b:83:92:9a:ef:
48:78:38:49:30:ae:49:63:fb:8b:95:d4:97:ff:f7:19:12:82:
57:40:f6:8b:d0:a9:94:b2:2f:40:52:a0:5a:2d:da:07:2c:90:
b9:dd:1b:99:78:08:54:9c:6d:c8:a6:91:29:07:13:43:43:0e:
e8:02:5e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:15 2025 by rpki-client