Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
File: eLHb4vrypuffpXTOVRkJYwFfHFM.mft (raw, json)
Hash identifier: BAY4j9UXoBJHi7FF+hEnjd1NnCXGXg7VNQ4lDeOx8xI=
Subject key identifier: 6D:68:2C:BD:03:98:84:DE:15:19:41:01:C1:D4:06:3D:D0:1A:08:E1
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 019A722591DBDCF5673B69AE8B333DAD35A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
Manifest number: 170D
Signing time: Tue 11 Nov 2025 09:00:55 +0000
Manifest this update: Tue 11 Nov 2025 09:00:55 +0000
Manifest next update: Wed 12 Nov 2025 09:00:55 +0000
Files and hashes: 1: WzTLOTiHe9vB3hAqlAy8pw18Doo.roa (hash: OSj0Xgv5CShMqmpg0KY2bWpFRvfkFgflayWsnGxuzf8=)
2: eLHb4vrypuffpXTOVRkJYwFfHFM.crl (hash: RTEjjcnyy6MH3IPAIOzK/QVOWXSsDm9457xUBsDQu+s=)
3: fEhR-lCUkZVEdMm1RQIIE8pgNCo.roa (hash: o0vAsrKSY0T4tLyGeQ8NwF7vCi/bDXk5djLv/i3XQL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:91:db:dc:f5:67:3b:69:ae:8b:33:3d:ad:35:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Nov 11 09:00:55 2025 GMT
Not After : Nov 12 09:00:55 2025 GMT
Subject: CN=6d682cbd039884de15194101c1d4063dd01a08e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:32:8a:90:43:4a:d5:fa:8f:97:5b:ed:94:
a8:b0:4d:49:3a:98:7e:96:02:b9:ef:6f:a2:94:8d:
4a:33:4f:85:a6:6b:da:85:4e:50:a4:17:e0:20:27:
ac:74:ef:75:ee:9f:99:ec:dd:47:d5:24:02:77:33:
b6:aa:9c:b5:53:02:46:e7:17:0d:11:44:c0:e5:6a:
35:a7:e0:7b:ab:bf:cc:86:0a:ef:73:b5:f6:6d:39:
6e:cf:c6:53:73:f9:fa:27:7e:a1:36:ce:7c:6c:f1:
3c:58:70:54:b7:dc:32:f5:03:bf:59:d1:ec:e3:90:
5c:67:5f:e0:1e:3e:b1:76:c2:37:95:ca:1d:7f:5a:
4b:7d:95:cd:66:28:d4:6f:d1:ed:28:83:3e:70:87:
68:67:dc:dd:cd:e3:04:17:8b:96:19:e2:ea:71:bd:
b9:2d:26:b0:3b:86:03:22:a3:45:94:20:88:a2:f9:
fb:16:58:9e:13:fe:bb:b6:11:61:95:c6:f9:7e:53:
cb:cd:83:30:92:df:18:63:b2:a1:85:d0:27:ad:06:
77:2a:31:ac:7a:aa:56:ff:77:44:a2:1a:3f:49:f1:
6e:06:1d:39:76:cf:0d:74:f4:2e:32:d3:37:bd:76:
92:72:a9:bb:98:d1:fe:58:f2:39:12:d7:60:35:c2:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:68:2C:BD:03:98:84:DE:15:19:41:01:C1:D4:06:3D:D0:1A:08:E1
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e4:c5:2f:bb:c8:4b:66:1e:7c:27:33:ae:0c:37:5d:81:22:
6b:7d:7d:36:54:7e:24:7b:47:91:0c:b2:34:b0:9b:ac:b9:6c:
03:d1:2b:6b:34:9d:e6:a8:0a:f5:d1:de:2c:e8:b4:08:19:4d:
d8:e2:9f:9c:da:c8:c1:e7:d2:fb:2f:4e:d6:34:04:bd:4c:d2:
6c:99:7e:7b:aa:21:9b:da:ce:f5:30:58:b8:36:fb:57:ca:11:
d9:a3:fc:fd:29:90:eb:e5:a4:32:58:c2:a7:37:cb:7c:9d:31:
b5:6b:d8:7d:9c:c1:c3:ba:73:ef:9e:f6:75:0b:15:70:8c:25:
a9:0d:b4:ec:56:9c:a5:6e:16:9d:9b:c7:6d:55:6c:4c:48:d3:
5a:ee:f4:cf:2f:56:16:e4:87:b6:e3:99:44:06:fc:f2:1d:04:
e4:b2:a7:e8:77:33:29:47:04:5a:00:c9:9e:e2:ac:5e:20:df:
b1:f7:55:90:eb:e9:67:b7:d3:75:43:c3:cc:1c:c3:82:80:24:
11:cd:4d:b3:60:de:22:dc:cf:1c:d8:1f:d2:d9:27:16:4f:b0:
ec:74:77:05:6e:4b:bf:60:0e:db:7a:05:29:9c:5e:b6:18:43:
75:e7:36:a3:33:02:f4:55:44:9b:32:39:09:19:06:34:37:c0:
b2:2e:13:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:41 2025 by rpki-client