Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
File: EH99C2TJjJno0IaDUFJk1rCL_YY.mft (raw, json)
Hash identifier: wyRNd/QIuy07RO0PSWQQsV3UsrRQUUxH1QdtfWjvyXg=
Subject key identifier: 83:DC:FB:00:60:0C:1C:14:EB:DB:56:DB:ED:96:43:A7:ED:9A:3F:3A
Authority key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Certificate issuer: /CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Certificate serial: 019A1127E77066418E9E6D9B7FE58D7FE901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
Manifest number: 16F0
Signing time: Thu 23 Oct 2025 13:00:18 +0000
Manifest this update: Thu 23 Oct 2025 13:00:18 +0000
Manifest next update: Fri 24 Oct 2025 13:00:18 +0000
Files and hashes: 1: EH99C2TJjJno0IaDUFJk1rCL_YY.crl (hash: ZmQXBcK2WHKvyTaoRUkhCJoNHCILpnZIM9fF6C4vfUc=)
2: vrwlMuSLqv4pWbmq0q24Ljisqq4.roa (hash: ownIF7p9fjg22RoqGmSsCCI+6MRT6EIXQBD8zcqpPug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:27:e7:70:66:41:8e:9e:6d:9b:7f:e5:8d:7f:e9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Validity
Not Before: Oct 23 13:00:18 2025 GMT
Not After : Oct 24 13:00:18 2025 GMT
Subject: CN=83dcfb00600c1c14ebdb56dbed9643a7ed9a3f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:3f:7e:23:f2:f5:bc:07:0f:5b:7a:bc:9a:
01:f0:79:8a:67:f6:af:ed:0d:3b:29:26:79:cc:01:
63:4a:07:0f:fc:83:e8:74:42:ea:57:d3:e6:e7:7f:
0f:ef:4d:d6:eb:7a:2e:20:11:3b:4e:f9:fa:84:02:
b8:f4:1c:85:7c:e7:c7:60:98:73:10:6a:6d:57:26:
af:84:08:f1:81:e6:8a:a8:a5:69:0e:c4:54:dc:1a:
6c:7b:34:cb:ec:e5:87:28:ff:b7:c3:eb:8a:5f:d0:
46:cd:25:bb:95:09:69:a8:c4:f9:d8:b7:93:18:92:
cb:18:d7:63:fe:28:c9:e3:92:a3:9e:5b:61:36:f2:
66:31:f9:89:5f:3f:d4:10:06:3f:05:fb:90:16:30:
b4:b7:ea:ef:91:82:05:ca:62:80:f5:14:3e:9b:35:
ef:04:22:8b:5e:09:4a:19:80:5c:8e:da:84:d2:28:
f5:6f:8d:d6:cd:40:0c:c4:0e:60:61:76:4b:a3:a4:
a8:23:3b:e3:6a:77:ed:52:fa:e1:ef:57:9f:9b:d6:
45:7e:76:cc:e8:38:72:a7:2f:77:df:94:6f:96:70:
b5:c5:33:00:c4:69:b3:ef:17:d3:55:4f:c8:16:07:
cc:0d:e4:75:b4:19:20:73:8b:0f:64:59:14:44:a5:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DC:FB:00:60:0C:1C:14:EB:DB:56:DB:ED:96:43:A7:ED:9A:3F:3A
X509v3 Authority Key Identifier:
keyid:10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:19:46:fc:ce:91:36:e2:d3:be:a8:c8:31:a1:7a:fc:08:03:
7b:00:5e:d0:84:f7:2d:34:bb:1f:43:f8:fc:8c:e1:3e:f7:4c:
02:f4:e0:50:15:51:02:66:9d:01:93:36:bf:5a:b1:d5:67:86:
cf:27:5f:40:c1:f4:0a:12:12:bd:97:97:76:1e:03:24:3e:81:
e8:f3:8b:16:89:c2:9d:79:1b:63:7e:d9:78:f1:e4:6d:ea:57:
df:30:14:bb:4f:26:a8:70:f2:b4:77:ad:2a:8a:33:ad:83:53:
1f:d2:a7:54:0c:34:83:58:51:94:e0:4c:05:35:43:de:2f:44:
2e:65:a1:79:d1:52:15:59:b7:fd:53:90:7d:fd:93:f4:db:7a:
39:b5:7f:f7:67:61:ae:5a:54:51:68:ac:ca:87:15:48:e2:5a:
85:cf:90:2c:5b:28:fd:2f:40:3c:ec:f8:80:72:10:14:28:2c:
5e:19:c4:da:65:ac:f2:89:2b:e6:ad:84:e4:f1:19:15:70:27:
b0:ef:bb:61:08:08:1f:5e:83:ea:a5:bf:e3:63:20:ca:81:2f:
de:c5:5d:61:71:28:7f:a8:d1:c2:85:17:4c:24:36:43:cc:d2:
6c:9b:d5:ed:4f:ab:6e:76:c3:e0:1c:a3:8f:6e:90:3a:16:dc:
3e:17:28:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:03:33 2025 by rpki-client