Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: x3bIWQT9Ut222ah/oOpYeHXfWiQnacv1WNokPaI3G5I=
Subject key identifier: 0D:CF:A7:09:B9:18:99:DE:51:6C:50:B0:84:C7:81:48:E8:A0:CC:30
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019A3A23BD1633CE8C7E6831AF9BD2325A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1695
Signing time: Fri 31 Oct 2025 12:00:11 +0000
Manifest this update: Fri 31 Oct 2025 12:00:11 +0000
Manifest next update: Sat 01 Nov 2025 12:00:11 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: nfFBm+R4RJOqk53ca+9FcRCveuRU9Z0+iBjxb2rsSiI=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:23:bd:16:33:ce:8c:7e:68:31:af:9b:d2:32:5a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Oct 31 12:00:11 2025 GMT
Not After : Nov 1 12:00:11 2025 GMT
Subject: CN=0dcfa709b91899de516c50b084c78148e8a0cc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:2b:a5:77:48:7b:d3:ad:14:00:de:3b:e8:
e9:31:b6:83:bb:12:67:f6:b9:49:dd:10:76:6c:79:
6d:b6:d1:a8:e1:68:64:e9:82:b1:d3:ac:e3:f1:17:
18:e9:0d:f9:34:21:b8:88:60:cb:10:04:ce:c9:2e:
88:4c:4d:42:6d:1f:d0:4b:ff:bb:75:01:b0:4f:6b:
5f:e8:d6:74:89:c5:1e:db:5a:6e:1c:3c:f7:5f:88:
37:47:cc:75:90:6b:79:7d:e8:f1:de:f3:ce:84:02:
c2:0c:fe:9c:d3:db:10:a8:ce:dd:5f:2a:ad:4b:00:
6b:e2:3f:7a:9d:2f:12:a9:59:45:0f:c7:87:ba:34:
02:0e:16:c5:c8:1f:33:22:03:ec:b2:72:05:91:a1:
d9:81:bb:41:69:81:d4:6e:35:7c:71:a6:48:0e:ae:
24:b9:01:c6:e9:b2:d2:c0:14:4a:3e:0a:ee:67:0b:
c0:1e:5b:3d:8f:2d:01:00:40:62:0a:96:ed:55:d2:
27:b3:68:3f:76:2d:c1:0c:bb:2b:ca:c7:dd:13:2d:
8a:7b:01:77:fb:e9:22:c2:4d:e7:bd:f2:60:21:f4:
80:06:38:f4:37:cc:75:ef:6e:5d:7d:77:bc:e8:86:
0d:02:f9:4b:09:6b:d5:4b:ab:91:e0:e5:16:b7:85:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CF:A7:09:B9:18:99:DE:51:6C:50:B0:84:C7:81:48:E8:A0:CC:30
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:64:06:96:5a:a0:ee:c2:a6:22:ab:cd:12:4c:87:a2:48:97:
32:52:6b:d7:40:68:a9:24:78:4a:b8:0d:4b:f7:c2:84:05:c2:
08:6f:f2:be:16:9d:05:75:be:d6:73:40:4c:a2:3d:02:22:3f:
85:91:20:25:d5:5a:16:50:01:83:07:d1:87:ea:20:fa:75:6b:
64:f3:5e:65:5b:9b:0d:c4:4a:c3:fa:bd:dc:53:f2:a6:58:5b:
ee:ae:55:ca:a0:15:5f:c5:22:97:77:3e:38:f2:00:af:76:af:
00:b7:cd:c3:78:24:14:e7:92:e0:9f:ea:f5:0e:9b:28:73:ca:
eb:73:82:3e:54:a7:77:b7:c4:ca:99:7b:79:12:d9:c1:4f:c7:
bf:6d:c4:92:32:09:11:29:48:a5:3b:02:76:aa:8a:8a:33:5a:
f4:35:3b:65:f8:44:2f:56:dd:4d:b1:4e:6e:0a:1b:07:a9:e1:
06:ba:59:ae:4b:01:aa:d7:95:30:00:3b:10:01:48:f4:9c:ff:
e1:b7:c0:92:ff:7d:53:a9:b7:cf:f1:8c:65:94:db:35:e6:39:
89:ad:b7:a1:b3:5c:98:9c:c5:d1:14:7e:ad:01:62:97:ce:e3:
a3:92:0f:55:81:70:24:fe:81:9f:75:50:55:e2:c2:2f:da:8a:
bc:14:c1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 19:57:47 2025 by rpki-client