Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: wWcczwgfsasTeFOJy/ezH48kbWHNbNA1zCBhkLZMblQ=
Subject key identifier: C7:A2:26:E3:C4:A9:6D:BE:A7:2F:84:33:AC:45:A2:20:AB:F5:DF:85
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 0199356E7CCE89AD02B3115E58875C770027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 160E
Signing time: Wed 10 Sep 2025 21:00:57 +0000
Manifest this update: Wed 10 Sep 2025 21:00:57 +0000
Manifest next update: Thu 11 Sep 2025 21:00:57 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: np6aVWcmzqxNhLTf28tkNxS+gDw03HOwIUl5jyt5XjI=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:7c:ce:89:ad:02:b3:11:5e:58:87:5c:77:00:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Sep 10 21:00:57 2025 GMT
Not After : Sep 11 21:00:57 2025 GMT
Subject: CN=c7a226e3c4a96dbea72f8433ac45a220abf5df85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:5f:df:a7:86:da:17:c1:26:b4:2d:2c:6e:
37:eb:e1:c7:5f:15:a4:6f:1f:76:fb:f8:a8:16:d3:
be:f4:ba:28:37:28:7a:8e:80:4b:a5:5c:5c:e0:61:
70:a0:d0:ac:13:6e:48:f4:a9:fa:a6:15:76:40:13:
f5:b1:59:cd:5f:a4:b5:8c:db:c7:49:48:d1:81:c8:
36:a7:1f:2f:d9:1a:7b:19:c1:ff:95:a1:96:2b:4c:
53:0b:9c:d8:67:48:50:76:58:d6:2f:d8:45:93:0b:
3f:19:f7:32:d5:ad:67:fd:38:46:4a:79:de:43:1b:
55:1f:52:3c:62:e6:64:98:b1:64:bb:62:31:d4:a2:
49:d9:e1:c3:f5:6b:22:00:e7:8e:53:d1:02:02:15:
2d:f1:2c:ca:2b:f6:7e:81:53:db:7b:fc:23:87:54:
1d:8b:f7:31:db:62:72:59:2a:9f:63:c9:5f:27:49:
3b:df:1a:d9:54:12:26:e8:e5:c1:b0:8e:d3:68:1d:
f7:07:25:7d:02:32:2b:a5:0f:75:99:43:5e:6f:87:
e9:2a:fa:ae:90:c8:ea:b4:75:63:c7:09:63:0d:70:
12:7f:ba:bb:7b:94:d9:89:a2:81:aa:5c:32:c4:ae:
ad:f9:f6:66:69:30:b3:4c:5d:18:c8:14:b3:80:c5:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A2:26:E3:C4:A9:6D:BE:A7:2F:84:33:AC:45:A2:20:AB:F5:DF:85
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4c:8c:b8:02:b8:b7:ec:5b:11:02:d8:33:a8:0b:c3:74:6b:
8d:2f:c2:12:d9:1e:0e:42:70:d8:0e:85:18:33:da:32:47:ea:
77:99:4c:9b:bc:c9:5b:68:d6:0b:2d:85:ef:66:e8:fe:ef:9c:
82:31:0b:57:8f:d8:a5:21:10:3e:d4:d8:9e:1e:d3:74:b0:45:
bb:1e:2b:89:4f:b2:ad:4b:ff:a6:8e:7c:af:34:32:d5:b6:c0:
84:1d:62:96:fd:61:2c:29:3d:24:91:c6:e9:74:5e:36:38:00:
95:93:0a:83:35:6e:28:1e:23:a6:dc:cc:23:10:4c:1b:48:ab:
70:4f:94:7c:23:03:e3:c9:cb:a6:79:1b:a5:fe:96:79:e6:ed:
07:2f:ec:4d:18:cb:d5:83:87:44:a1:db:f2:61:b5:15:81:f2:
01:fa:72:61:15:a6:70:1b:da:b9:70:dd:e3:d2:f7:ba:02:9f:
f2:e0:80:21:cc:ff:a4:1e:58:50:4d:e7:9f:e8:2d:db:00:d5:
04:dc:d9:5a:25:b4:6f:6f:54:ea:54:67:94:6b:c0:c9:38:66:
6f:db:53:ef:6d:97:ca:01:77:6e:0d:8e:53:01:1b:d4:55:13:
df:8c:85:40:e1:4e:b9:d4:90:be:32:95:22:5b:d0:72:19:3f:
8f:35:4c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:18:52 2025 by rpki-client