Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: pCTMj8Ldtnl8jRGyJ2F9ex2o4e2lK7Qf0qO3ovP3Yjc=
Subject key identifier: 5C:2B:FD:31:3C:80:B8:D7:EB:4F:A4:5C:B1:A0:03:71:8E:51:60:20
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 019A2108A230701BDF5A3D4D535A82485C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 16F9
Signing time: Sun 26 Oct 2025 15:00:04 +0000
Manifest this update: Sun 26 Oct 2025 15:00:04 +0000
Manifest next update: Mon 27 Oct 2025 15:00:04 +0000
Files and hashes: 1: 94kSZYEi8kZZUVQDGMvt3tM0W5M.roa (hash: Kr7Qvwd5yInhruSYrImp4x8w3L+klGrguBHif+DVLgU=)
2: HyefmTBy2OXIxQS41tlTH-MtUgc.roa (hash: bc5pyrKFM8Tanvi0cNUIrBtuFy4XX7WbcgeUMb48Zis=)
3: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: ALMiTwK0fuWTLXMWjYqwir7Sk5kxGnDypE+WEG2Zp5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:a2:30:70:1b:df:5a:3d:4d:53:5a:82:48:5c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Oct 26 15:00:04 2025 GMT
Not After : Oct 27 15:00:04 2025 GMT
Subject: CN=5c2bfd313c80b8d7eb4fa45cb1a003718e516020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:b9:d0:a2:ce:74:7c:d0:2c:a1:c7:4b:62:
f8:e8:24:70:fb:e7:ba:23:32:2e:34:7e:4a:54:84:
71:ea:ce:d9:09:7a:7f:44:a3:34:16:47:85:2d:02:
26:45:de:de:f5:1f:b2:57:b8:d1:aa:9c:25:a9:fe:
2a:cf:01:11:45:6d:02:e6:54:f3:7d:00:ce:9e:1e:
c7:94:c5:08:98:88:dd:06:58:e9:f4:72:2c:c3:a2:
0d:87:d9:43:19:d6:e3:f3:4e:45:2d:f3:b2:79:a3:
76:e3:a4:cc:8b:8c:33:eb:b8:27:1a:9f:12:03:6a:
d2:1e:62:1c:ed:40:81:99:6c:a1:68:90:83:3a:20:
ea:9a:7a:df:3a:42:e9:97:49:9c:b3:74:f1:74:9e:
a9:52:79:25:39:e4:ea:04:e8:5b:ee:c2:21:dc:f6:
c1:27:b9:a4:84:26:16:9f:e9:11:53:13:df:ad:f6:
bf:ea:38:c2:3b:fb:21:13:14:59:4a:83:c6:b2:ca:
3c:e4:c0:50:42:05:b9:71:5e:62:ca:5d:3b:91:11:
4f:48:28:e1:9f:d1:8d:17:c5:5d:11:8e:63:71:18:
a7:4a:a6:07:71:e4:c8:ed:ef:83:bf:df:9f:89:ef:
76:cc:72:7c:35:2a:88:3c:c8:15:54:23:70:25:01:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2B:FD:31:3C:80:B8:D7:EB:4F:A4:5C:B1:A0:03:71:8E:51:60:20
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f3:e9:62:7d:a1:91:d4:ac:ec:7a:5a:f4:5a:b5:46:29:c7:
4b:62:60:a1:21:a7:5b:b0:e0:b8:1f:e9:5a:4f:46:0e:0f:8b:
d7:4d:a1:76:0c:b5:22:13:90:83:04:1e:a1:19:85:26:28:0e:
b5:01:28:19:91:ec:31:54:70:d6:3a:0b:c8:f2:e0:42:8c:5e:
26:ce:9c:be:45:52:1f:6b:90:43:d0:13:45:dd:02:67:72:e6:
32:b9:1f:14:12:1c:a7:bd:ae:ec:d3:57:fa:db:35:45:eb:8d:
17:49:ed:24:f2:09:27:6a:98:e4:60:78:70:28:68:46:6d:49:
7b:5f:de:ee:e8:80:c2:e6:d1:e3:89:26:b0:1b:02:eb:4b:ac:
4d:81:e3:51:03:f6:28:cd:44:bc:83:d9:e5:22:d5:3b:34:36:
4b:cf:f0:a9:44:b1:f3:d7:62:3f:2d:6c:2f:02:0f:15:b8:e6:
f6:8f:fe:bc:93:df:46:86:34:c2:2e:81:4c:07:df:9f:f5:b6:
d3:fc:db:1e:0f:2b:55:ea:a7:55:ea:4e:b4:9f:94:0f:a5:13:
9d:65:04:72:1d:71:06:56:3a:12:91:55:63:e8:b7:a6:48:a4:
ae:50:f3:fd:06:35:a8:00:76:9e:38:7c:81:ab:dd:bf:9a:77:
50:3e:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:42:12 2025 by rpki-client