Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: 7bS03vVjnkOstBX+jYd5MCh3+GWib9kAOFg6P9Xa3QY=
Subject key identifier: FD:1B:F0:73:4F:F4:76:72:8D:D7:CA:59:6C:9E:DE:88:99:FE:A6:C2
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 01995341EE92B005E7B599015747F4ACC76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 168E
Signing time: Tue 16 Sep 2025 16:00:53 +0000
Manifest this update: Tue 16 Sep 2025 16:00:53 +0000
Manifest next update: Wed 17 Sep 2025 16:00:53 +0000
Files and hashes: 1: 6MYz-ZGdNS-u8_z3MpC45Xu_sMw.roa (hash: A1Kj+TMjQETP1ey0GJIYlCuG+gJEQ2kRAL9GRcwfmRY=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: ZtNysHLh9qCwyHhTdLX1DS7rrS41/j+AJHc1Y5Edtio=)
3: fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa (hash: gqfm8MCWa2Pg4ZrCCuhR4K4qe9DOCoAfzWejjyOWCNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:41:ee:92:b0:05:e7:b5:99:01:57:47:f4:ac:c7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Sep 16 16:00:53 2025 GMT
Not After : Sep 17 16:00:53 2025 GMT
Subject: CN=fd1bf0734ff476728dd7ca596c9ede8899fea6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:54:e6:f4:66:79:58:a3:f0:e5:d5:ae:fa:
fb:7f:d6:41:1e:b9:9d:1f:52:26:4b:66:9f:37:75:
b2:9f:cc:c9:54:03:8b:29:95:8f:3b:2f:cc:8a:a4:
30:31:91:20:f6:8a:f0:6a:ae:94:5b:2c:6d:e7:b9:
83:a3:d1:a0:b7:5f:51:02:ab:d1:85:a6:e4:7d:d9:
7e:86:13:6c:cb:c4:4b:5e:f2:b6:2a:cb:70:9b:d6:
74:d5:19:ee:16:2d:32:f2:95:38:95:07:15:10:ac:
7c:7e:66:42:56:00:db:9e:11:27:d7:72:a6:e5:c7:
1a:82:6e:de:cb:38:e9:88:50:36:be:1e:b9:8c:3c:
6e:2e:02:0a:d9:b3:9c:0a:38:89:24:bb:dd:72:45:
fe:a8:a7:f0:3c:14:02:d2:be:4f:43:3c:f9:77:cf:
62:13:13:78:31:f6:a4:e5:92:ab:c7:76:45:d0:62:
28:3d:b5:3d:24:c9:0f:fe:69:7c:28:fb:ad:f5:71:
e8:fe:7c:4c:93:96:13:c7:5e:c2:b2:b3:ab:95:f4:
4b:be:4f:a6:bb:1b:24:bb:ea:82:02:10:97:47:a4:
ab:ff:8e:d6:f2:90:28:bc:6e:4d:97:a3:41:3e:00:
14:aa:ec:fd:23:1c:70:d8:8b:19:c5:fa:17:4e:01:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1B:F0:73:4F:F4:76:72:8D:D7:CA:59:6C:9E:DE:88:99:FE:A6:C2
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:dc:7d:9b:49:9f:0c:66:a3:6d:c2:b0:a5:95:9b:ed:72:68:
73:ec:be:35:56:ed:88:23:fe:7e:29:87:a8:b8:06:eb:f1:0a:
96:82:e5:81:b1:92:9d:7c:bf:c7:31:dc:39:45:00:b4:b4:ce:
8d:d1:6d:76:6c:bc:84:12:b7:0d:65:c5:21:f2:af:8a:eb:a2:
b0:74:4c:aa:4a:6d:bb:e1:06:fe:12:0c:33:29:cc:db:73:cc:
0d:7b:05:ef:aa:d7:42:3a:51:96:e1:69:2c:02:2d:30:96:6e:
d6:8b:4c:ab:71:b3:76:ab:41:ff:d9:d8:2c:30:72:f2:f5:e5:
fc:51:9b:ea:9e:58:dc:70:bc:f2:49:10:d3:49:65:38:68:6c:
28:6d:cd:08:8f:af:13:4f:cd:ed:4e:f5:76:a9:5a:65:bc:f2:
a5:ac:87:d3:4f:ab:83:68:cc:18:b7:f6:21:1c:42:79:69:7b:
48:51:e0:b1:99:b7:e2:ac:0a:07:ae:b5:c1:33:9a:6d:d2:4f:
41:05:49:72:97:3e:ef:0d:18:1d:6c:c6:2c:7c:09:7a:06:40:
78:c2:11:a8:63:08:8e:d3:fc:cf:02:45:43:eb:fe:d2:18:5e:
23:8b:bc:68:50:88:0a:45:cf:ad:6e:27:e8:31:e7:60:bd:fb:
b4:26:a7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:29:37 2025 by rpki-client