Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier: jdl3/Cd8xQLVkSPX1J+QsGTLMksmfnq68RTlSLF2FAc=
Subject key identifier: 46:85:22:5A:2E:F9:9F:71:DB:36:AC:AD:9F:03:79:02:5C:5F:14:81
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial: 019A209B80C3932E63EED6FE067E46683B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 13:00:53 +0000
Manifest this update: Sun 26 Oct 2025 13:00:53 +0000
Manifest next update: Mon 27 Oct 2025 13:00:53 +0000
Files and hashes: 1: T5ztfNUXWpcUexx1Ow5PIo80ytg.roa (hash: 1oOYGrHxVD+BaS7VqGZM3T/tDWbPcSE3UrszJqW1KJQ=)
2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: eV3vzi6rCbKonJFtTcgGfq8TWegMfP+OGImyNyL4vr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:80:c3:93:2e:63:ee:d6:fe:06:7e:46:68:3b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Validity
Not Before: Oct 26 13:00:53 2025 GMT
Not After : Oct 27 13:00:53 2025 GMT
Subject: CN=4685225a2ef99f71db36acad9f0379025c5f1481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:69:b6:74:fd:7c:3f:ab:1c:20:93:1a:3d:e4:
fb:68:3d:bd:16:60:3c:36:75:7d:8a:41:a8:0c:c1:
d6:3a:c7:bd:ce:ae:95:80:0d:b9:1b:d1:df:b8:55:
75:03:02:f5:8f:6b:54:48:16:f0:11:f3:e2:67:75:
f0:bd:1b:44:8d:34:92:64:af:ed:14:9c:7e:51:ca:
57:d0:db:6b:13:ec:79:f6:b5:38:7c:e7:80:1d:62:
cb:8a:d9:c7:fd:90:0a:ff:b4:ab:db:01:f0:47:3d:
da:59:04:11:08:07:ee:a7:19:d6:f7:89:0d:c1:2a:
fb:7e:4b:f4:23:b3:d5:48:e0:6b:15:ca:dd:63:02:
7a:51:73:6e:e8:17:9b:65:03:7e:ce:53:9d:27:44:
35:39:7d:70:13:41:a1:43:60:eb:97:a6:f2:46:98:
26:4e:36:3e:df:eb:42:91:82:e5:92:89:0e:bf:f1:
94:e3:4e:bd:85:51:f3:78:f5:c0:70:5e:e0:1a:6c:
01:bf:dc:da:8a:c3:37:e9:ae:3c:24:75:54:ce:8b:
7b:44:ba:0a:ae:a5:15:7d:fe:6a:29:b8:0d:d8:2b:
80:27:9c:fe:20:51:b8:f6:5c:e0:a3:b3:4d:9d:46:
6a:15:bb:3a:63:87:56:bd:c1:d4:7e:13:4b:69:0d:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:85:22:5A:2E:F9:9F:71:DB:36:AC:AD:9F:03:79:02:5C:5F:14:81
X509v3 Authority Key Identifier:
keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3f:f1:85:d6:42:f5:0d:c7:f6:84:15:7e:3d:45:8d:b7:c0:
0e:c2:cf:b7:d0:3f:91:c6:fc:3c:bc:43:ee:42:b7:b2:54:20:
cf:73:63:24:e6:e9:da:78:3d:70:63:e3:4c:87:b8:c4:bc:46:
df:f7:37:65:85:86:ee:f7:91:f7:8b:9c:37:a4:6b:73:fe:37:
20:07:fa:85:b7:11:80:76:4b:f6:68:3e:6e:e0:53:86:45:37:
2c:bd:58:02:8f:ee:b2:b0:30:3b:32:30:34:12:dd:4f:ea:df:
e9:bc:2f:6b:e1:e1:ba:fe:a7:ab:dc:63:6e:f3:71:15:f7:b0:
6c:8a:de:b0:50:80:5d:d7:19:16:b1:e9:da:f6:e4:55:a1:62:
0b:5f:f7:a8:28:63:6c:d1:41:6c:3a:c2:ca:2f:9a:8b:d4:40:
be:b8:7b:93:fe:b9:f5:03:d4:dd:1c:0d:28:71:9f:1d:78:32:
0e:55:59:a9:86:0e:b2:54:14:95:fc:a2:a0:44:85:f0:01:4f:
76:90:be:c8:61:89:a2:e9:45:0b:dc:75:bd:5d:ee:99:62:95:
7f:e4:a4:58:e5:90:29:47:58:cf:11:de:48:17:c2:37:77:8e:
ad:58:12:1c:78:24:12:ff:67:8d:14:8f:d6:11:56:f2:a6:88:
bb:7b:4c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:49:53 2025 by rpki-client