Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
File: eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft (raw, json)
Hash identifier: 5mNcd8KC8L08MW3uWzUGGCoW8qWlYC/26rjCeFScokA=
Subject key identifier: 7F:9E:4C:75:B3:62:02:48:36:9E:58:FD:0C:06:74:86:32:B5:2E:1F
Authority key identifier: 78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
Certificate issuer: /CN=7870561798e5c8a26707620df082ef3778d7163d
Certificate serial: 019A70A4C67E49E06C470F9A3D48C5A9F0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
Manifest number: 1618
Signing time: Tue 11 Nov 2025 02:00:38 +0000
Manifest this update: Tue 11 Nov 2025 02:00:38 +0000
Manifest next update: Wed 12 Nov 2025 02:00:38 +0000
Files and hashes: 1: Z83LhYm-PBD2EJey8r2-Hu3Pv9o.roa (hash: 0oaVoHp1lfPB8j/dx+/RSOuNiG+gm/WhxI6jUsMwbjg=)
2: coXrhUL-UR2XiaXIQUyJNYk5wfw.roa (hash: fVVY4ZVUYIXnBSvc/7AhdMXyEXPtFjAoKMuhQm3m+gQ=)
3: eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl (hash: Gp2duH2iYJUEYprK3NqoaxuzqYxyxaaaxw7g4YFZA0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:c6:7e:49:e0:6c:47:0f:9a:3d:48:c5:a9:f0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870561798e5c8a26707620df082ef3778d7163d
Validity
Not Before: Nov 11 02:00:38 2025 GMT
Not After : Nov 12 02:00:38 2025 GMT
Subject: CN=7f9e4c75b3620248369e58fd0c06748632b52e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:25:b6:11:03:c6:01:14:f8:fc:a2:8c:60:48:
99:01:89:7d:2e:40:18:f7:99:de:e8:58:4e:08:97:
d4:28:0f:9a:22:a1:67:5e:d2:62:b6:dd:1a:9e:f0:
ab:c3:45:b7:21:e3:50:d7:25:fb:9a:a9:d6:8c:b0:
18:fb:be:1f:be:5d:7a:40:78:0d:7f:73:af:2b:6c:
12:a6:3b:60:88:1a:bf:15:1a:41:5c:2c:2d:bb:b8:
52:5d:2b:85:71:7f:82:e0:ec:b1:19:5a:2a:ff:6f:
7b:27:e2:9f:13:c3:0f:63:1d:2f:e6:9c:7e:09:85:
a3:ac:1c:d2:0e:fe:e1:d4:23:95:b4:b4:63:c2:ff:
21:df:bf:d7:e2:8f:d4:2d:e3:40:55:4e:bf:c5:cd:
61:11:c4:a2:81:5e:28:e3:1a:57:4e:fb:46:4b:e6:
0f:16:78:77:58:74:40:01:ac:b3:b3:c6:ef:6d:53:
74:d6:25:ec:3d:54:56:2f:c4:3a:27:6e:a6:52:34:
d0:1a:00:f2:c3:ed:71:41:1e:f8:36:95:63:ef:fa:
96:42:fa:6a:48:a0:f6:a8:f4:d3:19:6f:ba:d1:52:
c0:82:c2:79:c7:07:f0:f2:81:bf:98:29:f9:ef:bd:
e6:cb:1c:56:57:3a:2a:7c:99:73:28:40:6d:38:65:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9E:4C:75:B3:62:02:48:36:9E:58:FD:0C:06:74:86:32:B5:2E:1F
X509v3 Authority Key Identifier:
keyid:78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bb:e3:0d:4c:bd:f4:6a:cd:a4:15:1b:90:3b:39:30:ec:e5:
0e:ad:16:4b:a1:8c:99:6d:fe:f1:07:de:71:e2:3e:21:1a:15:
ef:32:c4:eb:5a:33:6f:e9:c7:1d:8b:bb:98:bb:73:30:e6:df:
a3:b2:35:7c:b4:4b:d5:0a:7e:be:67:e9:1f:f2:c2:55:f3:f2:
99:24:6f:c3:13:25:e0:95:fd:7f:ca:20:86:35:0c:0f:c8:99:
ef:ac:d2:0f:38:9d:28:10:1e:85:fd:ba:2d:3e:e5:3a:94:1b:
f7:b5:85:2d:46:7d:51:27:e2:24:24:1c:3f:70:84:6e:49:78:
7a:fe:b0:4f:7d:0c:67:69:c7:7d:3d:5b:69:be:28:3f:55:94:
54:48:73:06:bc:f9:68:8c:87:ff:ee:c4:34:df:e0:53:8c:57:
4a:14:0c:ab:7b:a1:26:b1:96:21:6c:6b:8e:4d:df:eb:08:4a:
6d:da:87:36:fe:22:11:77:60:50:b9:fb:a0:11:62:53:f3:bd:
5c:fc:a2:4b:71:62:a6:44:2f:60:b1:1a:8e:e8:93:1b:40:e6:
bc:6e:24:3a:cb:23:46:be:26:4a:ba:c5:47:b6:8e:a4:b0:cd:
6b:e4:4c:5b:a6:7a:62:62:f0:ac:a4:f2:b3:24:3e:66:03:49:
17:64:ed:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:53 2025 by rpki-client