Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
File: eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft (raw, json)
Hash identifier: TCtYChhOYyKf14KqIw2ELswfGqQk/WLYPKAQeHJByxQ=
Subject key identifier: BB:24:BF:6D:EA:6C:34:F8:C3:6E:C5:7D:CA:70:F7:BA:19:F7:5B:C9
Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
Certificate issuer: /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Certificate serial: 019A725C8A9CED03C7D878820A9D8F6E2CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
Manifest number: 06FB
Signing time: Tue 11 Nov 2025 10:00:58 +0000
Manifest this update: Tue 11 Nov 2025 10:00:58 +0000
Manifest next update: Wed 12 Nov 2025 10:00:58 +0000
Files and hashes: 1: eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl (hash: kLrZoxKv0WmaIiXst9eoNZrev4x1Ly9Qoln/hnhSajg=)
2: rDcpoyvrVBT_cWdGmT4H-hyPLg0.roa (hash: ZIVMbBVJwlrHJ75Ki0ODTTpJ9+ylEgTfPq67Cig5C+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8a:9c:ed:03:c7:d8:78:82:0a:9d:8f:6e:2c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Validity
Not Before: Nov 11 10:00:58 2025 GMT
Not After : Nov 12 10:00:58 2025 GMT
Subject: CN=bb24bf6dea6c34f8c36ec57dca70f7ba19f75bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:6b:9f:f0:17:61:be:d8:e6:04:63:81:48:
ef:4a:29:ac:1d:84:ae:98:b5:39:de:e4:3d:3f:df:
d4:1f:ed:d2:33:d4:e6:b4:a0:fb:f7:02:c1:f8:3d:
1c:e9:63:3c:c0:cc:bd:e2:08:06:c7:07:09:76:39:
08:bb:f7:4c:a5:c9:60:90:65:1f:4b:44:88:7c:34:
c1:dc:ac:66:c9:5c:f9:69:73:eb:90:62:f9:f5:36:
3f:ec:a0:a2:c7:db:fc:f0:75:6a:6d:e4:ec:c1:23:
72:9f:13:fc:21:64:32:61:14:3a:76:a5:a7:2f:73:
60:21:38:1e:26:a5:0e:0c:20:f5:9a:cb:54:b0:60:
de:ad:61:02:53:2a:a5:84:02:1e:cf:c3:7b:8a:89:
5c:f1:41:7f:94:82:a0:34:39:45:01:a0:15:e6:85:
8a:5c:f8:12:68:a6:48:a4:6b:4c:bb:bd:6c:de:37:
67:19:c4:59:e6:2a:25:dc:ad:9b:d0:b1:7b:e5:6d:
32:4a:da:17:6a:1e:03:5c:fe:9f:7d:72:e4:5c:81:
e3:bd:d7:a4:1e:4f:ac:4d:12:b1:e9:3d:52:c4:64:
a5:05:97:6a:0f:7d:5a:50:a6:28:5c:1f:34:21:c8:
98:48:e2:0a:32:ce:cc:54:dc:59:9d:4e:d4:60:0e:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:24:BF:6D:EA:6C:34:F8:C3:6E:C5:7D:CA:70:F7:BA:19:F7:5B:C9
X509v3 Authority Key Identifier:
keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a8:84:05:54:0a:6b:75:41:2b:e1:07:d3:1e:f7:e7:1f:c4:
3c:b6:df:ea:6a:b0:f4:40:32:fc:e4:09:6b:d2:70:0c:91:27:
a3:94:6a:17:b6:7a:7e:3c:a9:da:9e:b2:07:61:a7:4f:9f:b8:
95:5c:49:18:f2:1c:07:fb:41:cd:6f:f6:b0:a4:78:a1:77:bd:
9f:22:19:fd:26:31:0c:84:67:db:ae:4e:ab:ef:34:a4:cb:dd:
f8:e9:ff:ae:5f:c5:76:98:3f:f5:0b:70:a9:4a:c7:54:92:07:
e8:92:5c:7d:2b:8c:53:03:fa:98:33:65:1d:11:e6:41:dd:6f:
5c:c3:57:0d:70:93:42:18:c5:a0:a0:4e:18:69:5c:c0:e5:08:
d9:1e:ae:16:d2:55:dd:83:fb:3a:40:a4:86:02:08:5c:a9:9c:
82:d0:31:1b:3a:d0:35:a8:db:08:22:25:8e:87:1a:6e:c3:48:
e8:b1:71:08:9f:08:73:b6:04:8d:23:a4:36:7c:8d:7c:ca:97:
de:c8:20:7d:65:e3:22:2e:a9:08:51:8e:b7:aa:6b:ab:75:7a:
53:93:1e:79:94:de:a8:43:38:a2:35:e9:99:90:b5:9e:72:b6:
10:fe:d4:2e:25:83:16:14:74:ba:8a:68:d5:60:a0:74:82:01:
11:b9:4f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:41 2025 by rpki-client