Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
File: EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json)
Hash identifier: bSKVBxHwDbP9/L0BwtdKRgZbGeiRiV/yM0/nq/t/4qw=
Subject key identifier: D4:3A:19:6F:F0:ED:AB:82:75:6E:CD:A3:9B:93:28:FC:5F:D6:50:4B
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial: 019A2FA041341D15122B36F9A92C4FC30C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
Manifest number: 16FF
Signing time: Wed 29 Oct 2025 11:00:22 +0000
Manifest this update: Wed 29 Oct 2025 11:00:22 +0000
Manifest next update: Thu 30 Oct 2025 11:00:22 +0000
Files and hashes: 1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: ZMbGSebrPZNvii2lt5Ua0KYujteOO8w2hGKXo6E8nPo=)
2: QKuSiZFk1wVsULwYb8XPnEDMMuM.roa (hash: KAQooRb0Ywlt3epgyVY+X2EZbQ9cRsRyjFwggfxa9E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:a0:41:34:1d:15:12:2b:36:f9:a9:2c:4f:c3:0c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Validity
Not Before: Oct 29 11:00:22 2025 GMT
Not After : Oct 30 11:00:22 2025 GMT
Subject: CN=d43a196ff0edab82756ecda39b9328fc5fd6504b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e7:69:84:76:89:32:b7:d3:e1:d2:d3:9d:21:
73:2c:d9:37:52:07:35:2c:c9:3f:b4:13:5a:da:fc:
73:97:9e:33:e9:30:e8:c8:19:28:47:1f:32:16:81:
1c:14:79:80:2a:82:d7:cd:e3:01:c5:73:02:86:70:
53:6d:de:1e:ab:b6:21:39:b4:2f:7b:ac:fb:0d:75:
8e:15:c9:f8:a5:7b:1d:6c:24:10:72:48:c3:3e:31:
6b:5d:fa:16:09:ec:3b:3a:88:cc:c6:3e:67:ae:c9:
28:a7:78:ea:ab:1b:04:1f:4d:fd:9e:f8:b0:66:f9:
25:24:07:97:7e:29:f2:f3:7b:ed:06:7c:a2:5b:7f:
31:33:df:df:ef:69:e8:07:57:31:5e:40:db:fe:c8:
08:e7:25:87:7d:72:80:47:51:ca:12:3f:e6:7c:4d:
82:3f:c1:07:12:ad:b8:ab:f2:b2:57:db:3e:f3:61:
8a:ee:02:21:a5:5a:a3:f9:e8:82:01:98:ee:16:4e:
3e:32:df:7a:2a:51:ee:56:e4:17:5f:ee:8d:9b:b0:
c8:a4:be:e5:ee:60:fb:37:83:5d:65:84:9a:1c:d2:
3b:7c:71:fa:37:54:56:b7:9d:e8:f3:23:49:59:1b:
65:c7:31:32:f5:65:24:40:0f:48:6e:c3:3f:a5:9e:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3A:19:6F:F0:ED:AB:82:75:6E:CD:A3:9B:93:28:FC:5F:D6:50:4B
X509v3 Authority Key Identifier:
keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c6:10:8c:bc:7a:c1:18:e0:48:4e:ed:54:78:d7:8f:1a:b5:
fa:2b:66:59:88:f3:d1:8a:fa:4d:d2:bb:01:21:c6:67:03:05:
48:c7:de:4f:c7:7c:69:8c:7a:97:53:bc:60:d3:dd:ce:d2:98:
2a:56:83:c6:30:79:27:f7:7c:e6:1b:65:53:38:31:e8:5e:35:
2d:34:fb:d7:c2:2c:2c:d2:a2:af:ea:a5:a8:69:00:de:f0:03:
1b:03:e2:f6:8e:eb:72:ba:ba:71:90:14:48:36:ce:08:ed:13:
e6:67:63:33:b2:9c:34:0c:96:ca:0d:61:af:72:b9:8f:76:db:
87:20:d9:b9:01:fe:af:6c:8f:f5:db:d7:f0:92:0a:44:e3:66:
00:7c:aa:f3:2a:31:90:6b:45:31:31:38:fb:37:0c:7e:58:63:
99:45:16:3f:02:92:25:4a:a3:b2:ae:ea:9a:0f:db:37:23:4a:
23:78:8d:85:f4:44:f9:7d:e8:c1:ff:a3:36:b2:df:9a:30:06:
40:24:5a:8c:13:49:0d:65:29:67:9f:98:c3:fd:37:d2:3b:97:
b5:27:43:91:ab:a1:9a:d4:48:b9:bd:e7:b9:90:6b:10:5c:5a:
d6:bf:2a:65:85:ff:af:5b:30:b5:9c:41:c8:ff:58:71:00:ea:
86:1c:1c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:52:29 2025 by rpki-client