Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier: hTeC0ktBYiQeY7WhMAaztWBjLVb3BjIcdJBfZD8gO/g=
Subject key identifier: A0:6A:E1:EB:7E:9A:76:17:D4:30:39:95:4A:FE:0D:21:21:67:9D:71
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 019A2C686F77F07338657435351C96F0696A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number: 13BB
Signing time: Tue 28 Oct 2025 20:00:33 +0000
Manifest this update: Tue 28 Oct 2025 20:00:33 +0000
Manifest next update: Wed 29 Oct 2025 20:00:33 +0000
Files and hashes: 1: WiSq1XaassFeIzQ7VRRmBzOb3-E.roa (hash: kuvzaokAS1drpTQ/4WqXgBODOQIMCPVvcrCFZCP4fDk=)
2: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: LbvcajMjpyrDZhJzZM9SSHzyCwKi8Yzhc02kTaPi1ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:68:6f:77:f0:73:38:65:74:35:35:1c:96:f0:69:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Oct 28 20:00:33 2025 GMT
Not After : Oct 29 20:00:33 2025 GMT
Subject: CN=a06ae1eb7e9a7617d43039954afe0d2121679d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:45:53:be:4f:8b:5f:72:ba:45:f2:2f:02:
0c:da:aa:b2:ab:29:69:62:5b:cc:17:60:35:74:1e:
8f:7e:60:51:49:31:43:28:0f:ba:e8:38:d1:3d:07:
63:76:86:91:54:b1:28:02:8f:08:d0:87:02:f8:47:
5e:90:e1:41:12:5d:b5:86:a2:0a:ae:81:11:d1:bf:
f8:8b:24:7f:8f:f8:4e:1a:13:33:ce:6f:3f:dc:c4:
71:b3:26:85:25:27:35:a3:c0:bb:93:f1:96:d7:9c:
5a:de:2c:19:84:32:83:a3:29:7f:27:5b:11:32:8f:
e1:de:5d:85:95:26:aa:84:6d:4c:16:dd:4f:e8:d7:
e7:32:f3:04:88:f0:6d:09:5d:38:2e:17:92:48:77:
64:55:03:28:cd:f4:7b:ad:ed:55:4f:c2:d6:bd:48:
3d:40:3b:31:24:08:bc:15:bb:2a:03:bf:dc:7a:d8:
34:0e:8b:69:b5:a2:9c:5d:bc:3e:38:26:90:41:d6:
db:35:b8:9d:a3:92:64:27:61:95:67:80:3e:4c:48:
fc:5f:4a:29:86:20:fa:29:ab:74:29:5e:96:85:16:
32:b0:ef:53:33:77:68:34:f6:d8:52:16:4f:56:8f:
44:b9:68:03:cb:9e:00:06:b1:17:c4:56:a1:4a:40:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6A:E1:EB:7E:9A:76:17:D4:30:39:95:4A:FE:0D:21:21:67:9D:71
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:01:f6:76:a8:9c:a4:b7:86:29:d2:b1:ad:d1:0b:dc:87:0e:
7e:9b:78:ec:87:fb:7f:5b:26:f6:2d:41:65:3d:a3:d7:de:45:
bd:ef:dc:95:33:d0:6a:60:12:21:77:06:c9:40:9c:0c:ce:34:
a0:dc:31:c8:0a:ce:cd:e8:1b:36:27:72:03:69:7c:3d:9c:22:
03:db:e0:43:39:50:4c:90:5c:5b:c9:c5:79:58:c0:2f:04:19:
67:eb:a1:78:f8:35:5e:05:1c:7c:dd:7c:0c:59:0c:ae:0b:c6:
72:33:4b:42:d6:6d:a9:08:43:73:c0:82:df:3f:9d:96:1e:6f:
c6:66:fa:78:04:30:e0:e9:7e:9d:92:4a:d3:bb:6c:05:6b:2f:
4b:12:6f:27:c6:45:03:ed:7d:f2:70:d4:d5:b4:df:b1:0b:62:
11:ef:0f:7b:dc:c3:23:a6:23:c2:2d:99:4e:b4:fc:21:8d:24:
26:e8:0c:08:c7:4b:5a:67:d7:c5:e8:a1:84:12:76:21:22:a7:
dd:05:db:e9:9b:bc:e6:df:4c:28:88:29:08:7d:d9:dc:53:02:
ad:95:ad:6a:dc:8b:da:36:df:7d:20:a0:9d:de:d8:39:f6:44:
7b:c3:3c:71:94:88:f9:2a:c9:fd:6c:15:e1:18:72:54:5d:60:
b6:69:f6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 01:32:34 2025 by rpki-client