Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
File: eDdfthaLNUhBuR0wX50M3AyxUB0.mft (raw, json)
Hash identifier: oiBLuviC0Lv86bU2PUJ9GQPFkARrSRWdvMB4X/+evSM=
Subject key identifier: 72:44:6E:AA:0E:AD:57:98:EA:C3:86:BF:7B:08:8D:74:89:31:77:26
Authority key identifier: 78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
Certificate issuer: /CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Certificate serial: 019A7149C281AB184E8614E170D9222058FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:00:50 +0000
Manifest this update: Tue 11 Nov 2025 05:00:50 +0000
Manifest next update: Wed 12 Nov 2025 05:00:50 +0000
Files and hashes: 1: eDdfthaLNUhBuR0wX50M3AyxUB0.crl (hash: d8oS0IfXv0XtMx3z2zaLODYtbwVksv55Xq4YNhqjyd0=)
2: yISIjc9YgTnf71Z4E-nlNbitu7U.roa (hash: LtZh6f0jmex3FPPUw/azkOX7onGzwYw39L6cN+bX6NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c2:81:ab:18:4e:86:14:e1:70:d9:22:20:58:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Validity
Not Before: Nov 11 05:00:50 2025 GMT
Not After : Nov 12 05:00:50 2025 GMT
Subject: CN=72446eaa0ead5798eac386bf7b088d7489317726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:39:82:6e:ee:61:36:9b:97:21:af:90:dc:
66:f1:d2:8b:d3:b2:ea:50:52:0e:65:c9:66:9b:be:
9c:4c:d0:88:c0:aa:95:7d:a5:36:d1:6e:ad:8e:99:
76:b3:85:31:7c:c2:78:23:b1:65:87:6f:d5:14:c7:
90:1d:6d:f3:4b:4e:75:b0:8f:de:1e:ff:a7:79:ca:
b6:6c:ef:ac:09:3b:6a:6b:89:86:db:5b:95:f3:16:
02:6e:ee:b9:57:d1:07:5e:92:8c:81:19:c4:ce:be:
44:42:40:ab:e8:04:7a:ee:61:2c:f0:a4:ab:60:8f:
5b:ee:e4:7e:38:24:d2:b0:bc:f6:14:57:76:43:0b:
88:f6:bf:f7:72:6c:91:05:41:79:ca:b9:b9:03:e3:
77:eb:7e:05:0d:ce:8d:93:2b:11:45:45:10:0e:a3:
90:dd:1e:36:6e:1e:56:ec:69:9c:42:56:5d:e2:58:
a1:f8:a1:29:17:4e:06:33:ac:b0:22:cb:fe:03:38:
b1:99:ec:44:77:2c:33:fb:8b:b7:5a:d8:23:d0:ee:
36:35:79:4b:5d:9e:5c:5c:af:93:f9:8e:86:2e:1a:
ea:3b:d7:e3:84:eb:27:4e:d9:b5:cd:ee:be:48:c8:
78:b4:20:aa:05:a8:e5:5d:fd:dd:ad:15:fd:e5:89:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:44:6E:AA:0E:AD:57:98:EA:C3:86:BF:7B:08:8D:74:89:31:77:26
X509v3 Authority Key Identifier:
keyid:78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d2:81:38:a5:21:fd:96:1a:cb:e7:6e:7d:18:82:73:1d:f6:
a0:d4:b6:89:18:a7:ac:84:0b:cb:1b:48:6c:be:8a:72:a3:ef:
9e:f1:ad:c5:db:90:3d:c9:b6:7b:84:fa:01:be:f9:21:b0:bc:
13:7b:8a:48:f2:6d:62:a6:91:b4:21:98:f8:6a:d2:48:87:b2:
36:5d:da:55:c5:75:23:64:f8:3b:96:a7:5c:95:f5:72:fb:fc:
99:d4:b7:2f:06:62:43:d2:58:ed:a2:9c:a6:25:60:66:2f:66:
01:5d:cc:84:bb:16:95:2b:3e:40:29:0d:b3:15:d7:a8:dd:9b:
35:95:95:2a:a5:44:4c:ff:dc:67:6c:a2:e0:be:e6:13:74:0e:
e2:00:e1:fb:8b:e8:6a:33:44:45:5e:58:13:63:e6:b5:04:2f:
03:6d:12:ac:f3:8c:89:83:8e:7b:50:37:b3:cc:b1:a2:c9:91:
5a:db:99:41:33:dd:8d:f1:f3:a7:35:d0:b4:a4:42:db:e2:f7:
e2:79:73:b8:3d:39:f7:c0:be:df:83:d1:52:58:d5:ec:9e:d8:
33:bd:ea:91:3a:37:ba:0e:51:61:b5:22:09:7d:a4:6e:10:cd:
84:6e:96:8f:f5:98:6d:a2:65:fb:9b:cd:be:31:68:53:9c:8f:
dc:25:8c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:16 2025 by rpki-client