Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: jDF4r2JIkz4pJ6Fz61UHdESZpoH7Lmm5wT4Iywv1Jbg=
Subject key identifier: 93:9D:E0:11:4E:80:B1:06:F6:59:E9:82:81:EC:D1:34:A1:91:C6:51
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 019952D4807BB772C559B19326DAB4BB1694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 104C
Signing time: Tue 16 Sep 2025 14:01:22 +0000
Manifest this update: Tue 16 Sep 2025 14:01:22 +0000
Manifest next update: Wed 17 Sep 2025 14:01:22 +0000
Files and hashes: 1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=)
2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=)
3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: vBROuyRxKdvunOW48+QRNl0AcXr6QAIphGkXxzhFEMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:d4:80:7b:b7:72:c5:59:b1:93:26:da:b4:bb:16:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Sep 16 14:01:22 2025 GMT
Not After : Sep 17 14:01:22 2025 GMT
Subject: CN=939de0114e80b106f659e98281ecd134a191c651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0d:27:e1:bd:ba:fa:52:1b:ed:b0:6b:bd:84:
ea:cf:a4:3e:be:d0:ac:23:b4:dd:07:67:5c:65:f8:
e8:c8:15:ef:7e:d6:8c:6a:6f:a6:ed:82:fb:c0:db:
79:71:01:4a:17:a3:5f:cf:e2:81:01:8d:2e:2e:fb:
c9:3d:c4:a0:c0:9f:b5:5e:d4:51:20:41:f7:a9:83:
73:1e:dd:b9:4f:af:42:06:54:62:0f:28:3f:aa:4c:
3c:57:b6:c8:f4:8f:18:0e:73:e9:59:81:b8:15:bd:
47:77:bb:5d:ee:a6:4a:f5:96:d5:5c:40:df:f8:c2:
24:27:3f:23:bf:8b:72:bd:71:93:84:72:7a:a7:e3:
c6:8b:55:cd:e6:92:9f:fb:d0:2c:68:d9:0a:77:70:
b9:a5:ed:09:d4:fa:06:fb:e0:66:ad:a1:5b:77:6d:
fd:42:31:e6:a9:f0:ec:eb:de:51:9f:73:91:4b:b2:
05:72:2a:e8:e3:70:5e:88:52:bc:e7:40:e1:cb:af:
bc:37:dc:9f:ae:53:85:08:71:1e:d8:ea:d6:ce:59:
51:53:61:0e:82:ce:e5:dc:17:19:ee:9d:f6:5e:3e:
44:17:c6:cd:ad:35:1c:ae:45:b9:95:ff:35:c9:f4:
66:23:46:ec:3e:48:78:82:8b:c8:01:0f:40:0d:9e:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9D:E0:11:4E:80:B1:06:F6:59:E9:82:81:EC:D1:34:A1:91:C6:51
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:af:c9:bc:f8:36:74:62:e8:95:48:98:bc:f3:3b:b6:4a:34:
d8:a4:0f:e4:2a:34:d0:52:74:06:99:7d:17:13:b3:ea:88:aa:
df:32:19:57:af:bf:f1:e3:8a:04:5d:62:90:e8:ce:e2:dd:33:
6a:b4:a0:6c:32:df:17:60:11:82:03:e1:e4:0c:3e:15:a9:9f:
b7:4e:3b:b8:1f:3f:09:03:ea:0d:83:33:15:b6:79:72:15:50:
ba:ff:de:8c:a5:19:e9:86:f4:78:7a:54:6d:50:4a:af:ec:8d:
61:40:fc:14:1c:a8:db:fd:21:fe:15:c2:8f:d8:fa:11:35:05:
3c:b3:f0:21:04:81:d4:44:b5:b8:99:4f:5b:97:53:14:29:cb:
a6:58:b0:d5:c4:83:0e:c5:c1:ce:1b:af:5e:eb:a6:ab:e6:b0:
f1:53:9a:65:de:b6:af:21:38:3f:6a:16:6f:ac:cc:2d:f1:c9:
e8:1b:c8:0d:4a:af:d2:cc:f0:3b:19:d1:4a:b6:d3:00:e0:d2:
68:6d:b9:0c:4e:25:6d:75:17:78:ef:09:07:2a:26:8d:1c:08:
8f:82:b7:5b:c3:b0:9f:8d:69:b1:55:b9:f9:3b:8e:74:42:3f:
74:15:0d:d1:91:8b:70:ef:4f:c8:ee:5a:84:27:eb:89:56:b1:
60:a8:44:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 20:41:42 2025 by rpki-client