Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: vxVZV6F1vGOU5WZRcBn+z5jGaI2OLWGA7Ebate7YgOs=
Subject key identifier: CD:58:15:04:D3:43:4E:2B:34:17:DC:78:87:89:1C:A8:F9:5A:3F:A1
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 019A4DE1C8704C9AAFD1BFC6573AC05CE0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 10CE
Signing time: Tue 04 Nov 2025 08:00:33 +0000
Manifest this update: Tue 04 Nov 2025 08:00:33 +0000
Manifest next update: Wed 05 Nov 2025 08:00:33 +0000
Files and hashes: 1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=)
2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=)
3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: rD61BwmVPIcu52kgJXFAQ+3NjAh48khuhqEF23yLhVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c8:70:4c:9a:af:d1:bf:c6:57:3a:c0:5c:e0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Nov 4 08:00:33 2025 GMT
Not After : Nov 5 08:00:33 2025 GMT
Subject: CN=cd581504d3434e2b3417dc7887891ca8f95a3fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:87:fc:0f:66:92:9c:0b:7a:e9:c4:19:48:
41:92:aa:f4:84:d4:5b:5e:e2:19:72:22:66:79:06:
8f:60:8d:2c:78:fb:43:84:77:f5:55:30:fc:32:b1:
9a:8a:74:5d:32:19:1a:b9:f0:29:f9:6c:66:d2:d4:
12:d2:68:ff:4b:07:fb:98:a9:76:50:16:24:ac:01:
8b:be:c1:8d:2f:cb:d6:05:96:63:ac:eb:75:bd:b2:
8e:32:3e:5d:f1:16:92:0d:78:37:3b:ba:11:95:b4:
07:44:62:dd:bd:d5:36:ed:98:f9:d3:c7:0a:50:23:
cc:ce:81:0a:3e:26:c1:a9:ac:56:d2:bf:70:b5:82:
9a:13:19:fc:10:63:e0:60:af:61:64:80:35:e5:f4:
6f:ac:23:e7:09:8f:1e:68:68:c9:ea:35:d0:89:37:
b4:18:f1:06:aa:83:65:85:90:7c:35:d9:52:f7:c1:
fb:21:5c:04:85:e0:23:b2:f6:7e:c5:64:dd:0b:12:
73:fe:23:4e:4b:a9:fd:e5:a1:50:0d:e6:fc:74:31:
49:0e:fc:ab:d4:bb:1a:27:67:8e:76:b2:d0:d5:0d:
0f:4a:62:93:b6:d0:1c:30:f6:3e:d7:73:27:7c:42:
c9:ff:03:c7:9e:5c:ed:6d:fa:91:60:f5:9c:92:e0:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:58:15:04:D3:43:4E:2B:34:17:DC:78:87:89:1C:A8:F9:5A:3F:A1
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:26:91:b3:f6:c6:e5:7f:d5:c3:cb:f3:16:a7:be:b8:00:db:
8b:ba:9e:bc:1a:fa:2f:84:16:fe:ea:39:79:96:9d:82:e1:30:
c3:9a:9d:b5:5a:12:af:04:11:65:f9:12:77:c1:ec:2a:8f:d9:
04:28:da:f3:5c:3c:da:e6:18:25:09:b5:d3:e9:6e:72:fc:94:
ba:e5:ef:43:c4:90:a3:ea:88:be:7a:cf:0a:d7:40:9f:0e:f4:
04:19:66:f9:4b:c3:03:a3:c7:42:87:5d:fa:db:93:ab:78:d6:
c8:dc:6c:bc:f8:ff:29:c7:b8:3a:e9:87:48:fb:5f:6a:21:49:
8a:5d:77:47:d8:13:c9:eb:50:27:7f:d1:39:fa:e1:59:b0:e8:
4e:ff:3b:2e:6d:fe:6c:1e:7c:fa:91:b7:50:33:73:c2:1d:27:
1b:aa:75:7e:4a:6b:a5:47:43:85:f9:11:b1:1d:d6:cf:e8:37:
b9:8f:e9:3e:17:5b:17:f3:82:ea:78:29:8d:47:8e:b3:4e:0e:
96:65:4e:13:2d:97:9a:06:1b:e2:46:0b:a6:5f:44:6b:bf:61:
44:cc:f3:f9:26:02:89:dc:84:24:f4:75:cc:ef:73:6b:7a:10:
b3:24:4a:2c:da:c0:35:94:73:6a:18:20:f3:80:4e:31:98:e8:
50:2a:45:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:50:16 2025 by rpki-client