Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: zFFbz1+Or/R6MyUeY9JHqzjs4ySGrYHhrE/yNf2/3u0=
Subject key identifier: 58:31:BB:73:5E:8C:D3:49:F3:3B:B3:5F:56:CD:BC:85:07:EC:01:91
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 019A24782C8E0DD659A38141AC564AD0BF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 07:00:46 +0000
Manifest this update: Mon 27 Oct 2025 07:00:46 +0000
Manifest next update: Tue 28 Oct 2025 07:00:46 +0000
Files and hashes: 1: KV3y67WzUL1dd636tV-tGwBKS6Y.roa (hash: BJK7UzSsG4bIRgy/oUjNbXPmO5iJK9tZClLQ8IpL8JQ=)
2: X9Fijkz-_wqcxXki_ZgW942-ey4.roa (hash: 6GLvc6dX34tOpcs0+RseJCW6ZD873+Ny/2OET9fAl0I=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: d0GVH7/XaIOtQJQAHMI+zjueVHHVcH2We/GJwTme3vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:2c:8e:0d:d6:59:a3:81:41:ac:56:4a:d0:bf:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Oct 27 07:00:46 2025 GMT
Not After : Oct 28 07:00:46 2025 GMT
Subject: CN=5831bb735e8cd349f33bb35f56cdbc8507ec0191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:31:04:19:c9:ff:98:da:b6:69:89:09:d5:2b:
68:dd:2b:52:2d:5f:cf:40:61:da:32:bf:ce:ac:19:
af:b1:e2:54:05:06:8f:32:83:f2:c9:d8:74:36:9c:
05:76:14:df:50:82:f5:08:7c:5b:26:d1:97:e7:24:
ad:aa:eb:77:5a:5f:f3:86:50:6b:c9:39:52:78:ab:
0f:e5:c7:46:52:11:77:0d:01:af:77:ba:28:15:7d:
5f:81:1d:43:c8:c9:d6:9c:6d:59:4c:0a:d8:f6:bd:
cc:22:72:cd:5b:b5:2d:0c:75:2e:bf:bc:81:76:21:
60:b5:f5:4f:e4:cd:4c:ab:8f:d4:49:e0:a0:79:ef:
48:1e:da:75:8e:19:1e:5e:3c:b9:66:c1:7f:96:f6:
93:85:3b:5c:f6:9a:f5:f1:b5:f7:90:77:7d:8f:df:
5d:72:2b:cf:f1:0b:a7:a6:84:88:8b:e1:f8:2f:d3:
9c:f8:b9:79:a2:b9:3c:01:27:48:9e:ae:c7:be:c3:
97:77:9e:84:98:92:4f:80:17:10:34:35:92:b7:d6:
b8:3a:58:4d:85:29:25:b3:ea:b3:b2:a0:95:35:98:
1c:94:42:4f:6b:e7:15:7c:3a:2e:c9:a4:0c:c9:f4:
68:93:5c:87:69:81:7a:ac:e4:5f:34:32:74:73:a4:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:31:BB:73:5E:8C:D3:49:F3:3B:B3:5F:56:CD:BC:85:07:EC:01:91
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:5a:90:a8:b7:63:54:8b:97:1c:4d:f6:5a:2d:cf:3c:45:d7:
48:1e:db:5e:cd:54:ce:4d:f6:ef:b5:58:31:4a:75:8c:cb:c9:
cc:54:02:c9:d0:10:1f:62:f7:c5:1f:e1:50:a0:95:30:d0:c4:
01:c2:26:73:67:2e:df:ff:70:bc:f3:26:c4:c2:45:f6:af:84:
62:03:d9:b8:51:9f:65:f5:f8:14:0e:3d:50:0f:bf:37:2a:d6:
ff:3c:02:d4:91:54:e7:0a:7e:92:b6:51:6b:2a:53:99:4b:bc:
7a:ec:15:54:dc:67:b7:29:8d:d0:c8:9d:57:6c:05:67:e6:e3:
ca:b2:f9:8f:40:b8:62:3c:bf:be:08:6e:b8:de:13:6c:8a:35:
40:1f:b5:7f:2f:67:ba:cb:f1:10:da:f4:c5:3e:ae:cb:96:83:
10:6f:2b:6b:7c:60:ed:a0:ea:b0:31:b4:38:bb:8c:c1:e2:44:
b9:c5:c7:05:00:d0:c6:6f:d1:3d:37:b5:52:a8:26:00:25:34:
de:cd:b2:2d:00:de:a6:97:7a:da:98:5c:39:21:fe:f7:be:d3:
0c:97:fa:9c:d2:70:61:b0:39:27:c7:08:d7:63:92:d0:5b:15:
a1:d1:0e:60:9d:91:a5:49:26:7c:6c:81:5c:88:71:30:7a:79:
9e:22:b4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:55:35 2025 by rpki-client