Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
File: eVATNGyNjyPgEo0waZeYAjfbI3Q.mft (raw, json)
Hash identifier: SVd1QhLyx6v2qfyRft9aYY/OgEizX6Eqtah+USnyN/Y=
Subject key identifier: B4:3C:D4:28:57:1D:AB:97:F8:36:56:5E:6C:3C:08:74:14:6A:19:EA
Authority key identifier: 79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
Certificate issuer: /CN=795013346c8d8f23e0128d306997980237db2374
Certificate serial: 0199FD34557481D7B3C848AEA2F2EC6E6027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
Manifest number: 100B
Signing time: Sun 19 Oct 2025 16:01:29 +0000
Manifest this update: Sun 19 Oct 2025 16:01:29 +0000
Manifest next update: Mon 20 Oct 2025 16:01:29 +0000
Files and hashes: 1: IDffwXSXahN5-5PWuJ4XE3BnZeo.roa (hash: 1+Z8cC/8+v/4brLtfip5esLm8Gxo3GEZJmCR2m2xqjM=)
2: eVATNGyNjyPgEo0waZeYAjfbI3Q.crl (hash: f/M5XnB2Jt0STL2BVTFUj2uB393MSUtD6TM/rcdcpYY=)
3: ltph-6gi_L0tRRLCXMre4piqZuw.roa (hash: MFmQ6yYiN75fl1Cazo0nbfBN0O2fPbQZ0vfcLROz7mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:55:74:81:d7:b3:c8:48:ae:a2:f2:ec:6e:60:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795013346c8d8f23e0128d306997980237db2374
Validity
Not Before: Oct 19 16:01:29 2025 GMT
Not After : Oct 20 16:01:29 2025 GMT
Subject: CN=b43cd428571dab97f836565e6c3c0874146a19ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:ca:ad:33:f5:9c:06:a3:cd:ed:55:07:55:
12:3a:f3:da:dd:6b:5c:f1:f8:53:b8:70:1b:39:8f:
7b:97:24:19:ec:c5:31:cd:98:3c:d8:c0:d3:c6:a3:
9d:57:36:14:4d:1a:f5:cd:6a:91:e1:87:df:63:9f:
70:9a:ef:e6:3d:33:17:f1:40:56:6f:e8:40:2b:e4:
5e:84:ff:15:70:c6:05:8c:f9:d9:4f:a2:75:e0:b1:
e4:84:80:98:70:8c:90:43:c1:61:f0:01:83:6e:5e:
a5:13:f5:fb:60:58:26:42:60:fd:42:d4:a5:8a:cd:
1c:c7:b0:2f:79:7a:ed:3b:89:b4:b5:5e:f8:38:b6:
bc:04:ce:54:b2:45:3e:1c:80:b8:35:94:7b:7e:4b:
0c:5e:cc:6b:d3:b6:c7:ba:04:8e:57:6c:2a:21:c5:
53:32:b3:69:57:20:f7:c7:4f:e6:c2:4c:63:ac:62:
fa:f8:64:2a:2e:ba:59:38:7a:f4:d3:48:cf:6b:7a:
13:e5:2f:11:60:66:b4:a8:54:f4:e9:d7:58:b5:22:
14:84:54:4a:98:e8:b0:17:36:60:ad:52:f9:40:48:
22:a0:78:01:96:cc:b6:d7:84:e4:80:46:ac:34:62:
ab:38:80:c1:64:86:f1:1c:44:fb:3f:fb:69:f4:68:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3C:D4:28:57:1D:AB:97:F8:36:56:5E:6C:3C:08:74:14:6A:19:EA
X509v3 Authority Key Identifier:
keyid:79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ff:16:b4:f7:c0:8e:29:63:d6:40:e5:57:51:7a:88:28:f7:
66:6f:82:e9:a9:58:e2:c5:c2:c2:06:8d:2f:d1:82:cb:12:c0:
7b:00:f4:aa:0f:0e:8b:7d:81:68:39:80:a4:c7:79:f2:20:f9:
ad:b6:3c:db:a7:33:c7:64:2b:6d:cf:87:88:7b:f3:aa:6a:bf:
f2:b7:71:fc:b2:45:3a:7b:55:46:47:ca:b4:b7:27:75:86:f5:
5a:69:86:38:d9:3c:16:e1:ec:24:48:b3:e1:e5:57:52:04:07:
d4:41:04:2a:c0:1d:fa:41:9c:de:23:06:fb:89:1d:10:52:5b:
ed:93:3c:c7:9f:fe:9e:99:76:0c:59:a8:5b:85:03:d4:ee:20:
d0:49:cd:1b:04:f0:58:99:b6:71:71:3d:52:de:e1:ee:92:b7:
0c:0f:ec:1b:7e:21:1f:4c:8c:ec:cf:28:8f:fd:c0:b6:0c:cf:
08:59:f2:65:4c:52:6b:e5:80:bb:86:8b:a5:98:7d:73:ac:f9:
ae:38:78:2a:52:fe:7b:06:24:52:d9:ed:77:9d:b3:99:95:85:
58:bd:e0:c4:c7:73:c0:c1:08:30:d9:ef:21:fb:a7:09:dc:a0:
81:b0:9b:1c:7f:4b:b4:95:74:2a:c5:80:84:48:04:bd:00:cb:
3e:d5:da:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:08 2025 by rpki-client