Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier: 0kOkmhPf0ahONo6b+GUZ1U6Xm3kQWvf8FClJaW+hKl4=
Subject key identifier: 0F:7E:65:CE:22:68:7F:B7:61:17:F2:29:46:83:FB:DE:31:8E:8F:A6
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 0199FC588A428874C8C59C4DF4CBECBE456C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:24 +0000
Manifest this update: Sun 19 Oct 2025 12:01:24 +0000
Manifest next update: Mon 20 Oct 2025 12:01:24 +0000
Files and hashes: 1: 1-15VXX8nVt-lY3LiGzv1Jr6OcwM.roa (hash: SlkmWz0jcL6xUXUhTFQpLdotJEVgcyVB/xztx7GovmM=)
2: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: GjZAd3kZJrly9Jsyx+yfMPJ/ooPpbq/raVBPmt4ES5k=)
3: gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa (hash: +WQhnu3iWgtDqgj16Fdo45N/RQNl/1eQLYZcURm+NBk=)
4: tMCKKQ7T7_7JMjdc5UvMftnS0Sc.roa (hash: kzZ53feDoHQUM5QIs7aC6l1igadYhsq3pYnx3tG/SUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8a:42:88:74:c8:c5:9c:4d:f4:cb:ec:be:45:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Oct 19 12:01:24 2025 GMT
Not After : Oct 20 12:01:24 2025 GMT
Subject: CN=0f7e65ce22687fb76117f2294683fbde318e8fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:95:ec:92:83:70:21:e6:20:12:20:c3:5e:
9d:c5:8f:e8:92:fe:df:99:21:24:77:76:24:39:a7:
6e:a3:08:c3:ed:2c:f2:55:54:80:ba:43:3b:d3:20:
5a:fe:fe:3a:27:59:a4:b7:7a:e5:90:1f:c5:3a:43:
06:23:a6:f1:b1:2c:29:07:8b:c9:51:99:90:b3:64:
03:6b:e3:73:ce:d1:b0:aa:a3:93:54:a8:42:0b:01:
09:1f:fe:7f:74:25:30:a0:4a:e9:f0:9a:d6:2f:62:
ef:73:25:f6:a8:83:5c:cb:03:0d:3f:57:79:b2:a8:
3e:c5:85:39:53:6b:59:a2:14:9c:de:fd:3e:07:ad:
1c:e9:5b:ec:bc:57:48:16:65:79:c8:50:26:2e:3d:
54:8f:e5:32:7b:00:4c:a8:8b:43:60:45:a1:8d:a3:
d5:4c:e5:e2:3a:14:9e:77:1c:a5:dd:e2:41:ca:60:
88:32:5f:41:93:5c:e1:0a:fa:77:4f:03:19:06:ed:
36:35:1e:fb:28:3b:50:c4:7e:cd:b6:e1:10:89:9c:
8f:9d:91:91:09:f4:9d:df:b1:f5:6e:46:3f:4b:fc:
0f:b4:9c:2b:db:4c:4c:2a:f5:94:fd:a0:ac:f4:81:
70:b0:d6:50:9c:3a:19:68:5d:78:8a:ac:f4:55:0b:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7E:65:CE:22:68:7F:B7:61:17:F2:29:46:83:FB:DE:31:8E:8F:A6
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:33:b1:c0:47:73:fc:af:38:a3:db:c3:e5:1f:fd:d5:44:78:
30:32:aa:72:2c:8e:c4:3f:49:c4:52:ba:dc:02:d1:3e:a0:b3:
a5:ed:fa:c4:85:05:3b:e1:61:7a:5f:94:f6:ac:e3:85:3d:db:
50:fc:02:2d:2f:61:51:85:c5:ed:3a:c4:49:93:5a:ff:c6:b5:
85:4b:03:80:40:51:8c:75:4c:08:b3:df:77:f8:d3:57:3f:45:
d6:55:8a:84:56:64:51:a6:3d:3a:a4:3c:bf:20:bb:8d:b0:b7:
10:40:8c:93:97:a9:d9:c1:f1:20:15:1f:6f:e9:f2:4b:06:67:
e5:e4:95:e0:88:b8:1a:30:fb:5b:57:67:75:5b:14:87:56:9d:
d7:0e:f9:5a:f1:5c:54:a3:b3:ec:cd:5a:be:31:1b:b1:45:51:
cb:c4:01:07:5e:34:27:a8:54:1a:61:09:95:da:00:37:da:40:
28:b1:ad:49:56:81:8e:cc:92:12:b7:d6:8c:54:f9:58:bf:8c:
44:cb:c9:c8:70:9b:dd:ee:f9:8d:c5:90:6d:07:4b:4b:3c:67:
43:ed:9f:e8:4f:1a:c9:b1:4c:f4:0e:ec:af:c4:81:70:62:f3:
f5:d6:44:63:03:cc:41:8d:53:fa:c8:e8:65:83:54:dd:31:e5:
5d:a7:d9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:41 2025 by rpki-client