Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
File: eJiLIIHZlCID0iJIrNgF2zoT3MU.mft (raw, json)
Hash identifier: mBKLaL+yc9gbF3BLNNsFTCr4+7nfogJWgQtjzD3jJFA=
Subject key identifier: 4E:BC:E4:17:2D:C1:80:C0:5B:17:A7:DE:97:C7:B2:D8:4F:64:50:10
Authority key identifier: 78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5
Certificate issuer: /CN=78988b2081d9942203d22248acd805db3a13dcc5
Certificate serial: 0199FE47309C185DE6BC0F78FB3ABB9FA07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
Manifest number: 11A5
Signing time: Sun 19 Oct 2025 21:01:42 +0000
Manifest this update: Sun 19 Oct 2025 21:01:42 +0000
Manifest next update: Mon 20 Oct 2025 21:01:42 +0000
Files and hashes: 1: _aQ7HAc4oxc5vbNE-bDdRfJ_I5M.roa (hash: vqzaWyeuzw7jDRILE1vVohCUPlKRF+7OXLUlnA1mX4M=)
2: eJiLIIHZlCID0iJIrNgF2zoT3MU.crl (hash: xFnT/xZaY0eLtL1dlVq903Pdjg8LJCj4cxIJ+bnYiqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:30:9c:18:5d:e6:bc:0f:78:fb:3a:bb:9f:a0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78988b2081d9942203d22248acd805db3a13dcc5
Validity
Not Before: Oct 19 21:01:42 2025 GMT
Not After : Oct 20 21:01:42 2025 GMT
Subject: CN=4ebce4172dc180c05b17a7de97c7b2d84f645010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:c4:13:2c:bb:47:90:c3:98:15:5b:86:29:
f5:f6:9f:44:92:33:cb:59:15:27:89:13:5f:b3:58:
a9:83:e3:dd:2f:df:b3:41:2b:4a:3a:a4:a4:20:b7:
d0:3d:f5:b3:28:f3:df:ef:5f:7a:a6:94:d5:8a:6b:
0e:f7:dd:3e:85:eb:63:d1:a9:37:60:0a:51:1e:77:
85:07:b0:82:ea:e5:b0:8b:7d:e6:78:8b:77:86:cf:
30:63:8d:95:d3:2a:26:51:f5:6f:81:32:ee:8d:8e:
11:c0:5b:91:c1:36:99:d3:8b:4d:e3:41:82:6c:58:
ba:64:01:e4:6c:71:44:fc:f7:89:25:c2:bf:57:d2:
4c:26:28:54:1a:7e:60:cf:af:32:53:2e:5b:96:b6:
f7:68:b2:0c:7c:be:00:c2:e3:af:74:12:69:3d:d0:
38:e6:8a:fd:11:f4:8b:0d:a5:67:5f:5e:4b:85:73:
08:9e:fe:ec:a4:d8:0a:06:c2:53:5d:8f:5e:d1:31:
7e:e7:24:1d:38:f0:46:e7:d6:e8:b3:ca:ed:5a:75:
17:50:27:9e:8a:9e:33:53:5e:eb:65:26:c4:23:6d:
ed:e8:af:3e:03:ab:4f:f5:5c:aa:52:b5:d7:20:dc:
1d:0f:d7:be:86:6a:c7:d3:58:ec:01:d3:e4:d8:22:
93:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BC:E4:17:2D:C1:80:C0:5B:17:A7:DE:97:C7:B2:D8:4F:64:50:10
X509v3 Authority Key Identifier:
keyid:78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:97:5e:07:32:b9:80:42:ce:55:55:9c:ef:b5:c2:09:0d:af:
10:f6:f5:b3:72:15:75:8b:6a:78:c5:b6:92:8f:a2:a0:2c:5a:
86:b7:80:a6:e6:2e:f2:9f:47:cd:35:4f:60:09:30:a2:7e:89:
0f:d5:37:e2:b8:af:1d:e2:0b:cd:cb:4b:07:34:b1:22:23:70:
b8:8e:1e:69:34:de:88:c4:9c:02:39:6f:fa:f2:3a:07:b8:96:
d6:a7:3a:b4:3f:06:c1:9c:29:4b:08:55:8b:28:aa:4a:2a:ec:
0d:0e:f2:06:15:c3:17:1b:c2:7e:0f:74:04:2f:bb:fc:e5:b4:
09:5f:65:96:10:b9:68:f0:75:38:74:9e:d2:c1:e4:bb:ef:5f:
f0:c4:44:d4:69:45:c2:84:9d:1f:59:51:83:11:cf:6a:7b:ae:
ce:23:ac:11:81:46:af:87:b6:6e:c0:4b:d4:11:7d:0e:e1:5f:
40:ae:c8:82:55:97:2c:06:88:5c:6f:cf:5e:a0:64:32:52:86:
fe:aa:08:fe:fb:f5:b3:3b:ed:40:cf:9d:7f:57:74:98:6e:93:
c3:9f:dd:32:59:be:12:8c:5f:fa:a6:55:28:90:04:95:f8:57:
c9:cf:f0:99:a1:b3:62:b9:c0:61:5d:88:2e:e1:6e:3c:b3:30:
c1:6b:d7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:20 2025 by rpki-client