Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
File: Ejw95hAR3gcQHhTcByc5UXHLA6s.mft (raw, json)
Hash identifier: PrWVke79w7MrfOE3L+FLJH8Ww+qP7uw1oddhemVwnIM=
Subject key identifier: 2A:10:93:9F:86:50:C1:29:53:84:FB:D4:B6:D9:20:45:AC:BF:14:08
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 0199FF22D2EF76828AF32215188B85665A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
Manifest number: 16FD
Signing time: Mon 20 Oct 2025 01:01:36 +0000
Manifest this update: Mon 20 Oct 2025 01:01:36 +0000
Manifest next update: Tue 21 Oct 2025 01:01:36 +0000
Files and hashes: 1: 4XQY4JUsPqpTR-IRkgGIXdttap8.roa (hash: XSSiKVwP/EIHTyAZzuUfnCWA6Nc9NZgrm28O2+2217Y=)
2: 6aH0GUkty0zRVM49hltz0E26o9g.roa (hash: B/btaQwmZwkS77oTf9pVbleylcjeDQp/znaQQHS+UkE=)
3: Ejw95hAR3gcQHhTcByc5UXHLA6s.crl (hash: I2B435bKD/b4UZt7gSlCCeoVnaOI2ZxV/KSnLVbCeOk=)
4: HwX-edPrb5YTj1nsywewpB-a_TU.roa (hash: rRJu1vGzABDOcQI2MPYQpOpSYqSD59eBb3y6GkyW8A8=)
5: Pti_2wHf4nDoTULmHuDpJnb60tw.roa (hash: 6vLb3cXdRGpIGB8yJspOGZTYqcFejvNzXH+8oL9C5OA=)
6: dWFWxAJC3wGlL2EpvGP_MKq469s.roa (hash: MSVcXPatvWpeCXQNpTDNs6InxOOtn9VjdMvIEuKDIVc=)
7: fCbpeuPkw7-WeltvV11giyI0D1c.roa (hash: ihUU/iNj25uKJCCOhJiQAWWJOBmcpbht1KhIqzbV5Nw=)
8: yyk6Di2XbNlkRGc89Nu-_03BSyA.roa (hash: fjtXv9Ycls9ttlFxVrAfyjqDfoCq3GWEcLByl3LaF+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:d2:ef:76:82:8a:f3:22:15:18:8b:85:66:5a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Oct 20 01:01:36 2025 GMT
Not After : Oct 21 01:01:36 2025 GMT
Subject: CN=2a10939f8650c1295384fbd4b6d92045acbf1408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:af:db:05:f0:d8:dd:d6:0b:8b:ae:38:b8:
b4:a6:c2:a6:54:dd:69:bf:b3:82:76:56:c4:4d:15:
f4:6b:11:26:30:18:17:0b:13:13:be:8f:61:6a:6e:
e3:69:4a:4f:4f:92:68:4c:9f:50:4f:03:7a:a7:05:
12:c3:97:2f:95:19:e2:c4:2f:e8:7d:14:e1:74:d8:
61:33:5f:ac:2e:58:ce:38:b2:e4:4a:42:de:cc:4e:
3a:df:bc:11:5b:60:c0:a5:ca:5f:93:8f:7c:9a:fa:
9d:98:ac:a9:2c:d7:79:31:ba:e3:9e:88:ce:75:6e:
1f:92:34:26:f3:f2:0e:10:28:95:d5:0c:9e:ee:c6:
1d:84:b3:4c:9f:79:d8:5d:3d:d2:f8:2f:60:83:0b:
0d:2a:24:53:ae:73:0c:05:58:ee:c1:c9:cd:a8:fb:
90:c5:e4:37:b2:fe:fc:d0:56:b0:b4:0b:2e:55:19:
86:da:ef:55:1a:e2:fd:38:50:81:ef:31:f2:c3:f0:
ce:47:ca:48:53:cb:74:3c:07:5b:0a:e0:2a:20:59:
58:8b:0b:2c:75:09:94:a9:07:69:fc:e6:b7:6b:f2:
7c:7f:74:b1:f3:5e:4b:44:7f:de:32:45:75:ac:2b:
1e:fa:4e:d9:08:f7:23:9f:9d:40:3e:3c:68:cc:13:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:10:93:9F:86:50:C1:29:53:84:FB:D4:B6:D9:20:45:AC:BF:14:08
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b2:49:da:ad:fc:b0:9c:b6:92:ca:b6:94:4e:2d:da:c6:39:
4d:ef:eb:93:d8:d1:32:66:96:12:da:7c:55:a7:e0:4a:25:83:
2b:79:7b:31:a3:0f:4a:91:b9:d5:68:5f:df:a0:84:16:fa:33:
ae:96:72:ac:d1:eb:13:7f:3f:84:9e:eb:82:d4:5c:b1:13:bf:
1b:29:e9:cf:01:54:30:de:f1:85:01:70:4a:a4:38:90:5f:70:
45:10:1f:a6:05:ab:fe:61:cc:4e:bc:ad:cd:4f:2a:cb:11:38:
93:99:7b:70:cd:13:a7:45:bc:4a:96:4a:18:d8:c8:32:ff:55:
60:f8:00:d8:ad:c3:bd:87:0e:13:b1:11:84:69:50:dc:51:88:
2c:86:3b:82:4d:53:be:b9:fc:ad:1d:6c:67:81:3f:0d:5c:a7:
ee:ce:43:52:fb:92:a8:6b:10:cd:90:7b:84:33:48:af:01:74:
be:ff:9d:8c:18:b8:aa:c9:40:6f:55:7f:a0:80:d7:d1:49:93:
11:fa:51:15:4d:76:90:5a:13:1e:db:64:0f:f6:e9:2f:da:b7:
f2:f8:67:ac:4d:6a:cd:aa:e2:86:be:27:25:66:23:79:e1:59:
7a:6a:07:ef:1a:e4:4c:b4:b6:5c:e1:8d:44:b2:5c:a0:b1:05:
9e:65:12:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:38 2025 by rpki-client