Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
File: eLHb4vrypuffpXTOVRkJYwFfHFM.mft (raw, json)
Hash identifier: lAYtW3MjaBofUteT5+rMKqtBWEQYtg5ieqP3Yq1uZX8=
Subject key identifier: 78:6C:17:E3:B2:D4:C2:B7:5C:99:FA:6A:EC:D8:44:5F:74:99:EE:D0
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 0199FC58C3A98E0F684426273D067D6795EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
Manifest number: 16D0
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: WzTLOTiHe9vB3hAqlAy8pw18Doo.roa (hash: OSj0Xgv5CShMqmpg0KY2bWpFRvfkFgflayWsnGxuzf8=)
2: eLHb4vrypuffpXTOVRkJYwFfHFM.crl (hash: rjpL6SdoZWTa4PWiev6RVOEkUD0dR0wZ4KmSN3BnXMg=)
3: fEhR-lCUkZVEdMm1RQIIE8pgNCo.roa (hash: o0vAsrKSY0T4tLyGeQ8NwF7vCi/bDXk5djLv/i3XQL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c3:a9:8e:0f:68:44:26:27:3d:06:7d:67:95:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=786c17e3b2d4c2b75c99fa6aecd8445f7499eed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:ec:57:b8:02:4e:cb:c9:94:10:10:5c:91:
f5:48:25:5c:d8:c5:b6:df:d0:fa:dd:d9:8b:eb:34:
79:22:22:3d:31:ca:c4:9c:43:bd:3e:06:dd:b7:04:
7f:60:13:c8:cc:29:e4:06:1d:d5:c8:be:3a:64:45:
d4:ee:74:62:ee:d6:10:e2:fd:17:20:dd:ec:e7:6b:
f5:48:4b:f6:2e:da:33:ce:8f:bb:84:57:d1:65:6f:
47:06:a8:5f:22:39:97:cb:50:ad:5f:91:0b:32:40:
93:49:0f:95:bb:9d:b4:84:d1:8b:22:5c:41:d3:ca:
47:ff:bb:39:4f:eb:4f:6c:fe:f9:b7:a5:35:5b:8c:
ee:71:88:a9:de:84:0e:e9:3a:a8:65:ea:20:47:c9:
ca:0a:f8:e4:20:56:42:a5:bc:69:41:b0:88:66:d9:
c2:13:11:8d:76:0c:b1:d7:40:81:06:34:19:14:98:
5b:03:e1:d3:41:4e:9d:57:0a:9d:af:b2:64:84:e7:
8d:16:ec:30:00:1e:2b:3e:7e:6a:58:ba:da:d7:0a:
fc:bd:af:bb:e3:0c:18:c5:96:2d:54:36:5d:1d:2a:
e7:83:e3:47:9e:ce:c7:79:ad:c6:ac:57:c3:e8:ec:
1e:eb:f7:1a:f7:9d:3d:be:0a:77:be:6c:5d:09:c5:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6C:17:E3:B2:D4:C2:B7:5C:99:FA:6A:EC:D8:44:5F:74:99:EE:D0
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:32:d3:c1:2a:fa:db:76:29:fd:58:d8:d5:64:15:be:eb:5d:
ec:67:f0:b0:04:27:2c:ba:16:cc:33:f8:41:e6:a9:cb:75:7e:
60:99:97:34:ac:7c:1c:e5:93:47:0b:dc:77:1b:22:a3:89:c4:
d2:35:d0:a7:fe:9b:68:95:36:88:cd:e4:18:82:0d:8f:20:42:
03:d9:2d:75:9f:e1:29:64:38:00:fb:86:20:e5:c5:c8:fd:98:
3e:41:bf:0a:0c:b1:8b:73:54:0a:f2:cb:94:9a:d5:fc:78:94:
31:21:60:cb:db:b0:3a:de:ad:de:bb:89:ed:ce:9e:23:35:31:
08:a5:c5:f7:88:cc:ec:94:4b:2d:b2:77:90:47:30:dd:88:c1:
e6:68:5d:14:26:12:c7:1f:73:47:7d:68:c5:a3:ac:12:33:7d:
31:86:1a:2d:67:06:42:d8:15:2c:1a:d4:bb:4a:dd:58:63:49:
0d:d4:39:e4:ab:e0:eb:cc:a7:8c:f1:fa:27:07:2e:25:29:0b:
09:49:9a:2a:07:4a:26:94:f7:d9:d0:a9:af:0f:5b:d3:dd:3b:
36:f0:84:f9:f5:99:2c:96:61:ac:2e:60:98:b0:df:57:43:90:
10:90:59:3c:09:36:45:86:99:6d:cb:ef:74:3d:11:4e:b2:6c:
6a:cb:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:38 2025 by rpki-client