Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
File: eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft (raw, json)
Hash identifier: NtfM90MKWFN5tnkBTUkMD87IfODseQUPlYK6H0Whaso=
Subject key identifier: 0E:C0:31:26:C5:D7:57:A9:57:6C:D1:83:02:D5:E4:94:56:88:D2:2C
Authority key identifier: 78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
Certificate issuer: /CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Certificate serial: 0199FCC69B88304FD4838B93827ABD0D41BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 14:01:38 +0000
Manifest this update: Sun 19 Oct 2025 14:01:38 +0000
Manifest next update: Mon 20 Oct 2025 14:01:38 +0000
Files and hashes: 1: 1-i2LAxW-tjEoNC4ZpT6usTL7gdY.roa (hash: mWMUsyZTQBURIQak8OdjUvSqzoXJtVHx7l8rGKDmzC4=)
2: eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl (hash: Fp3K80lnkWFLBwdQQBBFIaF8k+wh4m1HjBlvAGaLcpM=)
3: z7I1AdqPw_-7mPjdl0dnnYnsik0.roa (hash: BjCGcHqUo7qGCSBQIO0CmUGm0RQ1LmZx/49S9yuc9ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9b:88:30:4f:d4:83:8b:93:82:7a:bd:0d:41:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Validity
Not Before: Oct 19 14:01:38 2025 GMT
Not After : Oct 20 14:01:38 2025 GMT
Subject: CN=0ec03126c5d757a9576cd18302d5e4945688d22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:45:92:40:d3:72:1b:d2:e8:3d:24:4e:ee:
a2:d3:61:dc:d1:01:4d:4a:07:e4:ae:f5:5f:d6:9e:
b6:f1:cd:75:ec:63:6b:10:5f:40:5a:fa:43:7d:9e:
d2:c4:e0:c9:08:81:cd:8f:fe:6d:73:30:1b:40:2b:
3a:8b:f4:5c:d4:db:7e:73:18:a5:12:14:7e:5b:38:
bf:86:77:4d:bf:f0:1d:32:49:92:36:6f:69:d7:17:
98:56:30:61:ac:44:99:2c:98:c0:26:f4:68:53:14:
e1:16:01:f3:06:4b:cb:ba:93:fd:e9:40:98:8c:f9:
f1:83:16:b4:d4:01:2a:ab:98:41:cd:8f:e6:11:3b:
e0:8c:72:5d:ed:03:33:99:34:6a:f4:78:c3:b6:30:
89:24:8f:57:b8:92:df:32:6a:2a:bd:5a:b9:52:2e:
4b:c4:2c:c7:c9:80:a4:95:44:b7:f0:08:07:35:c4:
ab:6c:f8:9f:70:03:44:de:8f:5d:b7:41:21:02:f2:
19:c5:29:8a:67:61:7f:19:d5:97:77:3f:25:c5:3a:
5f:46:28:42:3e:c7:50:a1:b4:e8:5e:24:8e:5a:f0:
81:f8:b0:3b:4c:59:33:8d:05:87:32:d5:70:c9:f5:
21:e0:42:d4:5a:89:11:6a:65:0f:62:e0:c1:aa:c7:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C0:31:26:C5:D7:57:A9:57:6C:D1:83:02:D5:E4:94:56:88:D2:2C
X509v3 Authority Key Identifier:
keyid:78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:38:23:af:2a:dd:3f:a7:68:5f:b9:b9:0b:3a:b0:50:9a:07:
50:48:18:c1:0b:9d:9f:5a:af:b9:42:df:94:bf:49:e8:5c:6e:
60:c4:9a:02:38:d3:bf:2f:ed:c8:ba:68:fe:7b:06:bc:43:d6:
82:08:dc:b3:c0:a6:26:dc:61:bd:30:f0:f9:f0:91:4f:9f:8a:
2d:51:4a:38:fe:8c:ee:48:26:7e:02:8d:2d:bf:60:d6:7e:2a:
33:d2:9d:d9:c9:a3:a3:94:fd:6a:bc:a3:92:80:c6:63:1b:f4:
05:99:37:05:08:f7:9e:98:56:35:26:6a:14:e5:fc:22:31:62:
aa:c1:74:a5:05:40:f5:05:f1:df:1a:ae:78:36:b7:1b:85:bc:
a9:7a:8a:2f:96:c0:f2:c3:c9:f6:f1:49:b3:60:29:6d:72:c0:
2f:3b:14:ee:38:9b:3f:a7:34:02:4b:7a:df:30:65:39:51:59:
fe:00:d7:79:b9:1a:99:3e:0e:b1:18:a8:11:89:b3:02:81:42:
81:e3:65:45:d2:ef:68:04:71:ac:11:05:0f:40:ea:84:61:7b:
60:46:1f:07:bb:16:0f:36:99:56:cc:08:92:33:62:e6:06:09:
49:67:2a:37:fa:ca:82:a6:f9:39:92:5c:42:f8:53:d3:c6:cd:
de:b5:ae:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:18 2025 by rpki-client