Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
File: eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft (raw, json)
Hash identifier: zQt4OYGWEPE9UoKGELQ+vM4l05wgE2tRmv9w48Eni9w=
Subject key identifier: EC:C2:53:6E:0D:4F:0F:1D:CD:63:8F:29:E2:9C:9C:32:99:DA:56:74
Authority key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
Certificate issuer: /CN=7870621fc0afc8ec18eef20633f6148813279976
Certificate serial: 0199FCFD9D16D162247DB16D2641B51931B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
Manifest number: 05A8
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: Mg8uBQPef3LyJjKgZxMt4YNcO_E.roa (hash: PmmY7x5LyJJDD6LlXlPdfzSLFcMHWHakThUWPxHgQkY=)
2: eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl (hash: B6jwqn4f4dvlzF5hwTE1rKzNs1AcFMDXIACgTWDO+xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9d:16:d1:62:24:7d:b1:6d:26:41:b5:19:31:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870621fc0afc8ec18eef20633f6148813279976
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=ecc2536e0d4f0f1dcd638f29e29c9c3299da5674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:d0:35:28:9f:63:c7:0b:45:c0:fc:04:50:
21:55:33:35:d8:94:83:23:38:8b:92:89:8b:45:15:
ad:ea:04:2f:92:bf:21:c7:93:37:9a:a6:8c:65:b0:
d3:c6:19:78:9d:85:70:30:79:3a:0f:f6:20:78:df:
ce:6f:d9:f7:b3:8c:80:d0:39:35:2a:ce:28:1b:c2:
f4:d9:0a:c1:db:53:33:a9:b7:1f:7b:cf:c6:f1:93:
8e:8b:fd:36:41:47:c8:aa:e7:4a:c9:03:99:af:14:
8d:7e:5f:dd:af:ac:a0:be:ee:53:d0:a9:3d:5e:10:
2d:8e:3a:ed:0f:5d:d0:ac:10:1f:72:6b:03:49:e9:
7b:d2:10:11:7e:a1:09:04:b6:d4:f8:6d:4e:cd:3a:
34:9f:05:57:02:de:2d:7e:a8:78:34:e3:35:52:32:
31:2f:d5:77:90:25:26:43:46:1d:d5:17:9b:97:6c:
dc:2a:91:f7:fa:86:43:68:f3:45:7b:4d:32:77:48:
71:94:b9:9b:8e:70:b8:f8:a2:ac:52:55:d0:f3:fa:
dd:ac:f7:5e:36:06:86:be:c1:d6:e3:15:38:85:ad:
a0:14:9a:4e:8c:29:1a:56:32:85:a0:0e:d3:12:dd:
f7:2c:43:bf:09:f5:7d:63:c7:09:cb:65:90:79:80:
7c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C2:53:6E:0D:4F:0F:1D:CD:63:8F:29:E2:9C:9C:32:99:DA:56:74
X509v3 Authority Key Identifier:
keyid:78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:09:fc:64:50:05:64:51:cc:9c:b7:4e:a7:00:87:03:33:58:
a8:12:a5:6f:85:f2:65:54:ac:2a:49:d6:71:86:ea:bd:b0:ee:
3e:75:ff:e0:80:f9:a2:a5:6b:1f:37:32:20:55:2b:04:8a:fe:
f8:8d:43:50:f4:50:e0:9b:af:29:51:15:5d:c3:05:b0:21:6c:
05:20:a6:fa:d5:c6:a2:66:4f:d0:ef:dc:95:84:95:ce:74:ac:
2e:42:c6:bf:be:b2:72:18:c8:93:c1:26:d3:c2:bd:4f:d5:34:
f7:a7:41:6a:0d:d2:f8:82:d7:09:4c:ce:1d:d9:d0:76:5e:51:
45:47:05:a6:e5:cc:f8:83:c3:90:4c:fc:76:4c:f2:13:d0:da:
6f:91:c0:d4:66:b8:44:70:50:b5:00:c0:5b:da:3f:c7:02:d4:
ce:a4:ed:60:89:bb:a2:44:a7:10:7d:40:06:c7:77:2e:77:9d:
c9:1c:d0:f7:ca:96:1c:2c:1e:d5:6e:7a:d9:ef:c3:89:31:f4:
8c:85:d2:63:23:e4:a2:56:7b:d7:04:71:e3:aa:2c:f5:5f:60:
55:af:8e:b4:e6:09:91:6f:cf:29:e4:de:a0:16:7f:57:05:f0:
fb:f0:ef:a6:65:0b:92:60:be:6f:c5:42:1b:63:aa:d9:55:72:
e9:6e:14:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:04 2025 by rpki-client