Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier: 7fBum/fxhrnKx/hOHAcMgsEb0dS4zSDZS2VCRdteLAo=
Subject key identifier: 42:DE:30:E7:3F:46:08:72:51:40:39:0D:34:ED:33:48:9F:79:3C:C1
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 0199FCC6A07ED95125974B74EE7890934D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number: 10AA
Signing time: Sun 19 Oct 2025 14:01:39 +0000
Manifest this update: Sun 19 Oct 2025 14:01:39 +0000
Manifest next update: Mon 20 Oct 2025 14:01:39 +0000
Files and hashes: 1: 9ltoRvF8IrCagfv5cCrEK7BRKu0.roa (hash: YJOxESLE8nePOUhojbtV7GmOsBKkJt32JlcUp20ccWw=)
2: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: Uhqx0CYzG8WXhrel7zDo+ISZPMu8d9LA/VXdhCwB5+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a0:7e:d9:51:25:97:4b:74:ee:78:90:93:4d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: Oct 19 14:01:39 2025 GMT
Not After : Oct 20 14:01:39 2025 GMT
Subject: CN=42de30e73f4608725140390d34ed33489f793cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:99:09:6f:e1:61:66:ad:22:41:50:fc:7f:
99:05:d5:f7:eb:fc:b1:9e:6c:95:d3:49:40:dd:1a:
00:68:9c:5c:f3:db:92:a8:75:61:63:d7:48:4a:24:
dc:5a:a8:a7:4f:e4:0f:4d:05:19:f2:ce:a4:d6:b8:
f7:da:2e:09:c8:5d:cd:fd:a8:87:a7:8d:7b:4a:3d:
74:d5:19:78:52:75:28:07:17:cf:63:cb:28:d2:98:
b5:24:b5:90:69:d6:7c:67:8d:09:43:19:08:88:dd:
e1:82:6e:bc:3b:6e:83:bb:0e:b0:91:65:78:d9:d3:
65:c5:d3:08:f1:87:06:2a:68:79:e1:72:5e:f7:3e:
54:d2:e4:ee:f4:7f:fe:4d:98:24:8c:34:34:6f:3b:
7f:63:6d:b1:1a:f6:a2:45:66:57:7f:bc:9f:ee:9e:
af:f2:89:ff:3c:04:86:42:49:73:49:6a:c5:7a:0f:
7f:36:8e:61:5d:57:b6:ea:05:db:5c:fa:df:5c:8c:
2f:67:4f:c0:45:b3:7e:cd:08:a0:25:f9:27:05:f7:
b8:0f:5b:e1:80:4b:8e:ab:10:ad:cc:35:e7:11:f5:
c9:19:02:74:e9:80:a0:6a:39:51:03:03:41:46:c6:
c6:46:d8:ad:f9:b6:aa:44:71:b3:0d:69:59:76:9e:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DE:30:E7:3F:46:08:72:51:40:39:0D:34:ED:33:48:9F:79:3C:C1
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1c:bc:be:18:35:1e:31:6a:9c:56:3e:70:5f:80:b4:d9:f0:
21:c8:68:a7:87:56:71:e4:5c:1f:95:e8:7c:29:bf:8f:d0:db:
5f:0e:37:9b:ed:c0:b0:8b:e2:89:e6:f7:d4:f1:c3:9d:aa:34:
87:d6:25:97:dc:c5:a9:85:bc:57:5d:c6:b9:ce:b1:d2:fa:48:
82:db:83:bf:95:83:d5:dc:db:74:39:dd:d0:3d:1f:7a:ae:14:
f5:62:f1:9c:29:31:90:f5:c3:38:ea:78:67:25:9b:94:9f:19:
03:96:91:6c:60:7b:5a:f9:f6:43:5d:55:c1:da:d1:66:e7:7a:
85:5b:75:b2:c1:a0:00:69:53:7b:33:41:e8:5f:06:b6:c3:40:
cc:fd:59:83:1d:82:36:d9:da:ce:19:ce:1a:90:d3:6f:47:f5:
97:2e:9c:af:66:52:3e:00:7d:5f:5b:1a:56:42:38:2d:f0:b2:
a9:30:7e:e9:19:5c:1c:b1:61:e4:29:e8:3e:87:12:f4:04:66:
6f:af:35:69:0b:a8:c5:81:ab:d0:01:7d:e2:94:8e:70:36:a7:
d3:51:37:49:b3:96:40:05:37:17:d6:f3:33:3d:60:16:f1:4c:
eb:70:c5:7d:b6:55:e9:86:a9:c7:14:db:da:ff:6c:1b:45:49:
55:de:52:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:23 2025 by rpki-client