Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier: TfsftpcLbOOMuPg2QU82vhLaRX9DkjmgJcttB4+xYqY=
Subject key identifier: E4:64:AC:B4:83:2E:70:13:69:C3:44:2B:E1:C9:4F:31:3E:5A:B1:0B
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 019A01111614EFC80BDCE83537246982D254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 10:01:28 +0000
Manifest this update: Mon 20 Oct 2025 10:01:28 +0000
Manifest next update: Tue 21 Oct 2025 10:01:28 +0000
Files and hashes: 1: 8XphOJkPtZHC_4MC2PQEPr0m2ac.roa (hash: dXWM6e00IU0bRpxg53QiBkBA19LCXMaHdPOkhO8paFI=)
2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: WX1iJ7vQH01GittxXda4Pl1DIfJl7Ow2uClSxAmCIyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:16:14:ef:c8:0b:dc:e8:35:37:24:69:82:d2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Oct 20 10:01:28 2025 GMT
Not After : Oct 21 10:01:28 2025 GMT
Subject: CN=e464acb4832e701369c3442be1c94f313e5ab10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:41:d9:15:77:1c:9d:f6:7f:b1:24:b2:6c:
0d:54:fe:ed:68:bb:68:70:5f:19:ed:07:cf:4d:cb:
1e:59:3e:ec:8c:10:74:f7:d7:40:72:a7:af:ee:15:
43:9c:41:cd:93:8e:1b:75:f5:52:51:35:5d:0f:f7:
ed:61:d0:c3:19:c0:56:9e:95:92:b0:21:7c:f1:eb:
a7:a3:2e:4f:f2:72:44:3d:d0:c0:b9:23:3a:dc:a2:
7b:c2:4c:1d:b1:67:c6:fb:3e:d6:76:bb:1c:5a:43:
ac:6c:3c:17:f7:c0:7b:8d:fb:8b:cd:65:b3:1f:96:
fc:3b:92:4d:76:a8:ee:e7:9d:29:fa:a3:5f:a3:b7:
53:bf:e7:54:88:41:9c:4c:b6:f1:8f:e4:71:f7:2d:
d0:75:98:24:c3:2f:5c:2d:13:5e:ac:ab:a6:38:2a:
05:ea:cc:b4:dc:5d:8f:a2:45:8f:00:a1:55:82:d3:
b5:2f:23:4d:b0:88:48:03:12:2e:c1:c4:10:11:87:
51:da:f4:55:4d:62:a5:e6:30:95:7a:21:85:c3:ac:
69:85:1e:4d:8e:11:fb:cc:fb:12:6c:9a:54:17:77:
38:3c:3a:89:45:05:23:d9:08:cb:89:3c:32:ca:4c:
f0:99:a5:11:47:ea:5a:0a:7a:30:15:44:3a:a9:57:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:64:AC:B4:83:2E:70:13:69:C3:44:2B:E1:C9:4F:31:3E:5A:B1:0B
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:02:95:99:7e:88:e0:ea:37:0c:fe:18:47:e2:04:39:f6:47:
1e:17:4a:03:de:bf:40:0d:19:91:79:12:68:97:29:e5:4e:6a:
33:41:52:50:23:1a:73:93:c3:73:c1:bf:53:c2:07:ce:35:ff:
da:9a:e9:17:69:fa:05:89:d7:b8:5e:b9:cb:95:f0:62:7d:05:
cc:49:5d:16:0c:0a:a3:9a:df:4b:06:b1:d6:aa:53:ae:35:64:
85:5a:3c:24:d0:17:73:ff:d5:fb:3a:95:e8:0b:6e:77:be:b5:
8c:f6:c9:30:64:63:6e:eb:75:ac:aa:1e:57:64:1f:7d:5b:30:
70:00:dc:c7:60:22:7e:82:48:74:ee:51:d7:00:52:fe:66:99:
c7:49:14:90:e8:98:5b:e2:79:85:c9:7a:0b:6d:44:18:c0:61:
8f:74:d7:42:11:13:46:ca:99:f2:8d:90:5b:bc:0f:c9:c1:93:
4b:4d:5a:e3:ea:10:15:9a:13:f1:01:54:07:8b:d2:52:89:2d:
5a:1c:19:71:cd:82:f6:95:39:97:b8:9d:ae:01:6b:e1:f7:47:
f3:37:9a:94:f0:4e:71:bf:36:b7:dc:04:8e:37:05:3e:60:a8:
5e:35:38:bf:6c:f9:4c:bd:c0:2b:25:65:ab:2e:88:ec:00:00:
15:9b:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:00 2025 by rpki-client