Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier: Si+KFoA5KGBJ0rEufSQYjh9oiu9/lMX/z7c0rWShZGc=
Subject key identifier: 11:86:93:3D:06:83:7F:D5:F2:1D:E5:E2:59:D0:25:C5:12:86:53:66
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 0199FC214C5315258BA92541A444FF9B7BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number: 13A2
Signing time: Sun 19 Oct 2025 11:01:04 +0000
Manifest this update: Sun 19 Oct 2025 11:01:04 +0000
Manifest next update: Mon 20 Oct 2025 11:01:04 +0000
Files and hashes: 1: WiSq1XaassFeIzQ7VRRmBzOb3-E.roa (hash: kuvzaokAS1drpTQ/4WqXgBODOQIMCPVvcrCFZCP4fDk=)
2: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: ey2LohXtyYtUavB2f82Y59LA4V6mBo5tJAKzZmqoFSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4c:53:15:25:8b:a9:25:41:a4:44:ff:9b:7b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Oct 19 11:01:04 2025 GMT
Not After : Oct 20 11:01:04 2025 GMT
Subject: CN=1186933d06837fd5f21de5e259d025c512865366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:a1:f3:f7:f6:42:8c:6b:e4:85:f6:ae:9a:
42:2b:b3:45:ff:8e:77:fb:8b:4c:81:d3:91:5e:7e:
0f:c0:e2:ad:22:14:9a:8f:89:09:2a:86:10:a7:96:
ea:45:8d:db:0c:6b:4f:06:a9:90:23:d6:5e:48:26:
d7:10:3f:4b:70:20:46:75:40:73:bf:1b:87:c6:88:
8a:0b:4a:30:64:fd:f7:a3:9a:34:e8:65:d1:d1:73:
58:b6:77:67:f2:ad:c5:2b:17:e4:f7:8f:5c:24:77:
0c:79:2e:7e:5b:69:69:4d:2e:3a:c7:84:a7:43:d1:
93:f2:f1:9e:52:23:3f:98:42:33:ae:db:cf:b2:56:
75:37:17:db:d4:18:90:ee:3f:13:1c:e5:b0:8e:0b:
29:c7:3f:e9:25:0e:22:ca:2d:9c:85:48:91:37:df:
06:cf:89:55:b9:10:61:6a:11:fe:e0:3e:8a:10:ef:
7d:85:9c:16:f2:e1:94:08:a8:08:6d:c9:e1:ab:ea:
bc:15:53:07:6f:cd:8a:91:55:9c:0b:07:11:02:21:
b8:8d:43:6e:ad:44:0d:81:1f:17:b7:7f:2d:03:45:
ed:a1:f8:7e:14:01:e8:f6:5e:cd:35:3e:1b:9a:ae:
ee:ba:d3:67:43:7b:c4:49:da:28:83:9e:50:b0:67:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:86:93:3D:06:83:7F:D5:F2:1D:E5:E2:59:D0:25:C5:12:86:53:66
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:c0:9b:68:6c:95:c7:80:a6:0c:9a:e2:de:a2:8c:ee:d4:96:
bd:8f:43:c6:c5:d2:ca:0c:28:1d:91:23:98:63:dd:0c:94:78:
14:eb:23:a8:15:dc:bf:f7:e6:39:3e:e3:68:82:5b:e6:72:37:
b7:22:af:f6:7b:2f:6f:d9:4e:45:1f:02:9a:94:07:ae:0d:3a:
34:10:90:97:8f:56:d9:6d:43:09:1f:32:5c:92:60:ca:f9:83:
64:24:c5:a1:2c:e7:12:41:ca:ad:7f:99:86:8f:41:9e:31:76:
df:98:62:18:84:52:6b:58:b3:c1:9f:c6:7d:a0:0a:3a:f4:6d:
27:fe:00:2e:af:2d:c2:ed:35:ec:5d:b8:f9:83:be:4f:56:31:
03:d8:de:93:0d:65:e3:2a:83:c3:c3:be:48:62:4d:07:fc:6d:
97:79:7f:b4:cc:a5:f2:5b:a8:5e:a8:5b:2f:92:dd:18:dc:bd:
cb:4a:f6:8d:18:fd:3e:be:15:63:48:81:86:70:d6:9e:6c:c0:
35:d0:20:50:23:a5:3e:da:1c:48:cf:78:3f:11:98:bd:a5:2a:
82:2f:48:54:ef:ac:37:28:45:73:f7:a0:27:95:de:9f:68:8a:
16:cf:f0:0e:59:41:1a:13:b4:d1:8f:7f:87:41:85:d4:a4:6d:
0a:26:c2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:55 2025 by rpki-client