Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: N9ySC+4WX7+H+ZEgUDMGM8IOJJaxJ5jQNw4Of/k81rc=
Subject key identifier: E3:E9:8D:95:56:21:FA:F4:F1:09:22:C6:2B:24:39:40:4D:40:5D:B1
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 0199FBEA847F0470ACBF1ECC1AA1372247AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:14 +0000
Manifest this update: Sun 19 Oct 2025 10:01:14 +0000
Manifest next update: Mon 20 Oct 2025 10:01:14 +0000
Files and hashes: 1: KV3y67WzUL1dd636tV-tGwBKS6Y.roa (hash: BJK7UzSsG4bIRgy/oUjNbXPmO5iJK9tZClLQ8IpL8JQ=)
2: X9Fijkz-_wqcxXki_ZgW942-ey4.roa (hash: 6GLvc6dX34tOpcs0+RseJCW6ZD873+Ny/2OET9fAl0I=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: 1jqmgI0+1jPh3QgY4osaU5FvQLI2lquY8FzyY3AgzWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:84:7f:04:70:ac:bf:1e:cc:1a:a1:37:22:47:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Oct 19 10:01:14 2025 GMT
Not After : Oct 20 10:01:14 2025 GMT
Subject: CN=e3e98d955621faf4f10922c62b2439404d405db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:97:ef:16:dc:7b:8e:2d:22:19:1e:d2:9a:
cc:ae:05:7c:2f:8d:51:38:91:df:80:17:43:65:ce:
94:10:8f:ed:c2:00:03:f7:6b:1d:71:39:6f:16:33:
06:3f:ba:f9:c0:0d:5f:b0:fe:7d:44:11:85:46:a8:
22:9a:98:1a:96:0c:f3:d7:24:22:08:63:a7:a1:57:
45:6a:ce:70:e6:c6:c2:fc:5e:33:a7:a8:e2:ac:6d:
40:80:de:75:da:e4:58:17:83:97:ce:45:42:e4:5c:
55:fa:e3:8e:e9:75:b5:be:e3:df:f1:2b:9f:7e:c0:
5c:41:cf:5a:41:00:78:a8:63:a5:a5:45:b5:0d:63:
a0:15:8f:77:6a:c9:3a:d7:17:7c:9d:1c:37:4c:40:
a7:2b:40:1f:4f:8e:75:cc:bc:68:2b:9c:46:6a:6e:
a0:54:9a:b7:5e:2b:9d:d8:ae:89:7c:e2:7c:3a:c9:
10:79:cf:ca:0d:90:4f:d0:ae:d1:01:1a:87:84:76:
c8:55:a9:02:0a:22:ae:4b:a7:77:87:2e:a0:a9:5d:
02:8e:6d:50:6a:32:fa:4f:3f:ac:21:7d:c9:9e:ad:
77:6d:7a:24:30:46:b7:75:d5:be:74:8e:3e:04:1e:
5e:a1:c3:d5:d4:84:30:38:87:64:db:a0:ba:30:a1:
f0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E9:8D:95:56:21:FA:F4:F1:09:22:C6:2B:24:39:40:4D:40:5D:B1
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:22:74:4b:9c:63:a0:30:36:bb:c7:ab:ed:54:ef:81:5a:fc:
fe:8c:fc:4e:40:35:b1:09:2a:dc:a7:64:95:93:71:2b:b7:cf:
9f:0e:8d:81:e5:24:51:28:71:0b:ec:46:0f:6f:3d:59:cd:19:
a3:f2:dd:ea:2c:2a:23:73:ef:26:55:8c:8a:fa:cc:84:be:7a:
82:85:97:60:f7:16:3d:0e:e4:aa:69:e1:77:b5:34:1a:d9:0b:
51:3e:37:07:9c:97:a9:ae:e8:e1:83:67:48:ef:40:88:2c:d4:
a8:0f:98:16:34:ae:a7:9e:d1:81:48:bd:b7:ac:32:1e:ce:33:
de:8b:91:2d:a2:12:dd:f2:99:53:15:52:df:55:1d:a0:bd:e7:
a3:7d:59:10:17:84:20:c4:d4:c3:8f:1b:ea:2b:88:99:07:58:
02:c9:ff:c9:25:30:0f:ef:cb:e4:8e:f1:59:61:3e:22:f0:bd:
11:ca:b1:89:a8:d9:a4:e2:7f:86:e7:e1:05:30:57:7f:00:98:
7f:1b:45:e9:07:ab:9d:00:d5:8f:78:f0:4b:4e:cd:89:1e:82:
fb:84:26:01:fe:85:b6:3f:c7:44:19:0f:60:38:7c:40:10:68:
aa:30:ef:89:56:b1:b3:61:15:58:4c:4c:72:5f:68:2c:da:5f:
c7:10:c8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:12 2025 by rpki-client