Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier: l58kOo8I2ubWadEaWKN6EC32A1pDrAYkSqL05pBHN1E=
Subject key identifier: 0F:4C:A0:6E:B4:2F:57:79:E4:FC:24:72:04:94:F2:E3:71:6D:85:C6
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 019A4EBD3D459A057110BAB58F73F64C078B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 12:00:16 +0000
Manifest this update: Tue 04 Nov 2025 12:00:16 +0000
Manifest next update: Wed 05 Nov 2025 12:00:16 +0000
Files and hashes: 1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=)
2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=)
3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: yLJrQD2MlGUwQ0PsNYCxVJr5TU5g10NQ0K20FEI8tzE=)
4: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=)
5: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=)
6: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=)
7: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=)
8: ykCEDMwt0gSfj-8Dck34ZSuRxP4.roa (hash: Al22oIYh8E5aXL0ywXKSqrnxU2vRdMQS4zIM1t7Q1JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3d:45:9a:05:71:10:ba:b5:8f:73:f6:4c:07:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Nov 4 12:00:16 2025 GMT
Not After : Nov 5 12:00:16 2025 GMT
Subject: CN=0f4ca06eb42f5779e4fc24720494f2e3716d85c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a1:6e:54:8b:e3:d1:d2:15:86:0c:76:03:df:
bb:83:20:00:58:7a:18:76:93:a7:55:6a:97:39:0b:
d0:62:be:8c:75:3a:a3:70:09:ea:10:9a:d2:84:ea:
94:70:b6:51:20:c7:79:70:4e:08:42:c6:1e:e2:ae:
b8:13:16:8d:d0:4b:94:2a:a0:45:ed:9a:3e:7b:7d:
ce:0b:43:61:f9:4f:b7:ce:ba:f8:ab:a7:d6:49:45:
09:21:4e:ad:7f:c5:70:79:04:d0:cb:00:cf:23:91:
6c:17:7d:06:87:06:29:07:24:fd:63:b4:d5:20:09:
37:6f:8a:ba:62:a7:10:f5:a6:d8:68:14:64:16:1f:
95:a9:c5:83:a6:b2:ca:cc:89:87:90:8d:ed:93:67:
bc:2a:d4:96:01:8e:55:92:62:93:e7:c2:f3:df:52:
9b:3d:81:36:27:52:c2:b4:83:04:0f:7a:21:e9:a6:
33:a5:f3:bc:9d:97:28:42:95:fc:b2:0d:4a:bc:96:
0a:fc:ff:29:52:9c:b1:76:55:0e:b5:ff:0f:f6:89:
01:b9:8b:40:4e:71:46:d4:42:c3:fb:e4:f8:3e:be:
3f:e6:58:14:ce:5f:2d:96:9d:1f:12:91:75:05:1f:
38:60:33:f0:be:6b:66:ac:77:6c:2f:ae:9d:dc:ed:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4C:A0:6E:B4:2F:57:79:E4:FC:24:72:04:94:F2:E3:71:6D:85:C6
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b1:26:04:31:7a:bb:9a:37:98:0b:17:d8:d0:ca:1c:89:58:
23:bf:ca:d1:53:e9:4b:c0:c5:a1:b8:14:a4:0a:af:ef:f7:ea:
03:a6:86:3f:03:79:66:aa:c5:09:7f:19:87:2e:ac:2c:63:e5:
6b:b2:dd:2a:10:ad:d6:a4:88:78:f6:60:55:1b:4f:6e:7b:4d:
c7:bb:76:a5:18:d7:44:b6:43:f9:6a:84:43:18:cf:92:28:ed:
52:05:31:4b:6a:dd:26:30:7e:7f:82:41:01:ad:72:1e:4b:3b:
b2:e9:aa:7f:7b:ca:8f:e7:ed:54:ae:71:64:f2:bd:97:2f:b4:
0c:bf:3c:db:d9:0f:ae:e3:42:8e:2d:1a:b8:f9:d8:f2:34:81:
2d:45:15:ac:b9:46:0c:d1:9b:ff:40:a8:74:75:0c:a6:00:cb:
2e:85:8f:dd:85:2c:88:0e:bf:ad:4e:cf:30:3b:2f:8d:fa:c5:
10:5c:c4:e4:c7:35:c1:e4:cb:a0:c0:30:dc:f1:1e:8d:e6:43:
36:01:36:04:7f:0e:bb:d7:a4:b1:06:ec:7c:e0:6a:5f:49:d4:
f7:a1:94:4d:42:f8:8f:82:25:a1:39:db:57:20:af:16:24:88:
87:85:b3:e8:19:7c:bb:b6:61:0c:2f:41:3a:1c:57:7a:59:fd:
06:f0:cc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:12:52 2025 by rpki-client