Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
File: eLBPuvqja3H8027KULX-DojdNVE.mft (raw, json)
Hash identifier: nKHMcXRuCyZoPGbqiebvUdIkLg+d/Ec6RkcjMs0KloA=
Subject key identifier: 71:52:15:E2:FF:91:75:93:E9:40:2D:42:11:86:8B:F8:12:2C:B1:DF
Authority key identifier: 78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
Certificate issuer: /CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Certificate serial: 019A4E4FC2FDE47AFD81E492E2DE0207F82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:41 +0000
Manifest this update: Tue 04 Nov 2025 10:00:41 +0000
Manifest next update: Wed 05 Nov 2025 10:00:41 +0000
Files and hashes: 1: _bd1uUXdWfimJKjSRLsLwjuEcR8.roa (hash: uctm/cSaahCT9GH/ghFykbr6OfbIpXkqwxi32eXN9Ao=)
2: bqoiPzwRe4PUMqiK_-uqiOSrT8g.roa (hash: zxBqKx04g5nB2wdjrM/3iI8Vlwm/BGdUl98rn328O3U=)
3: eLBPuvqja3H8027KULX-DojdNVE.crl (hash: HdtGfpYJkpG8rO1W2mys7Zc06CKQ5HxtMC+4shamEJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:c2:fd:e4:7a:fd:81:e4:92:e2:de:02:07:f8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Validity
Not Before: Nov 4 10:00:41 2025 GMT
Not After : Nov 5 10:00:41 2025 GMT
Subject: CN=715215e2ff917593e9402d4211868bf8122cb1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:d8:2c:5e:a8:1d:d8:14:63:b9:95:4b:6c:
86:4f:46:a6:81:84:a0:06:06:92:a3:a6:a0:cd:06:
15:a0:68:cd:ff:df:93:12:e0:44:d8:46:59:c3:25:
33:f3:ab:b7:8f:19:37:97:33:26:44:e5:70:51:31:
a5:fb:3b:14:3a:42:29:5b:12:8f:1c:60:48:9b:81:
85:ce:a4:c0:73:7b:8b:90:8d:32:35:9b:75:aa:f9:
d7:1b:69:84:ae:4b:22:d3:d8:12:c8:f6:e5:d3:a8:
b8:66:42:1d:fe:04:20:1b:53:6b:ca:39:b9:5d:01:
7c:63:cd:34:a0:33:ed:79:11:a0:c8:95:93:7b:c3:
ab:5e:6d:4a:6c:02:c9:95:1c:35:ab:3c:b2:5b:f9:
34:9b:dd:bb:fb:9f:8f:35:23:1c:d4:d0:65:3a:a2:
d9:41:ab:87:89:fd:e7:ae:ce:37:78:8a:d4:30:4a:
3d:9e:dd:8c:d2:94:07:90:a4:01:ae:b4:a2:58:c8:
8c:d9:17:3f:92:7b:27:5e:53:a6:38:ad:35:37:a5:
4d:0f:77:5e:ba:4c:01:be:41:3d:c7:27:62:6b:75:
0e:8e:a7:11:fc:b9:dd:d1:4b:c4:0d:ee:eb:26:a2:
27:e0:7c:56:2c:b2:74:8f:c7:ce:79:88:f2:f7:54:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:52:15:E2:FF:91:75:93:E9:40:2D:42:11:86:8B:F8:12:2C:B1:DF
X509v3 Authority Key Identifier:
keyid:78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d3:15:5a:35:15:8e:92:cc:f3:66:9c:bd:d8:c3:a3:3b:2a:
74:76:46:60:09:e3:1d:40:b7:b0:51:ce:6d:dd:47:0a:30:75:
d1:97:d6:17:40:3d:90:ed:d2:b1:c2:a3:45:32:c1:02:a3:c1:
67:06:fd:77:8d:08:24:78:64:5b:70:d7:9c:17:58:8a:b0:56:
77:cf:18:99:7b:6d:3d:09:65:d1:b6:33:ef:c4:37:72:2d:cf:
5b:c3:ad:d2:4d:89:91:70:b0:89:5d:ed:89:d2:f0:ad:4e:1f:
14:48:c5:f4:e8:32:29:54:c3:17:d3:98:2c:43:85:49:31:8e:
92:aa:1e:f6:57:05:4e:5f:99:1c:b6:e8:1c:bb:0d:08:83:f4:
85:a2:2e:0a:c5:60:51:70:2c:37:14:42:fc:29:ab:68:99:cd:
ce:b4:a2:0d:1d:85:cf:1f:f7:6d:a3:74:67:1a:3d:6e:d1:88:
0e:87:22:df:c9:8a:63:2d:cd:f2:18:61:7d:c9:9a:65:4f:30:
1b:04:ad:b5:6f:69:36:d0:87:29:11:8b:19:53:e7:79:a6:f9:
07:2d:26:41:ad:68:a8:12:64:3c:06:67:42:38:c1:46:be:bc:
69:32:0f:59:b2:93:31:7b:aa:41:88:c9:ee:1f:fe:a3:97:37:
d2:f5:c5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:25:58 2025 by rpki-client