Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
File: eLHb4vrypuffpXTOVRkJYwFfHFM.mft (raw, json)
Hash identifier: 6oOFQyzRqXlyxZRj+glKNvwpSYegF2hNqEtImA9pEr0=
Subject key identifier: 51:C6:BC:B3:EE:EB:81:51:44:04:EE:76:93:EE:7C:36:6B:95:8D:D4
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 019A4F61F6B3CC0C52989FB759AA0C61F731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
Manifest number: 16FB
Signing time: Tue 04 Nov 2025 15:00:11 +0000
Manifest this update: Tue 04 Nov 2025 15:00:11 +0000
Manifest next update: Wed 05 Nov 2025 15:00:11 +0000
Files and hashes: 1: WzTLOTiHe9vB3hAqlAy8pw18Doo.roa (hash: OSj0Xgv5CShMqmpg0KY2bWpFRvfkFgflayWsnGxuzf8=)
2: eLHb4vrypuffpXTOVRkJYwFfHFM.crl (hash: vLH7TicBnmZnZEwzQA4DIjzuSBdBgcruIDCD68K9Qy4=)
3: fEhR-lCUkZVEdMm1RQIIE8pgNCo.roa (hash: o0vAsrKSY0T4tLyGeQ8NwF7vCi/bDXk5djLv/i3XQL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f6:b3:cc:0c:52:98:9f:b7:59:aa:0c:61:f7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Nov 4 15:00:11 2025 GMT
Not After : Nov 5 15:00:11 2025 GMT
Subject: CN=51c6bcb3eeeb81514404ee7693ee7c366b958dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:ae:95:c2:ba:b0:47:c0:04:39:00:35:06:
ea:31:06:b7:92:68:8a:48:a7:fd:f7:6e:6d:60:87:
4c:8a:31:51:d6:ca:66:62:15:2e:7e:42:4c:bd:f0:
b7:cf:cc:b3:6b:0b:19:01:bd:eb:2a:70:db:cb:66:
19:36:2c:c3:1c:14:07:6c:1c:c6:2d:20:8b:28:15:
f6:c1:60:07:cc:fd:6c:56:6a:63:fa:63:42:99:74:
fe:77:a5:1b:12:96:f4:8d:87:63:1d:9e:c5:7e:d8:
2d:72:10:36:e6:6a:f3:ee:e6:a4:58:03:90:21:96:
ef:1b:b7:0c:2c:0e:db:f1:95:bd:dc:87:4d:e6:55:
06:90:b4:fa:2a:fa:bd:57:85:8d:22:af:e0:6b:4d:
cc:7a:3f:bf:aa:8c:b2:5f:d8:5d:a5:9f:d2:0e:e2:
c6:06:55:08:54:86:a1:1d:0b:7b:bf:3b:58:ee:38:
36:a2:bd:3b:e1:3b:f0:25:b4:14:24:78:80:f7:13:
af:37:7d:9e:8a:0f:43:48:a5:53:e6:76:45:7d:bc:
2e:ce:be:05:f3:f5:3a:93:54:37:77:de:59:1a:06:
61:46:49:2c:8e:3d:cd:25:21:0c:c8:e0:60:95:65:
cb:4d:7f:2e:7a:08:56:d6:f6:49:e1:ce:7e:05:c4:
6e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C6:BC:B3:EE:EB:81:51:44:04:EE:76:93:EE:7C:36:6B:95:8D:D4
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6e:a7:da:77:ee:be:de:db:25:de:09:90:ac:14:b7:b6:85:
88:a0:03:16:23:84:fa:57:f8:fa:f3:50:8c:79:ef:0f:fc:a2:
35:f2:77:a4:49:81:9f:66:e1:f7:b4:e6:a4:8d:3a:3a:87:8c:
38:c0:80:2d:41:3a:4e:82:aa:a1:c8:2c:b2:71:28:f3:c0:30:
41:17:53:46:c9:45:3c:9f:ac:79:db:8c:73:5e:f3:99:ce:bd:
00:00:42:28:10:86:e2:29:50:d8:6b:c5:8d:9a:3a:62:9d:69:
77:4d:b2:ac:cd:46:8a:ed:c4:76:74:a4:b7:57:ae:6e:c9:22:
5b:1a:b2:bc:af:e1:cd:b1:cc:51:4c:4a:a4:ff:f4:50:7c:73:
87:4c:7a:b5:85:5d:a3:b1:a8:7d:c7:b2:fd:6c:4f:38:8f:86:
d0:be:d1:67:cf:36:18:06:74:b6:67:88:02:73:ba:54:02:43:
bd:dd:5d:9d:bc:d9:a3:1d:dd:0c:cd:06:6b:c2:e9:b8:5e:91:
91:42:0d:71:eb:6f:c4:3c:e5:de:6c:f4:c6:6e:93:6a:69:1f:
97:d7:ca:10:b4:85:41:70:1f:19:ea:f2:a5:42:ab:59:9c:44:
72:ff:7d:3a:bf:90:9b:65:d7:f9:d8:ca:ee:5f:52:9f:78:17:
a2:b5:28:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYfazzAxSmJ+3WaoMYfcxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YjFkYmUyZmFmMmE2ZTdkZmE1NzRjZTU1MTkwOTYzMDE1
ZjFjNTMwHhcNMjUxMTA0MTUwMDExWhcNMjUxMTA1MTUwMDExWjAzMTEwLwYDVQQD
Eyg1MWM2YmNiM2VlZWI4MTUxNDQwNGVlNzY5M2VlN2MzNjZiOTU4ZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI+ulcK6sEfABDkANQbqMQa3kmiK
SKf9925tYIdMijFR1spmYhUufkJMvfC3z8yzawsZAb3rKnDby2YZNizDHBQHbBzG
LSCLKBX2wWAHzP1sVmpj+mNCmXT+d6UbEpb0jYdjHZ7FftgtchA25mrz7uakWAOQ
IZbvG7cMLA7b8ZW93IdN5lUGkLT6Kvq9V4WNIq/ga03Mej+/qoyyX9hdpZ/SDuLG
BlUIVIahHQt7vztY7jg2or074TvwJbQUJHiA9xOvN32eig9DSKVT5nZFfbwuzr4F
8/U6k1Q3d95ZGgZhRkksjj3NJSEMyOBglWXLTX8ueghW1vZJ4c5+BcRuWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHGvLPu64FRRATudpPufDZrlY3UMB8GA1UdIwQY
MBaAFHix2+L68qbn36V0zlUZCWMBXxxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUxIYjR2cnlwdWZmcFhUT1ZSa0pZd0ZmSEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jNjY2YmYtYzhkNi00OGFkLTgwNzYt
YzNmZDlhZTgxMDEyLzEvZUxIYjR2cnlwdWZmcFhUT1ZSa0pZd0ZmSEZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jNjY2YmYtYzhkNi00OGFkLTgwNzYtYzNmZDlhZTgxMDEy
LzEvZUxIYjR2cnlwdWZmcFhUT1ZSa0pZd0ZmSEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACW6n2nfu
vt7bJd4JkKwUt7aFiKADFiOE+lf4+vNQjHnvD/yiNfJ3pEmBn2bh97TmpI06OoeM
OMCALUE6ToKqocgssnEo88AwQRdTRslFPJ+seduMc17zmc69AABCKBCG4ilQ2GvF
jZo6Yp1pd02yrM1Giu3EdnSkt1eubskiWxqyvK/hzbHMUUxKpP/0UHxzh0x6tYVd
o7Gofcey/WxPOI+G0L7RZ882GAZ0tmeIAnO6VAJDvd1dnbzZox3dDM0Ga8LpuF6R
kUINcetvxDzl3mz0xm6Tamkfl9fKELSFQXAfGerypUKrWZxEcv99Or+Qm2XX+djK
7l9Sn3gXorUoYQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:58:15 2025 by rpki-client