Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: WCFyxlfYZhuckevVp2qiwFQXnViJ5vKfUP01N62mOd4=
Subject key identifier: 6C:5E:6A:DC:10:3E:A3:99:0E:71:9F:1B:66:2B:85:BA:5B:50:0F:BE
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019A4F6245D42353D9E43348525275FDFFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 15:00:31 +0000
Manifest this update: Tue 04 Nov 2025 15:00:31 +0000
Manifest next update: Wed 05 Nov 2025 15:00:31 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: /vYOla7nf+uYRdF/i7rOo3T2TBungsTeaLSEYT7qIZ8=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:45:d4:23:53:d9:e4:33:48:52:52:75:fd:ff:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Nov 4 15:00:31 2025 GMT
Not After : Nov 5 15:00:31 2025 GMT
Subject: CN=6c5e6adc103ea3990e719f1b662b85ba5b500fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:6c:02:0d:47:55:10:f0:4c:92:e3:c4:48:
1d:9b:5f:3b:b6:3a:df:6f:80:27:b2:1f:ef:eb:85:
28:db:33:96:4f:4c:a4:14:f3:58:15:61:e9:16:f1:
3e:5c:f6:28:95:b8:6b:cd:b8:1d:f9:da:2c:96:f5:
de:32:ec:73:e7:d2:78:29:7a:64:f8:e6:be:55:df:
d1:51:9f:cf:c6:76:26:a7:1b:65:ef:2a:64:09:66:
4e:05:42:c6:c4:38:91:75:55:93:25:dd:76:49:d7:
9a:33:8a:c4:a3:2a:6e:9c:8f:47:81:60:f2:ad:5a:
ba:ad:7b:88:83:2d:16:1e:99:7b:36:d8:50:98:8f:
fa:c5:3c:11:3f:a9:88:39:df:45:e3:ba:9e:c0:9a:
27:cc:d5:f0:0b:2f:00:c0:f5:f4:07:ea:c2:53:d5:
31:cc:08:c0:55:70:70:1a:56:95:b7:d5:e2:9d:78:
dc:6c:9b:a7:5c:8b:c4:d9:4a:d9:ae:bd:4e:26:32:
ed:8e:94:eb:a1:c0:f8:03:28:12:d9:9e:49:cf:72:
c4:f0:99:b4:4d:10:92:b7:02:2a:48:91:97:98:9b:
1b:07:09:54:15:9f:a1:46:bb:ad:13:a0:64:ab:92:
5d:2a:d4:77:f9:2f:d7:9d:37:60:08:05:e2:08:29:
f7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:6A:DC:10:3E:A3:99:0E:71:9F:1B:66:2B:85:BA:5B:50:0F:BE
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:66:55:65:b8:9a:d0:04:24:64:f8:ff:cc:e6:fc:1e:ed:7d:
e3:d6:99:10:1e:7f:59:e5:d8:e4:66:50:4b:c5:22:6c:a0:30:
d9:18:36:46:1b:05:a1:22:73:a0:2d:5a:06:67:98:83:cf:cd:
f6:97:20:5c:a1:bc:a8:34:c8:a1:69:ae:b0:3c:a2:fe:bb:29:
a2:15:18:91:ab:8d:ef:28:bb:7c:f7:b0:88:71:0f:60:f1:64:
b7:60:90:a8:ba:e1:1f:5a:3b:a6:e9:91:a3:bc:f2:cf:39:8f:
f0:df:dc:19:90:26:7d:7d:58:30:18:ae:77:ba:65:4d:30:f7:
12:8e:10:59:31:f6:29:63:31:fa:fc:74:f5:e1:34:29:4a:13:
bd:0b:dc:67:c2:ef:92:40:4e:d6:45:02:d2:ff:d8:3b:1c:79:
9a:f4:7e:64:7f:2a:4d:e2:64:c4:88:f6:85:e5:c2:a2:39:00:
d3:05:e4:28:2a:93:82:1d:8e:cf:98:5c:ee:ad:47:34:c0:89:
42:32:e0:72:4f:78:b3:52:ef:1f:92:82:45:ee:10:e5:ab:9e:
5d:a0:40:12:31:d2:39:06:b7:40:94:7c:39:3c:2b:38:0c:f0:
39:1d:6a:9a:8e:ff:9c:4e:78:30:80:59:1f:f7:13:50:78:36:
33:82:b1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:24:48 2025 by rpki-client