Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: YVD1Az6u/9CU/InZ5uZ5xarjIwJcTjsCAKe76oJC7T4=
Subject key identifier: 15:A9:59:F8:09:DC:A8:69:54:B9:08:2A:2F:A9:22:66:7F:A7:D2:88
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 019A4EF566DF24FC9F68FB55A494CB1CF8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 077F
Signing time: Tue 04 Nov 2025 13:01:36 +0000
Manifest this update: Tue 04 Nov 2025 13:01:36 +0000
Manifest next update: Wed 05 Nov 2025 13:01:36 +0000
Files and hashes: 1: 21v5q3pMDwpvxT2hARKYBVN9oBs.roa (hash: td2s5WSN+NdDkVRugdr/XPfHV2CBhN3a/Leo5BS5CwM=)
2: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: zTfV82TvI7qDj4vu3oN8oKw2xg9ppSfy6yP3ZUFj9W4=)
3: nEwu5TmmWrj9UATGJds44UGD1Ts.roa (hash: 5ZaywPLeoC0QnbAlhOsY8aemb2/eQKD5NWLwsAEHpiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:66:df:24:fc:9f:68:fb:55:a4:94:cb:1c:f8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Nov 4 13:01:36 2025 GMT
Not After : Nov 5 13:01:36 2025 GMT
Subject: CN=15a959f809dca86954b9082a2fa922667fa7d288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:6a:c7:8a:97:30:6d:2f:29:ef:32:1f:03:
71:59:e4:01:82:f9:db:de:03:9c:d9:da:0c:60:b3:
8f:6b:cd:19:fd:02:ea:ee:28:e8:cf:95:76:b9:de:
54:c6:40:b7:69:d3:d6:70:94:c7:09:e7:37:db:f8:
87:fb:fb:54:1a:a8:15:df:88:e7:4d:d9:a3:f7:8d:
9d:f0:2d:ae:38:7f:e4:0f:b6:f5:9a:54:38:49:cc:
ec:a5:26:a8:e3:c0:21:df:d2:38:f1:c1:c6:50:b6:
c4:6b:7a:96:57:3a:05:42:55:e4:b1:39:da:3a:0f:
3b:04:44:2f:83:3d:2d:b3:3d:cd:e2:84:7f:92:45:
44:2f:ff:96:de:90:9c:5c:2c:df:70:9b:cb:08:d3:
14:d4:52:9b:90:18:75:bf:ba:1b:cd:0a:1f:a1:e5:
11:fa:1f:0b:4b:e4:56:c1:2c:96:6a:9a:4a:50:be:
41:b1:d6:b7:54:2f:bf:03:f2:f2:7e:1a:97:7f:45:
02:ba:b5:af:6f:8d:9e:f6:1c:34:6c:f2:a5:92:6d:
b5:61:ab:56:5a:25:59:31:17:25:09:6e:e6:d6:70:
f9:ed:c4:6d:0e:cf:a5:c6:0c:af:af:75:97:3f:ad:
51:48:52:5a:67:58:1f:d7:c7:f2:3c:09:46:7b:ca:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:59:F8:09:DC:A8:69:54:B9:08:2A:2F:A9:22:66:7F:A7:D2:88
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e9:2f:b6:2d:12:c9:2e:52:01:e2:22:59:ac:72:43:a5:07:
1c:04:a8:19:d2:82:bf:b3:10:78:e6:ee:f6:9d:03:8e:bc:a6:
76:67:76:14:5d:d0:e6:10:3f:5a:3a:8e:b4:a5:a3:c3:4b:4c:
d8:95:7e:d0:0d:bf:a2:95:e0:bc:a5:6a:d3:bd:27:9a:33:e4:
91:21:62:ba:a2:a9:a0:5d:34:22:48:3b:20:f2:e2:88:b6:1a:
e6:46:17:e4:d2:61:58:21:e8:8c:3e:27:5b:83:c7:f3:29:ad:
a4:8f:6b:93:29:45:42:4d:14:ec:5d:67:87:63:d4:ee:30:7c:
fe:cb:70:c0:f8:3a:cb:e2:ca:77:44:d1:48:d0:52:22:e1:86:
7b:d0:bf:51:8a:58:61:bc:2e:75:f7:74:00:12:36:c6:29:d4:
7d:5f:f3:19:7a:3f:66:3a:73:4a:68:d7:ac:be:7d:51:de:12:
4b:d9:97:3d:b4:d6:3a:0d:4a:e6:47:11:76:ea:b2:3a:d8:9c:
20:67:b7:cb:e0:a7:69:fa:b8:59:f7:01:7d:e4:dd:ea:0a:2e:
c3:be:21:79:9d:ca:34:6e:a0:b8:49:a8:4c:2f:c4:2d:5e:4b:
69:b0:43:b1:75:7b:bc:b9:13:a2:6d:84:54:ce:07:3e:b7:98:
0b:28:a8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:41 2025 by rpki-client