Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
File: eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft (raw, json)
Hash identifier: uFACRAYWedHrWHWrBzfHkKsW/X04+CrwJFingBGDMmw=
Subject key identifier: 9F:76:CE:EF:6B:C6:3E:82:3A:F0:F0:3D:8C:6D:76:38:65:D6:E7:F2
Authority key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
Certificate issuer: /CN=7870621fc0afc8ec18eef20633f6148813279976
Certificate serial: 019A4E19055BA9A4E27F5DDD304C9FA496AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
Manifest number: 05D2
Signing time: Tue 04 Nov 2025 09:00:53 +0000
Manifest this update: Tue 04 Nov 2025 09:00:53 +0000
Manifest next update: Wed 05 Nov 2025 09:00:53 +0000
Files and hashes: 1: Mg8uBQPef3LyJjKgZxMt4YNcO_E.roa (hash: PmmY7x5LyJJDD6LlXlPdfzSLFcMHWHakThUWPxHgQkY=)
2: eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl (hash: ERShjwitp/vLfjsAHH66o3zxpVPSATUJ3Gek/0TFIOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:05:5b:a9:a4:e2:7f:5d:dd:30:4c:9f:a4:96:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870621fc0afc8ec18eef20633f6148813279976
Validity
Not Before: Nov 4 09:00:53 2025 GMT
Not After : Nov 5 09:00:53 2025 GMT
Subject: CN=9f76ceef6bc63e823af0f03d8c6d763865d6e7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:b1:be:bf:4d:34:e2:07:b9:a3:d9:13:46:
71:9b:70:e3:0f:61:f7:73:ed:cf:e2:83:56:aa:02:
e4:84:20:f8:fe:f5:39:74:44:41:be:69:66:60:e8:
35:aa:43:8c:47:0f:7d:e8:89:61:8c:11:3c:1c:42:
4f:ee:5c:04:68:38:63:06:7d:0d:7d:c7:9b:c9:22:
9a:a4:53:ff:93:cb:8d:92:1b:bc:84:15:6f:3b:84:
3b:27:e7:aa:17:c3:5b:22:f0:b4:ef:4b:e7:80:ee:
0b:e5:b3:a0:3c:5a:3e:1a:ec:7d:ba:70:d8:fd:44:
aa:c4:9a:5a:c1:b7:05:21:2d:ec:c1:ff:1f:78:5f:
9f:c9:75:b5:63:19:3c:4e:44:20:cf:ac:8e:43:e1:
fe:67:0e:09:ee:38:fb:f4:92:b1:4f:ef:f2:c1:85:
a5:24:83:95:88:d6:5d:5d:f3:9c:e8:ab:4a:b4:b6:
11:f6:5f:fb:4a:73:8a:79:3f:ec:6f:9c:22:e1:e7:
61:45:ce:4b:c4:f3:3e:11:aa:30:24:51:f7:f8:1f:
ed:3f:5b:04:19:0c:fc:e8:90:39:dc:9f:bb:b5:fd:
9f:ed:0c:1f:ef:b6:03:dc:50:1c:1c:c9:c7:9f:84:
46:0c:5f:9f:06:1c:9d:e4:2f:7a:e5:d5:ee:69:bc:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:76:CE:EF:6B:C6:3E:82:3A:F0:F0:3D:8C:6D:76:38:65:D6:E7:F2
X509v3 Authority Key Identifier:
keyid:78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:08:a0:98:e4:a4:ed:f4:66:23:89:5b:53:40:a4:1e:c9:11:
8a:98:c5:60:c7:c9:9f:42:fa:85:20:4e:7a:fe:80:73:12:be:
0f:e7:bf:0e:10:8f:a8:4d:70:e1:aa:d0:43:d7:0c:d5:02:30:
37:d5:45:64:55:f0:ca:64:81:b3:ad:29:65:59:5f:fa:e8:a6:
cc:53:ac:e0:67:44:e3:8c:e2:15:2c:ba:f5:b6:9c:78:04:58:
09:71:36:4c:33:c7:29:5d:6a:a1:7d:3c:fb:60:36:4f:80:86:
ec:b0:cd:c6:0d:84:1b:88:72:fb:26:85:2c:c9:d1:d7:fc:94:
e8:59:e5:94:c0:37:f2:e1:26:13:64:d4:16:fa:e1:ca:b0:1a:
69:c0:25:06:63:a0:bd:4a:98:bb:4e:77:3c:ee:4d:bb:61:04:
3d:2a:09:d3:ef:95:0d:f8:89:76:9c:56:27:83:31:cc:b7:69:
bf:80:b0:2c:27:cb:87:66:e8:93:31:c3:55:cb:11:50:4c:6a:
1d:f0:a2:2c:94:4e:5c:0e:e8:76:9b:06:09:5e:c0:da:33:6b:
37:d5:48:34:14:07:c1:6a:b4:50:dc:28:be:d3:15:76:0a:3f:
22:3e:84:22:91:7c:d2:11:d6:f0:ae:c1:a4:f0:fe:66:1b:54:
95:e1:81:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:44 2025 by rpki-client