Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: 9XjwUNWFy3klGIN+3Hpc451Xrq1lwOF3+y4GSObDFJQ=
Subject key identifier: B1:61:D0:FF:6F:6B:52:16:53:B9:6C:F0:EC:0E:DD:FE:67:77:B8:E7
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 019A5150B3DA464333C3041B469E26E00860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 00:00:34 +0000
Manifest this update: Wed 05 Nov 2025 00:00:34 +0000
Manifest next update: Thu 06 Nov 2025 00:00:34 +0000
Files and hashes: 1: 94kSZYEi8kZZUVQDGMvt3tM0W5M.roa (hash: Kr7Qvwd5yInhruSYrImp4x8w3L+klGrguBHif+DVLgU=)
2: HyefmTBy2OXIxQS41tlTH-MtUgc.roa (hash: bc5pyrKFM8Tanvi0cNUIrBtuFy4XX7WbcgeUMb48Zis=)
3: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: UPpodG4l3wMhORufKPPiGftVo7VnDjpC1I7imV4Orps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:b3:da:46:43:33:c3:04:1b:46:9e:26:e0:08:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Nov 5 00:00:34 2025 GMT
Not After : Nov 6 00:00:34 2025 GMT
Subject: CN=b161d0ff6f6b521653b96cf0ec0eddfe6777b8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:61:73:ca:17:ef:83:ad:c0:5b:44:bd:5a:
82:f3:16:aa:29:2d:b5:ea:33:e3:ce:d2:e1:1f:1e:
e7:ad:e7:ad:e0:74:93:8a:ca:e3:92:ef:ee:e7:f8:
51:47:aa:1b:ed:2a:37:63:9a:67:aa:c8:4b:2e:2d:
88:80:91:f0:fb:3c:37:51:a8:1e:27:88:59:52:87:
89:4d:a6:55:45:12:39:5b:3d:51:ee:e6:be:e4:57:
4b:8b:13:d8:fe:d0:a3:e6:28:51:f4:f9:24:3d:21:
b9:b2:83:36:21:d1:15:71:32:21:fc:a1:fa:06:5c:
f1:4b:c9:ab:14:03:5a:ba:57:7a:6f:33:7d:03:36:
cb:2c:7e:67:47:af:37:66:cb:13:e2:53:70:dc:8e:
c8:c9:e2:20:e0:4a:64:c4:11:29:2c:ff:88:e9:cf:
c8:89:b1:cf:4b:ad:32:8a:3c:95:b5:c7:4b:8d:67:
9d:7e:6f:57:d9:ff:d6:da:8e:ba:d2:08:1e:af:be:
d5:b1:64:30:ca:b3:d6:ce:2a:58:1b:b1:f9:3b:ec:
ed:1e:21:a6:09:e2:2c:61:98:0d:d2:65:48:df:58:
6d:cb:1b:b5:61:8a:b5:3c:97:2a:3a:c4:d0:10:de:
dc:5e:ec:b1:fb:f2:20:67:da:b0:e2:84:d3:e3:91:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:61:D0:FF:6F:6B:52:16:53:B9:6C:F0:EC:0E:DD:FE:67:77:B8:E7
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cd:de:a0:b1:8e:f8:de:39:d2:11:02:3a:2e:30:2a:75:92:
e6:e4:87:74:f8:39:70:bf:2f:13:d8:94:11:2c:0a:96:d3:d5:
7f:db:c1:98:06:fc:25:ce:6b:7f:db:46:a0:27:1d:fd:3e:51:
71:4c:b4:2b:61:04:ea:49:30:dc:c6:da:1b:02:0b:4c:6b:a3:
47:f6:e9:9f:c4:3f:43:46:c4:ac:5c:41:c7:99:f4:cb:f3:da:
f2:d8:51:f2:c9:56:d3:5f:55:1c:03:ad:08:ea:89:8d:ac:f8:
10:09:a7:f5:6f:82:5a:91:42:97:33:c5:46:03:46:4a:e2:a9:
7e:5c:20:ba:9e:57:c8:ff:ec:27:97:f2:d5:29:38:00:5c:7f:
75:41:2c:cd:7f:af:a4:45:f8:7f:c5:f6:30:c1:c1:72:35:a9:
59:33:7c:7c:c7:b7:f2:43:ae:af:37:a5:75:a5:77:e2:56:fc:
a9:d3:ae:52:66:70:d7:2d:f2:cc:13:e5:f2:4f:7d:33:64:40:
6b:3d:92:b6:42:1c:e8:8b:3a:28:2e:e7:69:2e:2d:f0:39:a4:
45:41:9c:34:10:44:5c:a3:4b:1e:84:4d:77:de:a9:11:4f:18:
cb:98:29:dd:ce:d8:7b:11:db:90:6c:44:37:41:69:ed:98:34:
8b:6b:42:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:21:07 2025 by rpki-client