Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
File: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json)
Hash identifier: 1+tl51aMGMcplWDX7/hVfELbrMrKBfpP/ibhtVmWaO0=
Subject key identifier: 1E:A8:61:59:2C:18:57:CE:4C:86:EE:A9:8C:A6:CA:2A:B5:0D:76:A5
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial: 019A4F997402D874D8BD116F5B2D458F2BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
Manifest number: 080E
Signing time: Tue 04 Nov 2025 16:00:47 +0000
Manifest this update: Tue 04 Nov 2025 16:00:47 +0000
Manifest next update: Wed 05 Nov 2025 16:00:47 +0000
Files and hashes: 1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: /yxIeJuGOp7uQxU2MjDVYtXJZvMCeBRl6E7JWLiZE0I=)
2: QB_3GAwgUBDF8MSXTq2uaHbFbVk.roa (hash: kWfvWxwAjwjbMAzYwS2Vj1dVqlEfvEJvCE+9y9lLF0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:74:02:d8:74:d8:bd:11:6f:5b:2d:45:8f:2b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Validity
Not Before: Nov 4 16:00:47 2025 GMT
Not After : Nov 5 16:00:47 2025 GMT
Subject: CN=1ea861592c1857ce4c86eea98ca6ca2ab50d76a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:3d:fa:dd:8c:38:b4:2f:7e:d1:7e:98:83:
03:08:1c:d3:82:83:34:e4:5a:50:a2:fa:d4:3f:73:
e5:2a:0d:6f:44:00:69:3d:c5:67:78:d5:69:07:a0:
24:eb:b4:f2:49:2e:da:b8:ea:83:00:3c:40:9c:2c:
33:c7:5f:f8:8b:a7:88:5f:64:cd:a9:e2:9c:25:47:
77:34:e1:49:2a:d6:00:4b:c3:2e:81:45:2c:ee:af:
1c:cb:95:7e:47:30:bd:a7:ed:1a:35:24:47:3b:d8:
25:99:2e:c3:fa:97:46:64:cd:81:b4:03:9d:ec:26:
86:24:72:fb:44:48:5d:05:1f:a0:5a:e6:95:0b:df:
a2:6f:05:48:0f:28:cb:d7:ca:6d:5c:ab:2d:4b:7a:
a0:53:33:ee:57:7e:04:d1:11:c9:27:34:a2:e8:93:
6e:2c:b2:64:46:cb:17:cc:16:7d:7c:45:33:11:d9:
ed:3f:88:44:1c:d2:de:8b:45:c7:36:32:a6:32:3c:
44:19:dc:29:d7:90:cd:b1:09:0f:e0:95:9c:98:4f:
9d:ac:00:e2:85:9f:7c:21:4f:1a:51:de:00:1a:7a:
3a:f9:23:74:4b:05:e0:01:85:ad:4f:4f:a6:d5:08:
4a:50:80:95:0b:92:9e:d0:d0:87:25:36:09:bb:87:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A8:61:59:2C:18:57:CE:4C:86:EE:A9:8C:A6:CA:2A:B5:0D:76:A5
X509v3 Authority Key Identifier:
keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:26:0d:b9:02:7f:44:97:2c:20:ec:3b:fe:25:0d:ad:68:3c:
21:9c:33:c0:4b:bb:09:2c:12:f9:ef:21:4c:89:71:75:17:ed:
4d:55:67:53:e5:0a:ec:4d:e2:cf:00:16:c5:10:3e:10:fc:7c:
d0:ee:c5:08:ee:89:b9:82:b3:21:25:fb:11:ee:e9:1d:4c:05:
2b:33:48:72:b3:5d:16:2c:0f:54:7a:ae:f4:d8:36:c2:24:e8:
69:cd:68:71:2b:32:aa:32:73:40:99:f1:89:d4:b4:b1:ad:37:
48:ac:b1:43:1a:3f:7b:a5:84:fd:f1:6b:a5:1d:95:0e:ef:b0:
9a:6a:ce:d0:0d:20:b3:54:67:71:6b:fc:83:d6:d7:6e:7e:85:
67:c4:cc:b2:1d:4c:78:a1:97:6d:c9:36:f9:5c:88:4c:91:d3:
9f:fe:5a:de:c0:0e:f8:2d:03:f0:33:95:05:7a:48:96:43:73:
10:c6:64:2a:6a:76:13:f0:1d:5e:c7:a2:50:43:c1:d7:63:d7:
c5:ab:b6:bd:40:86:f9:34:3c:d1:9f:f8:5c:21:2f:8b:51:c0:
1f:cc:c2:d9:f9:2f:91:18:eb:c1:52:43:27:6e:ac:e3:61:cc:
a2:4b:15:af:14:ca:bb:36:d3:06:24:4a:25:0c:06:a8:c1:cd:
ce:bf:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:34 2025 by rpki-client