Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft
File: eRP8_AYn_yGf5dZUmArUj0R6tBU.mft (raw, json)
Hash identifier: tICgj6W3j+huCKSZ8vC7gbXZC1nhI9EuzrKQUfzTak8=
Subject key identifier: 4D:5C:78:9E:EE:17:21:65:0C:44:36:19:AE:F0:4D:12:91:14:F6:B7
Authority key identifier: 79:13:FC:FC:06:27:FF:21:9F:E5:D6:54:98:0A:D4:8F:44:7A:B4:15
Certificate issuer: /CN=7913fcfc0627ff219fe5d654980ad48f447ab415
Certificate serial: 019A533F0A14176BC53ED4CCC290FC7C6308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft
Manifest number: 025A
Signing time: Wed 05 Nov 2025 09:00:31 +0000
Manifest this update: Wed 05 Nov 2025 09:00:31 +0000
Manifest next update: Thu 06 Nov 2025 09:00:31 +0000
Files and hashes: 1: eJu8DAG80mqEMpGkhj3wQuOHXr8.roa (hash: DOaRxNn/SrZmdsc84BhZlu4cBq+qb0YX2eXor7BoVjI=)
2: eRP8_AYn_yGf5dZUmArUj0R6tBU.crl (hash: t6MnwfPIjOZ12ZTOnLLP2QcskVo2FY9OXCZaNJP5K2k=)
3: mao1uadVCeFMM8wryeWY5BR-7f0.roa (hash: O0Lx4ebG9mRcmgsWCpFUzVMc+24C/UMOL6lwkcukVPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:0a:14:17:6b:c5:3e:d4:cc:c2:90:fc:7c:63:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913fcfc0627ff219fe5d654980ad48f447ab415
Validity
Not Before: Nov 5 09:00:31 2025 GMT
Not After : Nov 6 09:00:31 2025 GMT
Subject: CN=4d5c789eee1721650c443619aef04d129114f6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:79:d0:39:7e:28:c3:63:a4:d7:ce:6a:2f:
9e:00:f9:3c:63:60:8a:70:8d:37:a9:f0:11:a6:c7:
dd:60:74:16:a0:7f:31:84:d8:39:74:60:e1:25:19:
1b:11:00:4f:5b:00:a2:76:1c:35:11:12:75:ec:63:
c6:64:3f:41:d6:25:6f:bf:4f:6e:9e:76:f1:f5:9e:
9e:e2:e2:7e:e9:47:80:37:c3:b4:37:8c:6c:af:85:
e4:c7:df:d3:2a:a0:e5:97:07:22:77:c9:c6:32:25:
6c:0f:ef:23:57:d2:79:c3:d1:95:bc:33:f0:53:58:
c8:72:c7:e1:fc:60:c6:60:9e:ed:9a:4f:00:42:d4:
27:90:c7:13:ba:11:5e:11:ea:35:9a:c0:e8:c5:52:
9c:f5:f3:3f:6b:a7:a2:02:a5:d4:3c:ea:d3:d5:7f:
38:34:8f:7c:65:49:e5:71:68:03:24:82:f8:36:2c:
3a:aa:ce:18:1e:c4:b8:66:f2:a4:58:ce:02:95:e6:
04:56:48:84:16:a9:e2:53:53:b2:60:fc:9d:4c:88:
c7:17:ff:7c:2f:71:10:e9:78:70:8d:30:a8:a5:ea:
28:ea:15:48:38:5e:3e:39:47:c2:94:01:ad:70:c4:
84:36:68:94:bc:4c:1e:51:f0:fd:ba:fc:6c:fe:3f:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5C:78:9E:EE:17:21:65:0C:44:36:19:AE:F0:4D:12:91:14:F6:B7
X509v3 Authority Key Identifier:
keyid:79:13:FC:FC:06:27:FF:21:9F:E5:D6:54:98:0A:D4:8F:44:7A:B4:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:27:f4:3c:e5:af:38:67:fd:d7:8f:39:83:4d:c7:44:e0:9a:
8b:d6:2b:67:93:eb:c3:9f:0c:f1:af:92:0a:f9:6c:39:a5:d3:
9c:a9:24:d4:f6:45:0c:45:3a:59:e9:08:fb:2e:dd:d4:9b:0c:
ea:e8:3c:dc:7e:25:b9:eb:2c:2e:ef:1d:bc:a9:a5:dc:c5:94:
50:40:b5:16:ff:5a:99:fb:aa:21:41:ec:bb:47:4f:b7:12:43:
8b:26:40:be:3a:42:63:09:86:d1:9a:e1:7b:78:b3:e6:b6:bb:
eb:d8:4f:60:6f:3b:0d:06:f2:4c:fd:59:83:cd:19:d4:a3:20:
3a:20:a7:e3:19:ba:1a:54:ab:83:a2:ce:6c:e6:71:c0:b7:90:
fc:f6:6d:37:0e:0e:87:33:5a:d3:98:8a:f2:3c:f6:38:06:4f:
04:67:d1:b7:60:78:1a:97:1b:95:74:00:18:f1:14:de:6e:a1:
92:9a:36:6e:29:2f:9d:8d:3f:dd:9d:ab:fe:ae:3e:2e:d3:ec:
21:08:0a:85:d6:05:cb:35:dc:15:68:b4:89:b7:46:6b:c4:68:
7c:50:8a:5a:9c:4c:50:c2:d4:ec:0f:8d:f1:33:1b:32:92:90:
c9:eb:78:93:85:1d:33:0f:70:6e:78:fd:05:85:0b:7d:b7:88:
47:0b:3a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:24:43 2025 by rpki-client