Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: ssq6D2VOV2cKAPVqPtMQ8QuHwVfKLFe2TUM4uRMKGYs=
Subject key identifier: F9:B0:ED:C8:45:41:3B:F9:B2:35:62:D3:91:92:B4:0D:50:4D:21:74
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 019A563FFC6ED207D8562590DDDC32F61983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 142E
Signing time: Wed 05 Nov 2025 23:00:25 +0000
Manifest this update: Wed 05 Nov 2025 23:00:25 +0000
Manifest next update: Thu 06 Nov 2025 23:00:25 +0000
Files and hashes: 1: HHXGSuGQRW_zAz7Tg7UBxMkUHpE.roa (hash: EXdQKgQbUheeBJFdVxwDKTAaBfIc+np/FEnci5xb95s=)
2: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: x8Jaix+jSPPNL6oUB2QrbU/ZQt/RAW3VM3LCIKu4HXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:3f:fc:6e:d2:07:d8:56:25:90:dd:dc:32:f6:19:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Nov 5 23:00:25 2025 GMT
Not After : Nov 6 23:00:25 2025 GMT
Subject: CN=f9b0edc845413bf9b23562d39192b40d504d2174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:e9:2e:e4:c6:e6:f5:fa:fa:1f:29:eb:00:
0f:3e:28:3e:0e:e7:58:51:0d:fc:d4:f0:5f:5c:69:
02:1e:e0:91:27:11:62:d7:c0:f4:54:24:c3:5c:d3:
c0:27:7e:6c:05:b5:d6:ae:65:f5:9d:de:02:e9:24:
41:26:9f:aa:e3:07:de:9c:02:40:75:ad:98:ed:65:
1f:c7:bc:c0:59:b0:e1:c3:b1:59:8e:39:fe:5e:c4:
19:4e:20:a4:c1:07:e4:b7:a9:22:77:28:74:ce:54:
ad:2b:3f:26:8d:69:d7:f3:98:a6:00:40:6e:3d:fe:
2d:ca:87:0f:72:19:7c:f2:c1:4a:33:66:56:35:0d:
6e:4c:71:3b:3f:99:84:0d:c2:4a:2a:23:18:db:9e:
18:e9:17:21:c8:d0:fc:96:3b:15:72:83:5a:c5:bd:
50:66:3a:ca:c2:bb:d8:55:0e:98:12:f1:36:2e:71:
db:7b:a9:94:e1:b3:2c:aa:b9:ba:05:bc:1c:bb:be:
45:c8:0f:27:5e:bd:31:4b:a8:e1:21:d2:90:a9:b0:
ae:f5:37:4e:0f:15:f5:f1:f4:d7:1f:89:87:f3:a4:
35:c9:19:f7:b1:0a:c0:b7:57:fc:45:01:df:68:1c:
d2:d1:c6:fa:dc:df:7a:bd:c8:71:68:b0:d3:d4:bf:
02:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B0:ED:C8:45:41:3B:F9:B2:35:62:D3:91:92:B4:0D:50:4D:21:74
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c9:9d:10:95:4c:ee:1f:62:ef:3f:44:68:48:30:9d:c9:55:
12:aa:7d:96:db:6a:cd:6e:a0:40:66:f1:93:bf:b5:8d:38:f4:
88:2c:3a:6f:0a:23:52:7d:82:29:7f:82:87:b1:22:41:da:a9:
3e:d5:8f:7c:85:0f:31:1c:a9:34:a2:46:48:77:14:b3:63:d9:
4f:bf:7b:f5:64:48:2e:09:e3:03:c4:6b:c4:7a:50:c1:89:a5:
21:d4:23:d0:1a:f7:57:7f:5c:b6:6a:3a:a0:d8:4b:3f:1e:48:
16:a8:0d:6a:fd:ff:50:52:60:f2:c6:24:a0:8d:0c:46:00:67:
ef:5b:ed:81:4f:26:78:fa:e6:29:52:af:71:01:8c:6e:5c:83:
14:2f:f1:ac:68:33:04:8b:1f:ad:19:10:45:e7:c9:8c:c6:60:
d3:19:bd:37:2c:38:89:c1:af:5d:b4:6d:38:a1:36:b3:68:4d:
f5:40:01:21:db:30:ba:b6:f8:2a:49:58:af:f6:27:6a:44:ce:
20:cc:6f:ef:db:6f:78:d3:fa:b6:c9:88:4c:b2:f7:98:47:06:
43:c6:4e:a8:bd:26:7c:15:5f:68:83:75:17:b5:f8:ac:96:da:
0b:7f:83:b0:d9:69:10:13:3b:e3:da:f8:5c:41:3c:34:92:a6:
90:2f:96:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:42:18 2025 by rpki-client