Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
File: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft (raw, json)
Hash identifier: 4Z+ZQ1UDoKANqhWUh4yOeTDld5NDCj6eEj6bqhOzBQU=
Subject key identifier: EB:A4:32:86:0E:80:E8:53:53:9A:54:79:62:5A:5E:C3:24:C8:4E:38
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Certificate issuer: /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial: 019A4E189B485449BA4E15D3DDCC899CB66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
Manifest number: 16FA
Signing time: Tue 04 Nov 2025 09:00:26 +0000
Manifest this update: Tue 04 Nov 2025 09:00:26 +0000
Manifest next update: Wed 05 Nov 2025 09:00:26 +0000
Files and hashes: 1: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl (hash: CrU8nYSz+MZfoLN9L6G6BojOuBH8jpA4Tq3uEjPD9CU=)
2: irIscEtMW7wUDwc_jX73mZGmgDY.roa (hash: GYzHbNbhG0WM1T4likEpev4kbQzCpDdQtfyeZ8vI/B4=)
3: ydbrje3UPVm8R15QS_gI4G8JkZ8.roa (hash: 9YZIlSpD5UZTI51LVS8V+r0vUFmlrJTcDfEwmIT9Rlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:9b:48:54:49:ba:4e:15:d3:dd:cc:89:9c:b6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Validity
Not Before: Nov 4 09:00:26 2025 GMT
Not After : Nov 5 09:00:26 2025 GMT
Subject: CN=eba432860e80e853539a5479625a5ec324c84e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:2f:6e:a6:9c:8f:ca:3e:a7:31:23:e5:89:
3e:ca:29:0d:44:c4:99:7f:05:19:7f:a0:5c:47:80:
49:6e:b1:10:35:6e:63:17:35:84:5c:66:91:4f:8b:
9d:22:ef:09:b0:a9:9f:e0:f1:cb:65:94:64:f4:05:
9e:45:be:b2:cc:e1:c5:18:ed:19:bf:03:4f:26:27:
1d:5f:36:4e:cd:a6:d3:dc:10:57:26:ce:7d:5b:51:
86:f8:58:25:f5:d0:ee:9c:90:fb:45:23:f3:0a:54:
38:a2:2d:9b:cb:13:95:ce:98:62:9d:b5:25:6a:fa:
0a:0f:7d:d4:e0:d1:c7:e0:0a:d7:9e:29:2a:46:0e:
d5:3d:8b:79:5a:61:2a:3f:94:a6:87:69:bf:22:a6:
c4:2f:82:1a:4a:db:1f:92:ee:32:16:97:6d:54:63:
7f:bf:ea:68:d8:ed:cd:45:e5:9f:8b:d7:06:ba:ae:
88:02:5c:2a:1b:c0:9e:e9:40:da:91:b2:c9:50:73:
24:65:97:9a:7a:1c:db:8f:83:ca:6b:8f:ab:cc:3f:
de:16:be:20:30:01:aa:0c:34:f9:7d:19:26:19:04:
3c:52:8d:7c:c8:5f:e1:87:16:6b:58:99:a2:93:d1:
5c:5e:5d:4e:71:f6:d0:f1:25:af:27:16:b4:26:54:
aa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A4:32:86:0E:80:E8:53:53:9A:54:79:62:5A:5E:C3:24:C8:4E:38
X509v3 Authority Key Identifier:
keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2c:af:77:4b:b8:19:4c:fb:da:37:28:b7:15:24:a1:60:9c:
3f:24:80:db:f5:b3:9d:07:13:1b:92:84:0b:83:c6:76:cf:4a:
cd:8a:d7:44:56:c5:41:7e:bd:45:16:a5:a9:80:d5:eb:09:fa:
36:04:99:af:59:36:01:78:12:fe:4e:c3:ba:4b:90:ba:1d:55:
57:2f:c1:5d:2f:c0:14:80:9e:6e:ac:39:78:66:d6:4f:c9:fa:
0c:d8:72:3d:59:a3:f0:90:3f:cd:af:2d:35:00:9d:bc:0c:fd:
2f:72:39:f8:b9:d3:d1:10:02:79:5e:97:f7:79:53:8a:88:ea:
06:1a:bb:62:65:e8:fa:df:9a:60:d0:0d:3a:51:9a:d7:c1:51:
13:10:cc:f8:e5:4e:95:be:eb:98:a8:fa:5e:9d:9d:bb:78:18:
86:53:a1:c8:4f:7a:69:29:ff:4f:3d:73:67:db:eb:11:e4:76:
dc:f3:58:58:ad:e6:38:e0:97:79:83:9d:55:18:06:94:c0:de:
c7:85:7f:b7:43:7d:ed:91:a8:a1:38:9a:a2:fc:bc:6c:11:11:
25:aa:c2:b8:ae:16:62:b1:1d:29:b3:d0:65:9e:61:f7:f9:d1:
f0:86:d1:bd:f0:2e:d0:d8:4f:81:38:d6:b2:d4:96:66:1b:18:
11:3a:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:56 2025 by rpki-client