Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
File: eaHQ6nMPz8shSZlceCib8tbRhvw.mft (raw, json)
Hash identifier: 16d+uEloCiGzc9Ncdg8cRSWqdDRzyjTUP96OCaoJE+8=
Subject key identifier: 13:49:34:23:71:32:35:22:A5:D7:FD:B9:D1:86:05:0D:53:B4:4A:D7
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Certificate issuer: /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial: 019A4DAAB219BD3E9F756A744CAB97C7C0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
Manifest number: 057B
Signing time: Tue 04 Nov 2025 07:00:23 +0000
Manifest this update: Tue 04 Nov 2025 07:00:23 +0000
Manifest next update: Wed 05 Nov 2025 07:00:23 +0000
Files and hashes: 1: eaHQ6nMPz8shSZlceCib8tbRhvw.crl (hash: nnU53BA6FtrCdmihyKxWbsq8e+6Xdm1iDuMc+I4egRs=)
2: goX035Hv0elR2rCiATveFLxA4oU.roa (hash: HjIa5HxfoLHz1fNA8faR+9nXcT/qazkCcjt+nSvQMlE=)
3: rIYcuOWNo_aVxJgRl617C5BIy9Q.roa (hash: BxBO2U1Pwu966v6V4rQLz4pnONabIr2QJ+vjbhYc4wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b2:19:bd:3e:9f:75:6a:74:4c:ab:97:c7:c0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Validity
Not Before: Nov 4 07:00:23 2025 GMT
Not After : Nov 5 07:00:23 2025 GMT
Subject: CN=1349342371323522a5d7fdb9d186050d53b44ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:25:d3:fe:0b:e8:de:8c:00:ff:b8:ac:0d:
69:af:b0:39:32:32:85:34:ea:32:61:5e:bf:fd:03:
22:f2:a8:ee:a0:04:b0:72:de:81:a7:40:a9:af:68:
b5:38:a0:a7:26:9c:71:2a:0b:a3:1c:b3:0b:0e:7d:
87:0d:1b:74:9e:ff:66:47:81:77:f4:89:5f:54:60:
86:ec:8a:5a:0e:7d:88:5d:88:9f:1f:22:4d:29:1d:
a8:7f:54:b3:70:99:f3:b3:8c:ca:27:5d:7d:23:87:
51:56:68:8c:a5:a2:4c:7d:a2:db:10:1f:38:06:a4:
9d:94:33:f1:f6:44:07:2e:ff:8e:a3:2b:ba:f4:21:
b5:08:2c:97:29:f4:dc:b5:a7:e6:26:63:08:d9:a4:
3a:0c:23:65:75:15:6f:37:55:1f:aa:59:3f:4c:57:
c8:44:d4:2a:a0:a4:9d:35:f2:c2:9d:f5:b3:86:7b:
ba:0f:3e:08:fa:e7:71:ec:d3:a3:27:c7:88:31:06:
a9:42:85:a2:06:16:32:fd:98:c0:26:c1:f5:48:d5:
a0:40:30:5c:65:4a:44:f2:9a:0d:5b:7a:c4:32:41:
a7:22:0f:42:a6:3d:2b:c3:a9:8e:e1:a4:be:84:6d:
eb:5d:c0:e2:03:d6:96:47:4a:58:d9:65:42:24:85:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:49:34:23:71:32:35:22:A5:D7:FD:B9:D1:86:05:0D:53:B4:4A:D7
X509v3 Authority Key Identifier:
keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:43:d9:0e:e9:4f:ec:a4:12:e5:da:c5:a2:1f:4d:b9:12:1f:
1c:7d:ee:5e:d3:71:f4:fa:41:7c:17:ab:56:87:c4:c5:54:26:
20:d0:7e:22:ff:2f:1c:3d:19:fe:7f:f3:c1:9a:8f:30:97:30:
93:ad:4c:55:75:27:10:3b:ff:20:02:98:2a:1c:d4:c1:2e:9d:
2e:6b:1c:bb:c2:2c:f2:9e:5b:2e:a3:83:ed:65:69:61:c0:21:
51:24:a0:d8:f6:3b:c0:4c:2b:f4:7e:ed:eb:9d:1d:22:07:cc:
7e:f9:66:c4:53:6e:73:c6:ee:e2:c8:1e:ac:12:6d:fd:ee:4f:
02:63:d4:2d:c7:ea:88:d2:40:1e:cc:e7:af:0f:6c:4f:ea:46:
f3:fc:c6:5a:8b:1a:7a:0f:e3:a1:9b:f9:ac:75:94:29:dc:e8:
71:9d:f0:41:0b:b3:6a:00:60:3e:55:28:9d:74:4e:9c:ce:2c:
1a:cd:4f:9b:77:9d:d5:19:a0:a7:d0:3c:59:fb:cf:7c:15:13:
51:3c:a5:f3:02:f6:c5:ec:70:d7:4e:8b:7c:8b:37:10:c1:96:
c8:bb:2b:79:89:bb:6b:b3:ee:83:60:78:22:8c:7c:0e:d6:0a:
7c:69:68:2c:61:5e:db:65:49:e5:a5:80:9c:67:f5:68:f9:67:
3a:20:05:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:07 2025 by rpki-client