Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier: ilAqZmI7RIxFAHXVQXpxQU0ijx5M71q+ssK8Rnqx3vA=
Subject key identifier: 11:19:85:94:D8:5C:DA:8D:51:15:77:71:9E:E8:15:F0:E2:2E:4D:9C
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 019A5119F317E37AD67450BE72CC02A23D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number: 13CE
Signing time: Tue 04 Nov 2025 23:00:46 +0000
Manifest this update: Tue 04 Nov 2025 23:00:46 +0000
Manifest next update: Wed 05 Nov 2025 23:00:46 +0000
Files and hashes: 1: WiSq1XaassFeIzQ7VRRmBzOb3-E.roa (hash: kuvzaokAS1drpTQ/4WqXgBODOQIMCPVvcrCFZCP4fDk=)
2: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: 1yWPQC4VibDoe3IPbAS/Jpg25bB83wN+gAMKA3tJ140=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:f3:17:e3:7a:d6:74:50:be:72:cc:02:a2:3d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Nov 4 23:00:46 2025 GMT
Not After : Nov 5 23:00:46 2025 GMT
Subject: CN=11198594d85cda8d511577719ee815f0e22e4d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:11:e4:37:89:01:3b:28:dc:e2:fb:68:bf:
41:a5:b2:b2:00:94:de:bf:ac:25:62:97:e0:f5:c3:
8f:fd:3a:a9:94:19:fe:eb:ba:c3:89:cf:76:5e:6a:
ce:58:63:08:d7:5b:48:7f:3a:0e:27:63:66:6b:99:
30:49:b1:f4:c4:fe:8f:a4:0a:11:d1:41:ca:7c:67:
e5:73:44:48:b7:81:0a:a0:58:5e:eb:66:f5:2a:3e:
4f:d5:ce:82:d9:5a:c7:5e:10:c2:9d:17:bc:72:7f:
4d:ad:44:b1:9c:52:14:12:53:aa:8c:c7:db:ce:8d:
d2:be:fe:59:55:4a:e4:90:6f:55:ec:27:27:0b:ed:
11:3b:85:b9:89:7d:9f:e5:c2:62:28:79:5e:d7:a5:
12:b1:70:bd:24:20:3e:d6:6b:9e:e1:4c:26:c3:7f:
38:c2:b9:f4:8a:e7:87:20:15:c0:d2:32:b5:21:7e:
67:3a:95:d8:de:76:56:69:25:96:3b:15:7d:46:37:
53:a2:c5:fa:e5:32:3b:3f:7b:a2:e5:67:92:20:43:
56:7f:83:20:27:54:69:86:62:16:ca:d7:b2:e1:f0:
63:6d:10:cf:44:f5:2b:58:71:61:a3:1b:89:77:b4:
9c:b8:8a:39:18:1d:58:75:13:3c:c2:76:cb:c6:cd:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:19:85:94:D8:5C:DA:8D:51:15:77:71:9E:E8:15:F0:E2:2E:4D:9C
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:15:0c:79:eb:9d:f8:1e:8a:95:17:89:71:65:2e:a1:4c:ef:
c0:66:b1:ad:97:ad:03:bd:ee:ee:00:f2:d7:8f:fa:85:ff:6f:
e7:ec:9a:f8:45:ba:f8:28:4e:95:3b:5e:58:19:cc:df:9b:cc:
c2:66:25:de:b9:80:ea:d5:bd:e4:d5:4a:5d:bc:cd:fc:d7:a6:
a5:1b:c7:4a:72:b9:48:f3:e9:3b:f8:6b:62:da:18:c0:01:f5:
c4:b4:71:df:a1:f9:79:30:8c:1c:aa:82:ba:05:54:22:15:52:
80:e5:1f:4a:37:80:ca:d8:1d:eb:7c:7d:43:69:8c:60:16:8e:
e0:b7:e4:62:f0:10:45:d4:77:c5:7d:e7:5b:0e:5e:e2:31:25:
41:8d:de:24:ed:42:1c:44:13:e5:f1:a1:d3:ea:bf:52:41:cb:
ec:55:69:36:fa:83:19:ea:42:18:1c:35:ea:24:6f:2d:b7:a8:
a3:42:f8:3a:33:57:fc:e4:86:9e:12:f6:30:d1:0b:3b:e3:d5:
b7:4c:34:63:e2:c2:e6:72:37:69:ea:35:1f:c9:7f:88:c7:64:
7e:00:54:cf:0c:fb:3a:7d:19:89:78:bc:f7:c4:3b:f7:77:0a:
49:58:26:16:c4:a3:9c:0b:db:cf:b2:ed:0a:cd:43:47:a3:f7:
0b:fa:22:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:02 2025 by rpki-client