Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
File: eDdfthaLNUhBuR0wX50M3AyxUB0.mft (raw, json)
Hash identifier: zCmGG6+dYWUFTkv75sdQsbuJKaN0AO0M0OR89FHCUec=
Subject key identifier: 8B:A2:4B:47:A5:DA:02:3D:04:2D:47:93:F5:4D:AC:A7:93:57:82:9E
Authority key identifier: 78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
Certificate issuer: /CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Certificate serial: 019A4E86B4FEF924AAEBA3025143534C8E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:42 +0000
Manifest this update: Tue 04 Nov 2025 11:00:42 +0000
Manifest next update: Wed 05 Nov 2025 11:00:42 +0000
Files and hashes: 1: eDdfthaLNUhBuR0wX50M3AyxUB0.crl (hash: wCyMW1iaM9y+KeKjc2+7Au/kaDb1K7PgxDokXTZZWGY=)
2: yISIjc9YgTnf71Z4E-nlNbitu7U.roa (hash: LtZh6f0jmex3FPPUw/azkOX7onGzwYw39L6cN+bX6NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b4:fe:f9:24:aa:eb:a3:02:51:43:53:4c:8e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Validity
Not Before: Nov 4 11:00:42 2025 GMT
Not After : Nov 5 11:00:42 2025 GMT
Subject: CN=8ba24b47a5da023d042d4793f54daca79357829e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:e9:b0:35:1c:94:52:88:8c:76:c9:a3:d0:
61:c1:b1:bc:fe:93:55:a0:96:b8:f5:79:69:af:76:
1c:9b:e4:08:69:c5:5e:55:47:bc:f2:4c:75:d2:b8:
ec:ef:57:f4:77:22:0b:8c:f0:fe:3f:88:43:b6:29:
52:99:ff:7d:8c:d7:da:be:3f:d8:67:ee:ae:ca:a2:
3b:ea:4a:ca:f8:91:68:02:a4:ab:26:80:7a:2b:a4:
db:5d:28:c7:e3:e8:80:41:a8:9f:96:14:cf:6e:a2:
f1:5a:5d:b6:94:cf:ec:b3:10:b0:93:58:f6:a0:85:
42:bb:23:aa:1b:1a:3d:28:ef:41:d5:f6:72:a2:e0:
f2:18:36:24:47:08:f9:ff:49:ed:3c:b3:cb:d3:7f:
71:61:d8:cf:d5:3e:fb:a3:a7:a5:ab:0b:13:55:c4:
4c:a3:56:98:4a:9b:13:7e:7a:e3:dd:ff:c8:c5:1d:
14:f2:77:f6:b2:53:34:a6:2d:71:de:a5:51:03:5a:
38:12:a4:b4:c7:84:db:2d:f2:e3:94:b5:f3:f5:be:
0a:41:eb:4b:d6:75:02:73:2b:8c:eb:04:d4:ff:14:
9d:81:f0:9c:53:81:d5:1a:d6:ff:a5:a8:bd:38:ff:
40:ae:e0:6d:92:c6:df:bb:45:21:48:e8:fc:19:ba:
f9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A2:4B:47:A5:DA:02:3D:04:2D:47:93:F5:4D:AC:A7:93:57:82:9E
X509v3 Authority Key Identifier:
keyid:78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:00:a0:5d:d1:f7:f8:a5:a2:d8:e3:cd:85:89:48:cc:6d:c3:
f0:fe:48:fb:02:5e:dd:40:2b:b8:40:9a:48:6d:8b:9f:38:67:
bc:5c:a1:f4:90:8f:ef:ea:f3:b6:d0:61:5e:ec:93:ca:61:b5:
11:17:9b:36:51:b0:02:ee:c4:9d:98:4c:ed:dc:e8:20:b7:9d:
53:8f:62:4a:19:c0:14:d1:ef:ef:c1:f4:e0:a3:b6:7d:e1:de:
7f:73:16:70:c2:c5:d7:28:42:9c:dc:0b:3c:21:27:24:61:3d:
7d:cf:a1:d2:cc:f8:95:35:f0:eb:9e:3e:b7:f0:ae:f9:5f:da:
29:bc:3a:5a:4f:f5:07:e4:65:90:e0:10:45:fa:6c:ec:0e:d8:
65:eb:d1:c7:df:30:74:5b:f3:59:28:ab:2a:80:13:e4:6a:c2:
c3:a4:a5:63:78:b2:74:c7:19:20:1b:38:ec:67:81:42:e1:f1:
4c:9c:17:cb:9d:ff:0f:6c:cd:64:b1:fa:91:93:c7:3c:01:96:
a2:9a:c6:46:93:c9:fa:bf:71:b7:ab:fd:7b:b1:8e:2b:27:f6:
8d:22:91:76:6b:b9:57:dc:ad:19:af:fe:c4:25:0c:fa:6e:ea:
2c:4d:06:fd:ad:42:e5:71:9e:fd:6f:48:df:af:e9:d6:79:23:
c4:1a:72:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:59 2025 by rpki-client