Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: rYa91rKDclZkosgBcnctpZY5Y839HqwY7p3S5Tnb2pg=
Subject key identifier: 79:B9:54:51:0D:B2:55:0B:B7:63:FD:63:25:CD:9B:46:23:45:2F:02
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 019A4EF5BB01439D046864B10BD1EBF4D95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:58 +0000
Manifest this update: Tue 04 Nov 2025 13:01:58 +0000
Manifest next update: Wed 05 Nov 2025 13:01:58 +0000
Files and hashes: 1: KV3y67WzUL1dd636tV-tGwBKS6Y.roa (hash: BJK7UzSsG4bIRgy/oUjNbXPmO5iJK9tZClLQ8IpL8JQ=)
2: X9Fijkz-_wqcxXki_ZgW942-ey4.roa (hash: 6GLvc6dX34tOpcs0+RseJCW6ZD873+Ny/2OET9fAl0I=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: 2/sW6itbGQtkNdBszhVTvhIDnrPnba6TGG5RR89Zku8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:bb:01:43:9d:04:68:64:b1:0b:d1:eb:f4:d9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Nov 4 13:01:58 2025 GMT
Not After : Nov 5 13:01:58 2025 GMT
Subject: CN=79b954510db2550bb763fd6325cd9b4623452f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:82:b1:72:42:0c:9c:a0:9d:d6:48:6b:b9:
4c:33:44:18:d7:99:14:8a:bb:15:7a:3f:56:84:7d:
44:c8:cf:49:b3:d4:b0:a6:73:0c:90:f1:2c:45:80:
0c:0f:0a:cc:f2:c3:0d:d5:a5:20:fe:70:23:4d:8f:
a2:5f:79:51:21:a6:92:8d:32:74:06:c1:1f:66:a1:
ad:cb:40:3f:c6:ef:bf:44:00:09:13:5f:56:23:82:
6a:6b:37:68:00:21:a6:bc:b3:ee:26:92:bd:89:d8:
6e:57:a1:a3:10:e6:33:e4:15:d1:95:79:a0:c2:0a:
7e:1e:26:79:67:c6:30:7d:0a:b1:6e:fb:17:d1:77:
e4:02:0c:d7:8c:8a:8b:f1:87:36:03:89:83:9c:69:
5b:7f:5d:c2:a5:b3:37:cd:31:93:e5:7e:b5:85:7a:
13:ab:93:4d:54:a0:c9:86:f3:51:46:8e:a1:99:5d:
f9:4b:c5:e7:c6:8a:4d:00:bc:f4:4f:1d:28:0b:29:
2e:01:22:da:75:34:e2:ed:e2:02:96:2b:a1:ba:c8:
ec:72:a5:a8:2d:97:78:34:86:4c:1c:d4:d1:eb:f5:
2c:7d:97:92:c9:90:ba:d2:fc:7e:7f:01:9d:8c:c6:
78:af:5d:9b:ad:3d:86:f6:be:eb:eb:3d:5b:e8:b0:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B9:54:51:0D:B2:55:0B:B7:63:FD:63:25:CD:9B:46:23:45:2F:02
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:61:a5:29:6e:70:58:de:0f:9a:8f:66:a6:87:1f:a0:db:4b:
2a:cc:cb:6f:11:f7:49:ed:8d:79:b1:59:5c:f8:81:a6:4f:b5:
27:d3:54:83:66:9f:ee:a0:b1:68:82:1f:b0:15:b4:1a:53:89:
e9:2a:c5:be:eb:d4:c1:0d:c2:9f:9e:b5:0d:74:5a:77:ba:40:
25:73:00:3f:56:9b:16:ab:f5:c2:41:4d:1a:1a:68:87:55:e7:
8c:2a:e1:fe:20:d8:fb:21:f5:1b:b6:03:ea:5e:a1:1f:61:8c:
67:81:52:2d:c9:60:91:ba:71:37:9e:79:45:80:09:3a:aa:1d:
75:48:c4:02:28:ab:dd:b9:1e:3c:a0:a9:3f:88:79:15:b7:79:
60:e4:d1:1f:ec:c7:6b:69:1b:07:3a:0d:7f:c9:a8:78:86:3e:
40:3d:d8:60:35:2d:86:b9:63:c8:06:49:31:d4:6c:be:9b:04:
4e:29:87:36:91:57:64:00:ad:3d:5d:5e:8d:6e:3a:cc:fb:a6:
b2:e5:f6:d6:b0:3f:fc:71:f9:d5:6d:dc:16:9a:f0:62:fc:04:
24:35:63:89:46:14:13:6e:09:2d:71:49:a6:58:93:56:d7:0f:
d4:93:fa:c1:79:ee:a3:0e:71:f7:e6:18:1f:c1:83:4e:72:88:
69:fc:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:37 2025 by rpki-client