Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File: EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier: rWKDgD8dC2TZWFfMWIaJxxVILh//NwAB+QIobb/ypF0=
Subject key identifier: 7C:73:0E:F6:6C:40:F1:9A:A4:24:FE:3F:89:BD:30:0E:1C:9B:C8:F6
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer: /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial: 019A4F622F7C7F1D4A3853A351B20ABED365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:25 +0000
Manifest this update: Tue 04 Nov 2025 15:00:25 +0000
Manifest next update: Wed 05 Nov 2025 15:00:25 +0000
Files and hashes: 1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: 68eBGWta1jfnrpftp1i44/r7aG7q9bgyxURtqBham+8=)
2: zVD3SdCfQBJBOagWM5Ehfl1wO_c.roa (hash: qafSEr3TxyKSts1jwMxTvNR+mmxx5iKNpJETUbfFIKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:2f:7c:7f:1d:4a:38:53:a3:51:b2:0a:be:d3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Validity
Not Before: Nov 4 15:00:25 2025 GMT
Not After : Nov 5 15:00:25 2025 GMT
Subject: CN=7c730ef66c40f19aa424fe3f89bd300e1c9bc8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:e3:6e:4c:30:39:69:65:85:af:0f:be:b9:
14:9e:a3:6f:02:ae:38:95:4c:79:75:73:1b:63:61:
aa:76:91:79:b5:b2:e8:ba:cc:56:0a:86:2a:83:9a:
b4:b1:77:0e:b3:9b:41:29:82:b8:f9:d0:84:21:a7:
48:ac:23:03:96:d1:8d:11:58:9f:68:5f:2d:a1:ce:
5e:89:b9:53:fd:de:46:4b:47:04:93:66:6a:11:08:
92:52:9a:5e:81:97:0b:9b:0d:0a:b4:31:82:6f:ef:
53:c3:c4:68:a0:55:1f:b5:00:94:0d:7d:d7:29:85:
70:f1:80:f2:0e:5b:08:f0:99:74:82:a5:f9:92:c8:
c5:cc:d8:1b:42:57:ca:38:e0:ba:ed:73:e8:63:b8:
9e:5d:01:d3:08:36:63:4a:c8:92:97:8c:d2:cd:a6:
a5:f5:b1:5e:12:d3:aa:d8:77:3d:c0:d6:6c:b3:35:
06:65:79:6e:27:5b:bb:9e:97:f6:58:31:36:ba:94:
f3:84:e9:38:8d:bf:a3:69:88:41:cd:88:12:ef:3c:
37:c1:e8:fa:bc:75:b4:4c:c3:4a:fb:e0:ed:64:c9:
94:b2:07:f5:ed:8d:8a:df:6f:03:f8:6f:86:2c:77:
18:02:b8:47:bb:ef:d5:55:85:8f:d8:d3:37:1a:e5:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:73:0E:F6:6C:40:F1:9A:A4:24:FE:3F:89:BD:30:0E:1C:9B:C8:F6
X509v3 Authority Key Identifier:
keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fb:4c:ba:c0:c8:49:9e:60:92:b2:a3:09:d0:28:7f:ed:8c:
b7:80:26:62:f0:c3:9b:f3:f3:e6:f4:be:30:31:00:3c:6a:7e:
7e:10:2f:50:df:d9:98:91:3d:e6:94:1e:ec:33:e8:a5:e4:61:
51:b0:7e:c5:60:60:a1:df:1d:f9:0b:71:8c:d6:81:8b:ce:d6:
38:06:5d:18:1d:35:b6:a8:eb:0b:7f:9a:14:e2:a5:52:7d:4f:
7a:fb:70:d5:e1:64:52:0c:71:f9:8d:56:82:d9:66:f8:c9:cd:
0f:81:97:62:9e:bf:1e:b0:04:57:63:a1:68:29:7d:be:93:c5:
73:f5:83:c4:be:2b:96:1a:56:93:02:ba:7a:38:d6:7f:45:05:
af:13:c4:84:d8:10:9f:45:a5:d0:df:04:4c:b3:75:88:e4:97:
bf:8a:d3:c4:02:36:26:6d:ff:cd:93:2c:c2:0a:f7:36:01:cd:
a6:ed:11:0b:48:a5:a9:46:e7:d8:f5:f1:71:c9:9b:56:a3:1a:
69:91:48:d5:26:21:97:3e:e2:42:43:0e:0b:46:44:9e:9f:7d:
bd:ba:9c:d6:77:cf:48:57:08:73:29:ab:b5:85:16:52:cb:05:
7a:68:8f:7e:7b:11:30:6e:a9:12:e1:c9:fd:36:15:53:e6:a7:
8e:3a:c6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:34 2025 by rpki-client