Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
File: EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json)
Hash identifier: QW7wC/r3QDQXl4V/SsX7DM4oGAHzpMPaHQQtFEADS0k=
Subject key identifier: 7B:5D:60:18:FC:9B:49:DE:E9:82:0E:6D:70:4F:2D:5A:62:28:8E:BD
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Certificate issuer: /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial: 0199FC8F1AD60C337219BABF90963A4B7EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
Manifest number: 1278
Signing time: Sun 19 Oct 2025 13:01:00 +0000
Manifest this update: Sun 19 Oct 2025 13:01:00 +0000
Manifest next update: Mon 20 Oct 2025 13:01:00 +0000
Files and hashes: 1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: s0B5uKPqqNe/FMoNVQpzAXL7ORnt5EQZdHk/M4tIGVc=)
2: dIVATvBSzX3-SNfEUJlU8mxDvDM.roa (hash: /zYG/pdQ9E5dfKf9N6xTzPoRPhdVlqRDaAGUUjW4u0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1a:d6:0c:33:72:19:ba:bf:90:96:3a:4b:7e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Validity
Not Before: Oct 19 13:01:00 2025 GMT
Not After : Oct 20 13:01:00 2025 GMT
Subject: CN=7b5d6018fc9b49dee9820e6d704f2d5a62288ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:e3:23:4f:b4:5a:e7:b3:12:2a:70:19:b9:
44:9c:57:2b:66:bd:d3:fe:fa:9b:83:85:28:f2:1c:
e9:8d:13:a7:8d:4b:5b:15:35:2d:1c:00:09:63:48:
eb:cc:a1:bc:61:2c:95:f4:ff:1e:e0:cd:a3:ab:a4:
97:cf:3d:29:17:f7:e4:a4:c8:34:2e:a3:43:fc:dc:
3b:85:40:f5:14:8e:12:74:c1:82:e6:8a:77:8d:40:
a3:df:73:55:00:d5:56:4b:01:b0:86:ca:e2:d8:69:
d6:b4:e8:5b:76:e9:62:c6:cc:c2:8a:d2:02:38:2e:
fe:13:8a:eb:80:33:94:90:3b:09:7a:83:94:91:17:
b8:c2:74:7d:4b:f0:46:1e:ad:c4:ab:3f:00:24:26:
f5:c8:bf:8b:02:47:ea:1f:57:35:29:99:2a:11:93:
d1:54:48:2b:02:1e:db:14:14:52:e0:13:76:e8:70:
6d:ef:8d:4b:39:fc:3a:eb:a9:b0:63:8e:32:3e:c6:
d0:1c:35:17:6c:f0:ff:c3:29:b8:f6:9f:66:be:eb:
e6:be:4d:04:f7:35:29:2e:c8:aa:45:fb:60:75:b2:
23:50:50:77:91:9d:b8:7d:07:23:39:50:0a:31:12:
4c:4e:a2:e2:87:ae:1d:fe:50:5f:ea:86:e8:fe:c6:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5D:60:18:FC:9B:49:DE:E9:82:0E:6D:70:4F:2D:5A:62:28:8E:BD
X509v3 Authority Key Identifier:
keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:16:19:86:11:87:04:00:8b:20:e4:fc:65:30:a4:ac:fb:72:
60:4a:95:55:1e:7b:56:b9:ad:3a:e2:89:92:d2:72:82:6e:27:
0c:64:47:5a:ff:9f:55:28:8a:da:6f:bb:4a:99:cb:75:ab:96:
c8:78:e6:58:b7:46:fc:de:88:ee:27:4b:c0:05:0f:39:62:16:
50:74:2c:bc:f9:ee:6b:be:e6:57:fc:8c:08:97:65:25:84:45:
f1:6e:74:65:ae:36:96:eb:6e:52:89:66:a7:09:97:da:e2:a8:
ba:61:36:32:9f:e9:95:e8:af:e8:90:d4:ac:df:f2:ee:9c:50:
c4:eb:94:58:53:4c:72:b5:36:08:e8:d7:63:62:2e:17:8d:c6:
fb:72:54:39:df:97:2c:b1:80:f8:d9:44:d0:ae:71:1f:c1:78:
56:4a:ea:59:f0:b5:d7:0b:42:75:43:4e:a6:05:5d:36:a3:d8:
e5:ad:9c:d3:c2:d0:a1:d2:b2:03:fc:9b:a0:2d:e4:60:2e:de:
ee:98:83:1f:c7:6e:c1:bf:e1:c2:09:08:fc:d5:88:b3:ea:90:
30:0f:4a:18:a6:cd:aa:32:01:49:89:65:47:c5:82:08:c9:50:
05:57:30:8d:c5:d7:d2:a4:37:1c:ba:61:0b:6f:13:ae:6b:e0:
c8:51:fc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:04 2025 by rpki-client