Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
File: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json)
Hash identifier: bw333fI4nNXJU+c8BTmdX23i9zw0fnvlWgCxrfnAdeg=
Subject key identifier: F0:AA:EE:D8:9B:39:38:94:4E:01:F0:59:D9:67:17:3D:55:9D:1A:1E
Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
Certificate issuer: /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Certificate serial: 0199FE0FEFB2CB63DF124D19504E13B8EF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
Manifest number: 0DA4
Signing time: Sun 19 Oct 2025 20:01:21 +0000
Manifest this update: Sun 19 Oct 2025 20:01:21 +0000
Manifest next update: Mon 20 Oct 2025 20:01:21 +0000
Files and hashes: 1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: 16gCg0qQyk/f6I+SnnJldUT0h2E+IoHc5tQeeT13uN4=)
2: C6VvOJhQ6LO3CnHxJ6KuDcvQH2c.roa (hash: SLDEqSk+tN+j+2o7yXrUPF3ZHKKAK2CSYSuFTkFJRpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:ef:b2:cb:63:df:12:4d:19:50:4e:13:b8:ef:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Validity
Not Before: Oct 19 20:01:21 2025 GMT
Not After : Oct 20 20:01:21 2025 GMT
Subject: CN=f0aaeed89b3938944e01f059d967173d559d1a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:53:8f:96:96:e5:cb:76:d8:0b:a6:cc:e3:
18:a9:eb:bb:55:ee:a0:70:21:9a:4a:23:a3:c4:0a:
c4:f9:5f:46:e0:29:3e:8d:dd:dc:fb:19:9d:3b:87:
99:d2:19:66:86:07:07:49:a4:31:26:97:2e:a3:ae:
02:db:77:9d:02:d6:4b:b2:4b:0b:bf:15:a7:93:59:
31:da:f6:5b:15:e1:2f:69:ce:ae:ea:0b:87:0b:06:
ee:5a:8b:0d:9f:8c:8d:d7:5c:5d:20:9a:bb:bc:87:
1d:95:e1:e8:22:0b:1a:7f:e1:d4:56:df:32:5a:40:
12:64:ed:ae:79:46:8d:50:f0:46:38:e8:e9:ae:e1:
28:01:cb:c6:79:8d:70:24:b5:2b:42:55:5a:dd:a1:
c5:2c:d5:5b:6f:82:24:65:92:8c:97:c6:7e:d6:5b:
3c:8f:98:4c:f3:e0:db:b0:ca:74:16:04:fa:b5:46:
f8:f6:52:e1:6f:a9:4c:7e:6e:6f:e5:92:b8:f1:85:
4d:e2:bd:cc:48:a5:26:82:74:29:1b:5f:28:a0:c9:
20:07:05:b8:68:bc:fd:f6:06:3e:a8:f8:19:d9:d0:
e2:8f:fd:bf:08:f4:be:61:8a:ea:70:44:4b:6b:a6:
cd:49:56:e2:41:40:cb:8b:72:5e:63:c0:fd:b8:78:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AA:EE:D8:9B:39:38:94:4E:01:F0:59:D9:67:17:3D:55:9D:1A:1E
X509v3 Authority Key Identifier:
keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6d:1d:f5:b0:c5:c5:dd:65:49:0b:df:fd:01:fc:fa:4f:95:
45:ce:84:98:f9:67:c1:6c:61:6f:c2:de:d0:3f:e7:8a:55:08:
95:c6:52:25:e1:d3:2f:96:82:20:46:94:61:0c:bf:7e:a1:c0:
63:de:24:57:5e:cd:b4:80:55:1d:ad:bf:2d:98:4f:a6:f9:d0:
2e:65:73:dd:f0:17:4f:c0:11:af:0f:4c:21:ec:95:73:5d:66:
b9:cc:67:ab:93:d1:b8:7e:ed:39:fa:85:8f:dd:c2:5f:32:48:
cd:87:77:e2:58:39:1d:83:4f:b3:c2:31:1e:d1:83:37:8c:38:
7c:b9:52:05:0e:9c:3d:79:15:fb:c5:7a:6b:d6:7c:c5:26:1c:
73:00:70:33:73:eb:23:00:8d:78:f1:1a:2b:2c:a7:d2:61:af:
8a:6c:f9:76:96:0c:60:6f:e5:1f:5d:52:61:bc:6a:15:56:ee:
46:34:91:13:bf:a1:06:8c:dc:65:5e:fb:28:a9:4b:dc:b5:61:
6c:d0:99:ab:92:06:46:4a:40:f3:46:af:75:33:ad:8c:b6:cc:
de:82:5d:82:dc:77:ac:e9:0b:1f:cd:0e:f6:ce:84:b7:d2:be:
ac:99:21:26:cd:d2:59:1e:12:1c:ea:a2:31:cd:f8:a7:23:60:
f2:61:e8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:37:07 2025 by rpki-client