Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: pOm5aCVLHMoEHY7f3jcNok93HrvlVtVesnJIyhFbsMc=
Subject key identifier: 78:64:AC:BF:0E:85:6D:34:5A:FC:C5:35:F2:CE:60:CD:CA:78:AB:23
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 0199FC2158E78D45F83E7B45397F37FEFD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: HCkGRctLJ1ePeWXWFjnQs-P5BH0.roa (hash: tw5rYUuFpBr4QpbNuBNtp2/1hdw23rZNSzLDyhsXnAY=)
2: RiNsdcvxD0PdXlr09eZFcKvk8jE.roa (hash: MWTuo9tYK/ZAX1ENyIoJDxzrn+48EPKp/JEGDGVE/Fc=)
3: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: WxrGuhnNkrTOOhguaZDIvE810bd00oe41ZypQSdtwGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:58:e7:8d:45:f8:3e:7b:45:39:7f:37:fe:fd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=7864acbf0e856d345afcc535f2ce60cdca78ab23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:1c:94:b5:49:86:ff:68:31:44:9a:23:20:
f3:62:a8:d2:53:5c:92:64:64:95:34:fa:2e:54:b5:
d2:23:f3:42:0f:aa:5c:81:92:bc:9b:32:b9:de:00:
13:42:57:6b:9e:d6:77:24:cc:c2:0d:b6:a4:b3:d7:
01:ab:b0:f5:e6:60:27:83:76:46:10:c8:9d:40:25:
9b:28:03:40:03:b8:7f:68:84:91:71:a4:ec:fc:98:
b1:92:c4:d3:3a:8e:08:9c:e0:16:85:e3:aa:22:6a:
9b:db:32:45:e0:5d:5b:0f:4c:92:3f:79:b0:8e:9b:
82:c0:01:86:0a:6c:ce:ef:75:d3:c5:01:59:f9:b9:
3e:f6:8f:ce:ea:ea:3a:e5:dd:a9:46:01:16:d7:9d:
14:a0:35:8d:af:62:96:f3:cc:36:45:b2:5e:29:b7:
26:e7:1e:3a:4b:39:9f:d7:bc:7c:65:cd:ee:04:cb:
43:cc:1e:73:6d:73:99:6a:fa:0e:39:de:0f:c9:40:
38:aa:78:fd:72:d8:a3:c0:46:5d:ca:f1:21:66:34:
00:02:55:26:5b:57:6c:f2:bb:37:fd:ea:6a:d5:f4:
08:cd:fc:65:a7:64:47:b2:3a:37:ea:b4:fe:5b:e6:
05:72:5d:85:1e:c9:d9:c1:cc:af:8e:b4:36:c1:3c:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:64:AC:BF:0E:85:6D:34:5A:FC:C5:35:F2:CE:60:CD:CA:78:AB:23
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c3:d1:21:80:88:b4:b4:74:5c:6f:49:04:d7:fb:2e:e7:9a:
6b:b4:65:d8:b6:25:e0:c4:a2:39:82:7c:e7:33:f6:a7:77:cc:
af:8d:76:ee:da:dc:67:c1:7c:54:17:36:3c:d3:92:97:ca:c2:
a3:bb:61:73:59:cc:21:5a:b1:ea:f7:45:52:45:50:03:3d:f2:
ab:9f:6c:aa:5e:85:07:df:56:72:7d:58:e3:73:a5:0f:e9:db:
cb:1e:ff:e6:34:4f:09:2b:23:f0:c7:78:b9:92:66:b1:53:e1:
05:72:fd:d3:ab:02:27:69:bc:53:d2:4b:e5:b0:b4:38:71:12:
c5:25:0b:7b:99:0d:18:72:e0:29:db:af:fb:59:92:85:7f:d5:
36:a9:e7:4c:22:5a:1b:d6:72:cc:d0:6c:85:9d:02:cc:6b:5e:
eb:b2:cd:01:03:57:17:e4:b8:11:1e:d1:6e:ca:36:a5:09:98:
f7:89:20:eb:7a:66:f9:fc:21:d7:75:93:8e:0c:70:28:81:3b:
b2:ae:be:a4:20:7e:5d:9d:b2:2b:8d:b2:91:8a:42:3c:57:71:
b5:bc:a7:58:f4:b3:17:1b:ee:02:7d:fd:92:08:65:00:ae:63:
85:15:8e:5b:f3:7c:38:b4:da:0b:21:74:46:8c:f6:d9:d8:37:
2f:31:ac:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:46 2025 by rpki-client