Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
File: eEOlOB3OKHe7w1GmhO_OzdYT46o.mft (raw, json)
Hash identifier: zi3HXB0fwQkxS8iCbmEwcoDzIzcFz7p8lnIp2Az/0Ys=
Subject key identifier: B6:60:14:D2:57:8F:04:FE:EA:1C:57:94:EE:FD:14:FF:AA:8F:DE:2C
Authority key identifier: 78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA
Certificate issuer: /CN=7843a5381dce2877bbc351a684efcecdd613e3aa
Certificate serial: 0198D4E029B11073DD060703B4DB416E2CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
Manifest number: 11B9
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: bb6nncvAhni078ZU5RtarugpVvQ.roa (hash: 6TYoEFu0AnfEraFXjdNI1tT+tX9iNJhtz1VPH2GMI28=)
2: eEOlOB3OKHe7w1GmhO_OzdYT46o.crl (hash: 9dF3OX3udmTKH1vg9PvUABVtnRgFDEBmSo/3GPIzbOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:29:b1:10:73:dd:06:07:03:b4:db:41:6e:2c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7843a5381dce2877bbc351a684efcecdd613e3aa
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=b66014d2578f04feea1c5794eefd14ffaa8fde2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:7c:fd:66:e6:09:ea:e6:70:8d:30:54:7c:
14:e3:ff:24:35:02:b6:61:c8:dc:7e:93:59:77:88:
d0:6c:a8:9c:a2:71:c7:43:34:85:40:ec:cf:ef:5e:
d3:b1:cd:ae:36:b2:99:11:d8:6f:71:74:69:c9:66:
b9:13:df:77:f6:c9:39:55:21:7b:42:84:b9:d1:2a:
66:d0:c5:d3:42:1b:6c:f8:00:cb:6c:58:ba:cf:c5:
6e:21:18:5e:15:70:3c:a1:81:3a:08:e6:bd:3a:8a:
77:0f:8b:c0:f6:f1:17:3e:5f:5c:9e:16:77:0a:bd:
f0:c8:a0:3b:99:91:fc:4e:3b:26:13:30:de:94:a4:
63:56:48:6f:6b:20:eb:25:9a:2b:0b:72:1a:e2:00:
a9:e0:7a:0c:46:d8:34:3f:bb:a6:c8:a1:6a:31:a5:
df:18:96:b6:a2:0e:ed:5a:68:af:17:af:2f:91:f1:
bc:d4:c9:4c:fd:23:a2:c8:4c:2e:75:62:49:8a:53:
3c:5d:62:17:d7:a5:0a:80:cd:c6:5d:1a:ef:37:aa:
44:7e:c5:65:eb:ca:4d:97:20:3b:b3:5d:c2:44:0b:
d6:fa:32:02:67:10:23:cd:8e:59:49:8a:5e:2a:f1:
90:ca:ba:c0:1b:d7:82:9e:16:3d:a7:ce:6e:34:d7:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:60:14:D2:57:8F:04:FE:EA:1C:57:94:EE:FD:14:FF:AA:8F:DE:2C
X509v3 Authority Key Identifier:
keyid:78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:17:47:e0:e2:7a:27:35:55:d3:9a:7f:50:89:38:a5:03:65:
73:75:f8:7c:c6:b2:dd:16:59:37:fb:c0:14:77:f6:10:6b:d9:
af:65:dc:7b:c2:82:f8:2e:37:1d:50:39:ef:0d:c6:97:41:54:
ed:0a:65:ba:b3:a8:c3:b7:78:0d:14:59:ea:e7:f2:9e:29:c3:
d6:7b:b6:8c:7e:51:4a:f7:66:92:11:71:6c:64:ce:25:67:da:
b9:3b:b1:55:a6:50:47:d4:63:37:f9:99:6f:b2:ec:20:98:81:
a9:ed:35:56:96:6b:90:2d:ce:07:af:3c:06:4c:ed:72:7c:93:
98:7e:ed:a5:ee:6c:02:2b:57:27:74:19:98:47:0d:4e:fe:9a:
7d:ab:a7:81:f9:7e:dd:26:9e:77:b6:b7:5e:79:9e:b4:d3:ee:
7c:ea:7e:c2:46:82:ae:29:4e:ce:2e:5a:39:91:e2:2a:2d:cf:
95:86:7d:3f:d6:fe:59:6e:96:9f:39:34:3e:2a:e3:50:73:d9:
71:1d:43:68:41:9a:21:38:7f:3c:2c:08:07:6b:6f:f6:3f:c1:
bc:d7:49:25:6a:52:fe:45:6a:0e:fa:b3:59:86:86:84:9a:35:
17:13:c0:b7:2d:64:61:cc:37:b8:80:02:0e:8b:aa:d3:f4:13:
51:93:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:07 2025 by rpki-client