Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
File: eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json)
Hash identifier: BfcJ7d3Iv+P8VnzIcQ3naIQUBiIO01wxxr4Wx/DT604=
Subject key identifier: 3A:A8:51:8D:EE:C3:35:A2:B6:D8:2F:14:6B:D4:39:E2:68:67:4D:D3
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Certificate issuer: /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial: 0199FC214A2386998274442E19859F17E86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:04 +0000
Manifest this update: Sun 19 Oct 2025 11:01:04 +0000
Manifest next update: Mon 20 Oct 2025 11:01:04 +0000
Files and hashes: 1: 0D2wLjVbDWwACcQ-Kz3sd6AfexU.roa (hash: 7Sb+sy2XY1zDYvtO32J9cA443b1TwPmknXgPIPE3iJ4=)
2: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: 0S/AOKdwBQolZscogAOxWXRA6k6qxMbbL2+K1WqplTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4a:23:86:99:82:74:44:2e:19:85:9f:17:e8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Validity
Not Before: Oct 19 11:01:04 2025 GMT
Not After : Oct 20 11:01:04 2025 GMT
Subject: CN=3aa8518deec335a2b6d82f146bd439e268674dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:55:af:9b:43:56:0d:d3:95:03:75:57:13:
8e:a3:4d:34:84:91:36:a5:aa:21:71:b8:f3:88:15:
e5:01:f3:79:4d:82:6b:6e:4e:4a:af:52:d6:de:05:
71:22:f8:ba:28:41:58:56:73:39:a4:6d:42:8a:a2:
a1:65:e7:25:79:7b:7c:38:db:d4:e2:08:45:35:e2:
97:ea:bc:93:05:28:92:1f:ca:66:df:0d:54:d2:ae:
08:49:00:f1:2d:85:37:70:86:cd:ee:cf:85:b3:f0:
7a:2a:14:04:58:73:6f:d2:f5:d9:ba:99:e1:8e:72:
4a:bf:ea:e9:df:f1:c5:ac:f0:4e:9a:82:57:c9:e8:
a8:6d:f0:f1:18:8c:79:87:fc:2d:5d:f0:34:6b:c3:
a6:d6:20:91:21:35:14:ec:d0:8f:6f:d2:23:47:fe:
5e:78:b0:48:5e:71:aa:56:74:e1:f9:df:30:6e:77:
6b:2d:6e:fb:11:81:6c:3b:56:48:90:ff:21:54:4f:
ca:2a:dc:5b:08:4e:c8:4f:d6:10:e4:2c:f1:b8:47:
e8:ff:08:27:f6:a9:4a:85:54:4a:15:bd:31:8b:fd:
0a:b9:7a:c7:70:fa:63:df:d2:bf:22:85:84:66:f5:
77:a1:33:28:4a:4f:08:e6:d1:32:7b:43:9b:c5:b4:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A8:51:8D:EE:C3:35:A2:B6:D8:2F:14:6B:D4:39:E2:68:67:4D:D3
X509v3 Authority Key Identifier:
keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ac:ed:7a:54:f3:fd:cd:17:50:f0:02:f0:ca:90:8a:bd:f3:
a9:ec:6b:9a:2b:ca:c8:17:b4:f3:04:a7:a9:71:1f:1f:0d:93:
28:23:4e:55:ab:5c:11:7f:95:e0:0f:13:a9:5a:e9:79:a9:d0:
95:fe:41:e5:89:5e:28:a2:9b:93:12:69:19:6a:d9:6c:4c:72:
b0:e6:67:f9:e3:67:79:2a:f5:57:d0:a3:16:b4:af:b1:e8:db:
26:8d:92:70:ae:5c:5c:3d:70:ec:e3:b4:f5:92:53:9d:4b:05:
1d:36:b7:42:d7:bf:1c:a5:c0:74:d5:0a:00:54:51:bc:02:39:
d2:25:4a:bf:24:b7:a9:ef:bf:05:c1:7b:a8:d0:06:6e:90:62:
95:5c:de:02:4d:9a:e7:6f:b1:a4:da:e0:78:d8:e0:e3:5d:17:
bf:f4:0d:36:32:85:e9:fd:9c:6b:2e:c6:b2:c2:4e:1c:5e:cd:
e0:61:5b:33:f6:2b:1d:75:11:c5:dc:06:a4:fc:6f:aa:8e:5d:
d8:df:c5:84:af:7f:f2:bd:ba:b3:46:28:ff:52:cb:5d:6f:63:
06:17:d3:9f:6d:74:93:9a:ec:53:a3:46:8c:c9:68:16:b4:bd:
29:14:4b:11:cf:34:f0:4a:9d:4c:94:b7:cd:09:bc:15:60:35:
a1:60:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:16 2025 by rpki-client