Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
File: eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json)
Hash identifier: +KkYzNbB43LZuX6YDhg5WBBwfFrn4SVjvJnLZvW8mhk=
Subject key identifier: 37:AA:3A:F6:10:AD:F1:B5:74:54:F4:72:1B:C3:3E:DA:50:D8:28:A6
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Certificate issuer: /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial: 0199FBEC2DF6A98FC149398D531AF3BDBEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:03:03 +0000
Manifest this update: Sun 19 Oct 2025 10:03:03 +0000
Manifest next update: Mon 20 Oct 2025 10:03:03 +0000
Files and hashes: 1: 0xD3QLVX-qA3FCr0U1Jkwk4eicg.roa (hash: DgMhk8OacC8J3+2qO2tKPU1mCaj5HskLKduZIM0dEVI=)
2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: ikLx+UyFIxiBzc71buErzc273HDP9hFO6rcwI0tUm2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:2d:f6:a9:8f:c1:49:39:8d:53:1a:f3:bd:be:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Validity
Not Before: Oct 19 10:03:03 2025 GMT
Not After : Oct 20 10:03:03 2025 GMT
Subject: CN=37aa3af610adf1b57454f4721bc33eda50d828a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:65:be:da:fd:f9:62:86:cd:fc:c4:c4:53:de:
c2:32:20:c2:a8:09:0b:7c:0f:95:e1:1d:05:8b:af:
78:fd:9b:db:a0:5c:96:e0:93:67:d1:40:92:d1:99:
89:2d:6d:fd:47:9b:b9:17:f7:e3:d3:53:ae:04:e9:
b8:d5:ef:b9:9d:73:dc:34:61:59:70:a5:f2:ac:b6:
a2:26:f7:3a:48:88:f2:a9:4a:eb:4d:72:5e:cf:69:
de:0f:22:be:e4:ff:f0:18:d8:c2:60:eb:26:3e:61:
43:8f:7b:12:c7:f7:62:b2:9e:12:7a:33:c9:86:1d:
ee:74:dd:94:c8:75:ed:2b:b5:03:dd:d9:f3:46:07:
7d:f4:11:66:c7:32:58:43:d9:a5:a1:18:6d:e6:20:
03:10:27:22:5c:3a:08:8f:92:69:e2:e0:03:db:f8:
0b:fd:5c:02:6e:31:53:35:97:84:eb:33:18:23:bb:
d8:49:d8:6f:e1:80:de:fe:2e:a5:dd:10:1a:e6:e8:
4c:95:37:9c:78:ed:a8:f8:50:5b:87:e7:48:9b:ac:
22:b9:8c:d6:b4:af:72:be:9f:ef:36:85:f4:f8:53:
38:ad:7b:58:b5:4c:83:f4:9e:77:6e:65:20:81:b5:
d9:27:87:e0:ff:25:d2:11:c1:2c:af:30:b6:5e:de:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AA:3A:F6:10:AD:F1:B5:74:54:F4:72:1B:C3:3E:DA:50:D8:28:A6
X509v3 Authority Key Identifier:
keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:00:55:ea:c3:8c:46:a9:ad:1e:ab:f8:79:da:16:e8:19:92:
8d:c2:3e:83:1d:77:73:65:8e:95:da:d0:1f:bb:81:ec:38:6a:
38:69:91:7e:92:9b:64:1e:e8:86:e1:a0:2e:8b:cf:a7:3d:b0:
92:27:16:ec:dc:25:c7:1d:f9:fa:ab:71:b0:25:88:cb:5d:1c:
f3:48:ee:7d:aa:b6:a2:1e:fa:f6:33:18:66:51:5b:de:85:58:
01:29:15:5b:06:37:95:71:80:fd:46:9a:43:06:13:03:64:51:
a5:69:2e:42:d1:a6:98:34:cf:be:ad:1a:6e:82:4e:b5:06:a3:
03:c9:f4:40:ac:39:7e:d5:69:8e:57:aa:da:7d:ee:33:a4:01:
71:b0:c8:ce:35:34:a3:1a:75:ae:83:11:f0:24:ed:54:ad:bb:
82:c1:6e:86:8b:2b:7d:87:49:29:fd:9a:7b:4d:c3:b2:5e:87:
f5:91:93:5e:8c:ae:72:c5:2f:34:72:fd:d3:42:11:86:8c:6e:
b5:9a:21:c9:5e:c2:67:1c:66:61:9f:b6:f1:24:f0:fe:ed:f3:
bf:7f:b5:65:79:5a:fe:bf:10:98:7f:cd:25:50:53:48:58:ea:
79:87:e3:e4:e9:a2:6c:aa:74:f0:a9:18:61:cd:3c:c7:37:8f:
c6:24:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:02 2025 by rpki-client