Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
File: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft (raw, json)
Hash identifier: heG7dH/z2ycPstPb3G7UGVywZkhgD4r3i+pyR+ca7zc=
Subject key identifier: E0:87:2A:AA:06:2D:27:C2:16:46:3B:24:E9:05:9D:E1:66:BA:45:AC
Authority key identifier: 78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
Certificate issuer: /CN=78024d480b37705fa0091b5774174e80fdd8add8
Certificate serial: 0199FD345D9FC451950B98D1F8C995EF6882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
Manifest number: 0FCF
Signing time: Sun 19 Oct 2025 16:01:31 +0000
Manifest this update: Sun 19 Oct 2025 16:01:31 +0000
Manifest next update: Mon 20 Oct 2025 16:01:31 +0000
Files and hashes: 1: 7zyHfGLCt61eCife6uW0qcGV8aQ.roa (hash: Obf5nHalQ5b5PGXQ7xcaKDODktDmBaiUg7460b0pjaA=)
2: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl (hash: pUuTQZ0Kt+QV1lD/f2XwAlrQOE5m+zkNy5O4MBNu8xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5d:9f:c4:51:95:0b:98:d1:f8:c9:95:ef:68:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78024d480b37705fa0091b5774174e80fdd8add8
Validity
Not Before: Oct 19 16:01:31 2025 GMT
Not After : Oct 20 16:01:31 2025 GMT
Subject: CN=e0872aaa062d27c216463b24e9059de166ba45ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:8e:ed:89:69:98:e8:f2:08:bb:0e:be:3f:
93:dd:35:43:f2:56:0f:ce:4e:c4:85:b7:60:cc:3a:
33:fe:27:68:54:c9:08:76:bd:61:08:78:0c:5a:00:
a8:41:5f:2f:9b:b9:43:db:fd:99:d4:ef:32:58:65:
23:5e:1f:2a:0e:a3:c2:cb:3d:d8:a3:e1:7a:01:f7:
97:6b:d3:4f:4c:b2:de:be:9a:c0:ce:6d:55:2f:48:
15:75:7c:34:3d:ba:89:9f:e7:d2:9c:d5:90:39:4f:
2f:28:71:23:10:9e:7d:b7:fc:8a:7b:8b:80:3e:22:
2f:d9:79:b4:39:6b:39:87:b8:7e:85:9b:3b:fc:3c:
61:2a:a0:52:ba:8b:b9:86:be:c3:fc:d0:31:62:68:
59:be:8e:86:5e:2a:2a:83:57:ac:6c:42:7b:10:16:
c5:41:a5:32:b7:95:b3:b8:09:0e:64:d7:90:c2:69:
ca:47:bb:3f:05:5b:65:cf:f1:ed:7a:55:8d:c1:aa:
93:c5:91:49:58:42:c4:8b:e0:79:25:c2:74:27:48:
6e:dd:37:5a:ab:7e:62:2c:5f:19:70:83:6c:c7:fe:
71:3d:9e:5e:63:30:30:49:ce:3c:e4:aa:73:82:ea:
1a:cf:e5:62:a3:38:58:60:5d:89:6b:69:ce:5c:e2:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:87:2A:AA:06:2D:27:C2:16:46:3B:24:E9:05:9D:E1:66:BA:45:AC
X509v3 Authority Key Identifier:
keyid:78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a5:47:83:ff:3c:f5:04:b0:31:be:8f:09:63:eb:71:5b:30:
a0:35:89:3f:a9:2d:f6:25:6d:0f:48:60:20:04:3c:d7:c8:85:
fb:96:31:bc:ec:09:ec:70:12:28:98:9a:01:6d:be:7f:f0:10:
19:b0:10:85:0f:24:ae:3f:eb:a5:0e:3c:4f:7a:29:12:ea:b0:
da:2c:cd:8e:2f:f5:55:a4:ad:12:00:13:3d:04:46:95:88:7e:
65:8e:c8:29:b5:e2:3f:8d:21:29:47:d1:2f:81:88:62:e7:6a:
7d:d5:54:f8:36:82:99:49:12:2d:42:2e:b8:bb:c4:cc:27:51:
90:ac:e9:bf:e7:23:86:fc:52:89:77:ef:20:a6:95:03:44:ed:
98:6d:ba:c9:9f:08:fe:6d:b1:28:af:d1:53:6e:c1:42:e3:cb:
c1:70:5b:b6:50:0b:01:16:f6:4d:f5:7f:90:a0:19:77:fc:47:
0d:61:47:58:34:5f:66:30:13:2c:cd:fb:ec:c6:e2:1e:1d:f1:
ee:4a:83:f7:c7:f2:e6:36:bd:14:d9:95:fd:19:95:e3:ca:a4:
91:a2:37:62:c7:98:29:2e:0b:99:26:72:1c:d0:f2:68:54:c5:
5c:00:85:21:92:98:ba:a6:c8:c9:dd:67:08:2e:81:a6:5a:38:
a7:b2:d7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:36 2025 by rpki-client