Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: j352NsTwUbvsr0VopQfVwg5dZpYzGFucPX8HcTi+7As=
Subject key identifier: 9B:0E:CC:26:9D:32:67:D4:76:C6:2C:5D:2D:EE:01:42:09:21:D3:B7
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 0199FC8F336CF1890325D8BD3136CDB3D79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:07 +0000
Manifest this update: Sun 19 Oct 2025 13:01:07 +0000
Manifest next update: Mon 20 Oct 2025 13:01:07 +0000
Files and hashes: 1: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (hash: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: tRtCtt4VOlmS0GBje4X2+p0dOpcI3MAIs/AyOvQfwS8=)
3: vATjzltUGioFbSXszC6eHKiVm04.roa (hash: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:33:6c:f1:89:03:25:d8:bd:31:36:cd:b3:d7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Oct 19 13:01:07 2025 GMT
Not After : Oct 20 13:01:07 2025 GMT
Subject: CN=9b0ecc269d3267d476c62c5d2dee01420921d3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a9:0b:80:0a:2d:ad:a9:95:cf:73:64:2c:a8:
fc:35:9d:5c:1b:6c:fa:1a:40:60:54:49:b3:2a:83:
14:65:a8:8a:7c:bf:97:78:db:38:c6:9c:ae:81:b6:
6d:74:53:48:52:ac:5f:4d:a5:0a:0b:ab:60:98:80:
9a:48:d6:cb:2e:ed:02:c5:65:43:d0:8d:5d:b1:18:
51:f8:40:2e:0b:de:ef:d9:0e:7d:fd:b2:4d:39:08:
83:56:ea:8a:4b:26:f0:f7:28:79:85:6f:3b:b3:e1:
75:60:bd:e8:1e:67:e0:58:e5:3c:61:28:c7:2e:8f:
80:db:ce:1b:d8:5e:2b:a3:e9:62:f8:37:64:54:79:
35:ce:13:63:c4:39:0a:43:51:fe:89:66:93:40:8e:
17:45:a1:ce:a1:a0:ec:32:33:da:d5:50:10:da:bb:
aa:1a:7a:d3:fa:b2:46:c9:2b:31:a1:c2:1c:47:73:
49:09:19:fe:b8:de:e9:16:e3:de:5e:72:fa:5a:27:
9a:b6:ef:85:8d:51:37:c9:1a:01:42:1e:3d:f5:33:
6f:a5:f1:78:e1:c2:cc:c9:aa:54:fb:ad:8e:20:a2:
2c:16:e5:f8:d3:03:29:8e:84:f7:f4:74:3d:5e:a8:
b0:1f:db:bd:f2:47:55:0b:37:c0:74:fd:53:3e:25:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0E:CC:26:9D:32:67:D4:76:C6:2C:5D:2D:EE:01:42:09:21:D3:B7
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:50:59:0b:7d:e9:aa:3e:0b:e2:83:aa:42:97:a4:eb:f3:ea:
14:d2:ff:78:1a:cb:e8:97:a4:ab:80:1f:38:b8:3d:2b:7c:2f:
83:a8:73:7e:54:d9:43:bf:7c:7c:3d:34:94:d4:58:b6:ba:a0:
06:f0:ca:ff:4e:60:a5:4c:58:3d:47:c2:4f:91:90:d9:ad:8b:
d6:ee:1c:86:3f:91:63:19:07:6d:68:03:5a:26:92:cd:53:e1:
24:54:90:6a:a2:60:e9:bf:10:f3:36:68:46:2b:a2:35:49:51:
49:85:9c:e7:f2:2c:42:20:25:be:ee:6e:c2:0c:9f:55:22:bc:
41:5a:5f:c7:70:ba:2a:3a:1e:02:ef:26:ac:c3:4c:d9:f5:cd:
0d:97:09:1a:ba:7b:3d:20:a3:31:7a:bf:cd:55:21:7e:dd:b0:
44:0f:58:c9:1b:63:4a:70:6c:dc:e5:6d:a0:2a:c1:f0:2f:0a:
48:25:69:3c:aa:1a:a8:83:29:38:78:69:07:d1:29:ab:03:59:
32:87:07:29:57:83:aa:fb:d5:14:ba:fb:60:18:6e:4b:0f:d5:
5e:50:09:c0:e2:dd:2e:67:82:ba:f5:10:e2:09:15:bd:09:f7:
8e:28:f0:b2:bf:73:8a:00:7e:d9:22:f0:06:fc:5e:8e:e9:2e:
b0:64:cf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:54 2025 by rpki-client