Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
File: pyEILICrr5X61-pg88XsDgXijtw.mft (raw, json)
Hash identifier: j7HYmd2Ngw+I0OQGEYP2BLa8+vHtpFAhC0x4Bc77d/s=
Subject key identifier: AC:63:A9:7C:58:F3:C9:16:81:36:1F:92:14:B1:76:A9:9F:6C:49:27
Authority key identifier: A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
Certificate issuer: /CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Certificate serial: 0199FC8F56E8DA7CF25E395BACB3E4CB44F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
Manifest number: 0DC9
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: 3tu6ClYuvbDBR6KTKvf_i26_sNM.roa (hash: mscne+X+jfLaHAfi9bV23pNVKutqYHuT+pdDSC+aYJQ=)
2: pyEILICrr5X61-pg88XsDgXijtw.crl (hash: z4Mk16MFnacXkmXvDDUI/QsUhv2zvYUYZHuqlIH7CC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:56:e8:da:7c:f2:5e:39:5b:ac:b3:e4:cb:44:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=ac63a97c58f3c91681361f9214b176a99f6c4927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:6a:df:e5:14:12:35:11:f6:d1:07:18:fe:
e1:04:a8:f8:be:04:79:0e:8e:1e:70:5d:04:f3:4a:
5c:02:b5:9a:68:86:a8:3e:d9:81:98:c1:67:76:e1:
4d:0c:ab:43:80:5d:b4:3a:01:d8:8d:fb:16:8c:3e:
f7:81:1b:af:9e:d4:ba:bc:49:67:62:0c:88:2f:83:
c2:d3:3b:fc:80:9a:e9:a2:db:c4:95:d2:b8:b2:e0:
e3:dd:90:03:51:17:36:49:12:24:e3:8c:4e:b8:6c:
bd:31:b3:b8:1d:0b:a0:3e:cb:45:d2:b1:c5:ae:ff:
7d:07:dc:dc:f4:00:11:8c:b6:52:2e:c7:f3:09:4d:
84:7a:6a:ef:f6:db:2f:1b:0e:13:0f:ff:6b:c7:40:
6e:b3:b2:4b:c3:08:9d:74:49:1f:ca:7e:27:00:88:
51:bd:a2:c6:c2:f8:d5:15:a6:54:62:8c:b6:65:69:
7b:58:cc:ec:e8:f3:16:99:29:0f:2f:cf:08:42:f1:
bc:7e:21:16:e4:6e:92:18:9e:b7:8b:e2:84:f1:21:
38:a6:f3:9a:d0:a5:a6:34:cc:fd:95:0f:4b:3b:85:
43:21:86:a1:ee:cf:57:ae:cb:01:c0:41:a9:34:63:
bb:cd:09:8a:bd:af:68:56:15:89:b3:0e:ce:bd:fa:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:63:A9:7C:58:F3:C9:16:81:36:1F:92:14:B1:76:A9:9F:6C:49:27
X509v3 Authority Key Identifier:
keyid:A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ca:93:99:a6:60:bd:1d:0b:bb:22:9d:50:c1:25:56:83:a9:
e4:80:2a:de:2b:de:32:82:e6:be:39:cd:12:0b:f1:75:99:71:
bb:70:8b:4d:95:fa:ca:bc:6b:52:53:ed:1e:d7:b8:18:0c:2f:
c0:be:33:60:a5:0c:bd:e1:db:4c:8f:c2:52:bb:54:1b:49:4c:
f9:13:6a:41:b0:ff:19:5e:77:79:ab:a0:85:ff:dc:f0:0f:47:
2e:de:ea:a3:a9:ec:af:e6:a5:5f:cd:cd:d4:1a:92:b2:21:70:
9e:04:c7:cb:ac:e2:34:98:6a:2f:4e:0e:7a:d7:7a:28:b6:cf:
75:89:07:68:81:da:8b:54:84:09:31:43:63:7b:58:80:91:dd:
3a:5e:46:c5:c5:74:88:c4:a9:5c:8f:34:8f:30:c0:1b:17:3a:
58:4f:99:80:2e:72:19:14:c1:f1:3c:b0:11:84:e8:ea:cf:2e:
19:89:75:14:ff:a7:15:c4:d3:fe:fd:55:63:30:a9:69:47:e0:
a2:ba:81:a5:26:98:62:45:7c:eb:db:98:1e:ab:61:6a:f7:0e:
a1:f7:bc:50:29:12:18:df:c3:77:53:df:de:8f:49:22:84:ea:
53:56:ec:bb:c1:25:b2:94:3e:72:bf:7e:05:31:e9:bc:9f:5f:
3d:93:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:40 2025 by rpki-client