Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: DJYmVbbA2lrpIzHwdNLQ7i0D4ZqJuQ4pDVFMdADcilg=
Subject key identifier: 2B:E8:F7:62:B0:AC:50:50:B5:5B:A9:46:5B:7F:88:04:D8:77:2B:DA
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 0199FC58649C88578A429AEC2FB880A1E656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 0589
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa (hash: hA3Tc0kWdN97ny1EHuTJ6/LUGMuF5PlrxnFA5mg1cTU=)
2: YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa (hash: TOThRgToctB0QP5NsIL53wVfCPspvY/nNlunm9/S0iE=)
3: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: RNhzDue3GKREqq/VxDZiuWwwXciMJLmkU34wPzphj6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:64:9c:88:57:8a:42:9a:ec:2f:b8:80:a1:e6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=2be8f762b0ac5050b55ba9465b7f8804d8772bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:95:46:53:09:45:0b:67:26:3e:e4:35:90:ca:
26:5c:b5:f3:53:e8:2b:19:b0:41:d7:45:78:bf:00:
57:12:a3:fd:c2:0f:58:79:59:f8:ff:db:bc:67:bf:
e3:50:a1:6b:de:b0:bc:ee:41:30:28:ff:b3:27:1f:
30:36:de:e5:7b:59:43:ea:49:85:fd:88:8c:c4:35:
be:1d:10:47:a6:52:16:a2:88:a8:a5:f1:6f:a7:20:
58:53:0b:c1:d1:ea:0d:06:cd:7d:a3:4f:6f:95:0d:
db:18:d2:27:61:da:38:e2:db:3d:dd:06:17:ab:1f:
a4:48:a2:d7:42:b0:78:75:79:52:8f:70:af:b8:99:
df:65:43:9f:a2:91:7e:13:8a:39:59:fc:5b:f8:4a:
fd:8b:af:d5:3b:99:44:17:b1:da:57:78:0b:c2:af:
36:4a:c3:f8:e0:e7:4b:82:7c:9a:54:ea:5c:0b:d9:
8c:07:ca:cd:91:0f:ba:68:26:2d:4a:05:b6:a5:36:
14:ef:ef:91:af:be:bb:df:5c:ef:86:82:5e:e8:ea:
63:c2:95:81:0a:b9:87:64:de:bd:5a:18:5d:dc:59:
27:09:12:09:1e:72:45:8b:d7:7f:49:93:a3:6f:3b:
4c:7d:5a:5e:ac:0b:28:88:5f:a7:9b:cd:e6:c9:1c:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E8:F7:62:B0:AC:50:50:B5:5B:A9:46:5B:7F:88:04:D8:77:2B:DA
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6c:fb:ae:bd:15:3f:87:11:0b:1c:70:81:b7:8e:0f:2e:1c:
08:a7:7b:5b:7f:e8:f3:96:c6:16:9a:0a:c2:d3:81:68:7a:37:
21:04:44:bd:de:b1:7a:ff:c5:4c:0a:8d:24:e2:f8:96:47:fc:
55:dd:10:5b:1e:e4:d3:1d:ae:31:f3:48:f8:3f:dd:25:9d:e4:
34:16:b9:4e:1d:06:bb:88:6c:d9:0b:97:60:75:db:60:2c:8f:
57:f8:07:f4:f2:31:ab:ab:96:68:e2:71:36:3c:ab:e8:d0:e1:
d6:96:d4:ed:70:37:b0:04:76:46:73:44:d5:4b:9c:9f:aa:06:
66:92:93:d1:93:4e:ee:56:3a:a1:9b:ca:48:a9:5f:36:8b:3c:
ea:4b:15:e5:72:ab:f9:76:ce:10:dd:8d:ce:b2:d6:42:4b:80:
7e:b9:e7:f0:41:0a:83:c3:58:d7:b8:55:9a:16:e8:bb:43:27:
41:59:47:8a:ed:d6:73:23:89:2e:6d:53:1c:73:dc:ce:c3:0f:
72:be:db:dc:0b:5e:98:ff:bf:2f:e8:5a:87:be:d9:ec:37:f5:
38:58:f5:e3:67:0b:57:47:6e:9a:ac:42:23:38:64:ea:d1:9d:
e0:33:f7:a0:c8:18:6c:7c:f1:56:70:f9:0c:b5:cc:99:4e:bf:
5c:89:f2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:20 2025 by rpki-client