Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
File: e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft (raw, json)
Hash identifier: CKJujM2IToqAUFhWNUjf16T3vrvFuKZbrdLUXtQG6C8=
Subject key identifier: 68:13:9D:BA:01:F8:85:1A:5A:EB:2A:14:8F:08:8B:CD:51:2F:2A:AC
Authority key identifier: 7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
Certificate issuer: /CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
Certificate serial: 019A022319BD7D4171607928C9FC0B938604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
Manifest number: 1183
Signing time: Mon 20 Oct 2025 15:00:46 +0000
Manifest this update: Mon 20 Oct 2025 15:00:46 +0000
Manifest next update: Tue 21 Oct 2025 15:00:46 +0000
Files and hashes: 1: 1-fJmWKPsbMdUqgYTxdSqBQoJ3cY.roa (hash: FXd1EkC/KOtADwk2h9q6zCHuOQnU/RYSKRv48syIK80=)
2: 9KPfrwTfFRVyaYbxKiw1OGZQrSI.roa (hash: UY1UPsGvghj6PCWZfYzuCTpSPNsdGtDSEoWLKHoTyLY=)
3: e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl (hash: 55dbNkr+a1oVpOBnXGflnJMMd5Uc8AzY0cxux3GvGEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:23:19:bd:7d:41:71:60:79:28:c9:fc:0b:93:86:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
Validity
Not Before: Oct 20 15:00:46 2025 GMT
Not After : Oct 21 15:00:46 2025 GMT
Subject: CN=68139dba01f8851a5aeb2a148f088bcd512f2aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:20:ff:cf:5d:a2:0d:62:3b:01:bd:46:12:
dd:d2:24:3f:4c:48:ec:74:25:b8:42:d3:00:ff:97:
11:fd:81:04:9f:af:75:22:ab:ba:8a:de:eb:bc:2a:
89:27:17:44:4a:79:0a:d6:27:aa:ea:33:e7:e7:28:
46:ab:94:57:3f:fb:47:8c:fd:89:b9:da:0d:f6:01:
2d:4b:f6:3e:7b:e1:8c:26:95:57:17:03:de:87:7b:
e2:6d:90:0c:ee:3b:69:21:fb:8d:2a:40:fd:7f:dc:
60:9b:47:90:6a:36:5b:10:2a:1a:10:c9:f8:9a:a9:
35:59:fe:b2:c3:e8:da:01:a6:82:91:84:95:2e:93:
4d:fa:8f:ee:31:04:16:a5:b3:2d:31:36:8b:82:29:
db:66:69:5f:60:a4:78:d9:cc:9e:d7:d4:bd:d0:0f:
d3:35:c7:c2:fa:52:ae:5e:b3:b9:8a:f9:63:b1:ac:
7e:62:7c:f2:63:f3:38:20:ea:70:56:77:8c:43:61:
89:2d:26:95:ff:a2:4a:a2:aa:e3:7d:7e:0b:e4:fe:
1c:21:5b:bc:66:86:40:bf:ec:c4:b7:ab:da:34:df:
48:a9:ac:be:1f:41:0f:3a:6c:5c:28:a2:73:7b:b7:
be:56:e6:3f:f6:b3:76:f3:a4:5e:9a:ca:2b:70:d9:
4c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:13:9D:BA:01:F8:85:1A:5A:EB:2A:14:8F:08:8B:CD:51:2F:2A:AC
X509v3 Authority Key Identifier:
keyid:7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:82:ea:29:d5:0d:4d:8c:1c:e3:30:1c:c2:6b:42:8b:cb:c9:
bc:72:e9:4d:88:4c:9b:00:d9:41:c5:12:c4:f6:89:b1:00:5a:
0b:84:6a:6a:0a:d8:f9:1e:73:b5:86:1c:e1:87:d6:c9:0d:b9:
fa:df:42:f3:ab:78:19:a7:6f:db:d9:a9:95:9f:1e:8d:eb:b2:
90:20:39:4e:bb:a1:ea:5c:17:db:8c:9b:c9:88:ed:bd:54:ad:
79:a8:0c:52:9f:6a:4a:cb:8d:aa:fc:df:ce:da:03:68:d8:dd:
f7:2d:5a:a2:ea:fb:9d:b3:86:2e:56:1a:1a:55:4e:70:88:76:
12:3d:64:29:cf:4d:9e:df:f8:ba:71:ae:0a:65:09:6d:3c:72:
99:8f:6b:b3:69:17:f3:f2:f2:0b:0b:d6:e5:9b:5c:e8:9f:a7:
17:bd:07:67:dc:c6:4e:0e:24:6f:ad:8e:9f:57:2d:94:b4:5d:
43:4a:93:b3:e5:e0:6d:a6:84:47:55:5c:45:0d:0b:e4:84:0d:
74:81:8b:ee:33:d7:14:f5:ec:d0:c7:59:5e:55:91:9f:58:d8:
e2:5f:29:b9:3f:a4:ec:3e:7c:c3:f3:13:7a:30:7f:56:de:72:
e0:18:0f:24:eb:32:65:06:a8:04:d5:3e:57:81:4b:b4:58:9e:
a2:4b:97:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:39:32 2025 by rpki-client