Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
File: eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft (raw, json)
Hash identifier: mkQTpI+d86+03+LI9ylqrCmvW8FH/4E5d+s95rYrYBU=
Subject key identifier: 5C:81:E0:9E:11:DB:7E:E3:C5:43:71:44:4E:B5:3B:F4:F4:D8:B3:18
Authority key identifier: 79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4
Certificate issuer: /CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4
Certificate serial: 0199FFC8639B977E9B4C5C3A1C39F503018D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
Manifest number: 10DF
Signing time: Mon 20 Oct 2025 04:02:26 +0000
Manifest this update: Mon 20 Oct 2025 04:02:26 +0000
Manifest next update: Tue 21 Oct 2025 04:02:26 +0000
Files and hashes: 1: eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl (hash: 7C9SdF2U+y3Gyf2z1e0K5lWBrj1CRsHek4WFgA6rZ3o=)
2: yQAP9rAxN3jSiptdtGasvuqbR7k.roa (hash: jwuLoZWMrvVKlN8mNHV1G2VK8hE/jVPJU+HGrpMeIIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:63:9b:97:7e:9b:4c:5c:3a:1c:39:f5:03:01:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4
Validity
Not Before: Oct 20 04:02:26 2025 GMT
Not After : Oct 21 04:02:26 2025 GMT
Subject: CN=5c81e09e11db7ee3c54371444eb53bf4f4d8b318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:ac:08:d3:0e:0a:38:17:8e:4e:70:7e:d2:
62:a2:fc:2e:f2:9f:70:ee:60:56:30:a2:7a:9d:62:
04:38:03:51:e5:4b:66:4a:94:78:ff:04:4f:77:53:
47:21:34:f8:26:7e:d0:24:31:06:b7:1c:29:f3:3a:
0a:7d:91:01:8d:72:2f:57:db:2c:6d:25:a6:00:0b:
b1:f0:b6:64:39:54:35:47:4b:52:5f:ee:32:db:5c:
2f:85:d4:c3:d2:7c:66:1d:a0:66:a4:9c:0a:77:27:
37:27:35:ae:e9:df:cf:f7:e0:3c:88:17:c8:ce:e0:
1a:05:59:5f:13:a4:70:d6:aa:12:a6:68:34:e8:3d:
00:80:8c:3d:ed:48:dc:25:5f:f5:82:8c:8e:65:48:
d1:e4:0f:c8:17:a7:96:2c:39:5e:86:02:f3:8f:42:
ab:e7:38:47:78:41:1b:5d:9b:49:be:5e:63:f7:43:
e6:ba:d8:a1:2c:12:8a:bd:ff:35:c1:20:70:b4:07:
f0:6b:4a:7a:5d:34:6d:24:b0:89:b0:92:2e:77:fb:
ee:5a:38:62:c3:6a:20:c8:57:5d:57:68:62:34:c5:
ea:d3:4b:60:a1:48:8f:91:27:de:ab:87:19:aa:0f:
b8:58:65:1e:25:e9:aa:e6:28:0f:96:a1:db:61:7d:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:81:E0:9E:11:DB:7E:E3:C5:43:71:44:4E:B5:3B:F4:F4:D8:B3:18
X509v3 Authority Key Identifier:
keyid:79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:24:fa:29:4a:9c:79:91:e9:06:17:df:2a:91:f9:1e:c9:5c:
d7:24:c2:87:e8:34:f5:f6:91:8c:5d:1d:e8:0c:53:61:31:47:
e4:e6:8c:62:61:aa:79:10:35:13:8f:bb:d3:38:ea:03:1b:c7:
f4:4b:32:a1:a5:b4:74:ac:fa:56:a4:64:1d:63:27:18:69:4f:
5a:91:cf:84:99:7a:73:c5:95:16:a1:6c:4f:ae:ce:3b:06:5d:
0d:b8:20:13:f4:a4:e7:3a:d2:60:cd:14:fa:3b:39:82:b8:22:
21:3d:e7:7c:33:55:f9:27:83:c2:55:ea:ff:d8:64:ef:5c:f2:
35:24:ca:39:05:c6:ac:3b:cb:2d:c7:b8:dc:c5:3c:f0:cb:d6:
2b:3b:21:ef:a3:89:62:ea:97:68:18:68:56:2c:c2:36:55:6e:
27:78:1a:40:f2:5f:da:0a:54:22:0d:e3:ea:d7:83:eb:31:8b:
3c:68:3a:31:0b:94:e5:08:49:57:5b:1b:6e:fd:1e:bc:86:0d:
42:a0:07:13:b7:21:7f:b4:e3:00:57:86:62:45:c3:eb:7f:a0:
7f:42:2a:38:f7:40:98:ed:01:3d:ab:2a:a3:8d:22:58:5a:a2:
d3:95:10:c7:f9:14:57:ce:e7:2c:32:22:46:f5:75:17:09:29:
cd:af:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:15 2025 by rpki-client