Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
File: eqhsgVbwgG3MzcItzE1hdbj6mJM.mft (raw, json)
Hash identifier: oy5ov/dLFqIODtauMca61/y/qNDVY/dwKPi+TR9dKEw=
Subject key identifier: 4C:4E:B0:BA:4C:F5:81:4B:8C:4A:08:89:73:83:C0:E4:B3:88:D4:FD
Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
Certificate issuer: /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Certificate serial: 019A00A328166E3447E9CCBF5AA55B6E4333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
Manifest number: 136A
Signing time: Mon 20 Oct 2025 08:01:23 +0000
Manifest this update: Mon 20 Oct 2025 08:01:23 +0000
Manifest next update: Tue 21 Oct 2025 08:01:23 +0000
Files and hashes: 1: eqhsgVbwgG3MzcItzE1hdbj6mJM.crl (hash: PBiRj38QISk3PnYMd6ob5TqEVFarVdtklCrRJrStbGI=)
2: r8_0uelpgxeJEhOZBb5I-C3t9Dw.roa (hash: qSHcoGbD5w1VMiNKpysCXUtKw278KTgr4tRmUU21kpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:28:16:6e:34:47:e9:cc:bf:5a:a5:5b:6e:43:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Validity
Not Before: Oct 20 08:01:23 2025 GMT
Not After : Oct 21 08:01:23 2025 GMT
Subject: CN=4c4eb0ba4cf5814b8c4a08897383c0e4b388d4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a1:ad:ee:46:23:91:7d:e9:4c:94:e1:87:d4:
02:de:88:05:e4:77:66:70:03:65:8a:d7:fa:23:5a:
61:6f:8c:19:35:1a:af:6d:e4:a3:de:75:3f:b8:52:
57:aa:c4:e6:a2:0c:b2:e6:9d:c3:b9:c0:d7:3e:af:
e0:cc:11:4a:dd:6b:6b:0c:6d:71:78:02:31:c7:76:
cf:16:ce:2e:cd:bd:e2:b8:95:29:44:f5:83:8a:02:
03:95:d9:c8:42:aa:4c:de:3f:3f:37:9f:cd:91:fc:
03:8a:30:5f:5c:e4:ec:ac:e4:c5:79:86:7a:2f:1e:
05:67:36:87:6c:01:a0:9b:3d:87:ec:c4:b7:3b:a3:
38:3a:88:05:fd:f3:69:43:55:b8:bb:96:d2:0d:26:
63:24:44:02:4d:34:29:de:54:90:8d:3c:d0:72:43:
ad:78:7d:06:2c:d7:a1:1b:c2:de:82:d6:00:4f:60:
76:9f:36:0b:cb:e6:aa:5d:4a:7b:da:c0:f0:9d:59:
d0:1c:11:37:02:db:7e:4f:73:d9:b1:7f:9e:f3:e4:
a1:02:7a:e6:ed:29:e5:6d:c7:c4:20:0f:23:74:c8:
81:79:58:84:7c:bc:d4:17:25:dc:a0:60:50:91:23:
f6:d6:e0:dc:3c:2f:5c:74:92:c4:94:e1:99:ec:a2:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4E:B0:BA:4C:F5:81:4B:8C:4A:08:89:73:83:C0:E4:B3:88:D4:FD
X509v3 Authority Key Identifier:
keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:93:74:19:c9:4d:64:51:b3:96:ad:b2:76:0b:41:2e:9c:48:
52:f3:e1:bb:97:1a:b8:45:cd:78:c2:48:eb:82:8c:1b:f4:4e:
25:f1:13:6d:ee:df:a0:f8:05:2e:70:2e:39:a9:7b:1b:c3:39:
ba:f1:d3:28:0b:a9:85:99:c1:30:80:a1:83:20:6f:78:34:04:
ee:c3:ff:27:64:83:87:72:33:a6:60:28:e9:52:f2:4f:77:5b:
04:66:89:6b:05:7b:27:ab:99:98:b1:05:49:32:55:1d:88:41:
d2:e1:ae:32:14:97:c8:02:0d:34:15:fc:9c:19:28:1b:f2:59:
7b:5e:4b:fd:37:22:58:54:4b:d8:13:ed:64:eb:cc:b8:8d:f0:
7b:e5:f7:e9:c7:96:01:9a:2c:84:a0:e0:ed:b9:1e:2b:f1:82:
3d:50:db:b5:37:9a:84:cf:44:7d:1f:de:07:49:27:e8:9e:f2:
fe:a3:53:9c:bc:c3:6f:01:2b:8c:2b:d0:37:13:72:44:59:3b:
01:41:a9:33:85:f5:7c:f9:f6:fe:73:f8:94:70:85:f5:3c:6a:
fa:29:f3:a8:96:ac:71:c1:77:5d:d1:7f:a0:3a:90:7f:a0:f5:
f6:56:a8:74:c6:d7:85:84:9c:ed:a3:3d:c5:c3:c3:54:88:5a:
4d:d0:6d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:37 2025 by rpki-client