Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
File: eIeO3aauSgFH23C2YQXP0X8gZqM.mft (raw, json)
Hash identifier: x8DvtWeqcBbVV4MDg167+3DV7JD8PyJm7tylwBajNKo=
Subject key identifier: 40:DF:BE:61:C3:E0:7C:6B:0A:1C:A2:5D:90:89:87:2A:0F:5F:EC:A0
Authority key identifier: 78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
Certificate issuer: /CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Certificate serial: 0199FD33E661FDCAD22B963E8C8410787420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 16:01:00 +0000
Manifest this update: Sun 19 Oct 2025 16:01:00 +0000
Manifest next update: Mon 20 Oct 2025 16:01:00 +0000
Files and hashes: 1: eIeO3aauSgFH23C2YQXP0X8gZqM.crl (hash: cO7sTUJR+G43W2Qs+NY++2hU4DYguoXGO0rewJ/r22o=)
2: t0DJyinn4llKKpeCe0OBlE_2NVY.roa (hash: NAk4z+1h3HiDOuSQgX+6rT4C+GeWqbjHTxsOaoe1l/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e6:61:fd:ca:d2:2b:96:3e:8c:84:10:78:74:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Validity
Not Before: Oct 19 16:01:00 2025 GMT
Not After : Oct 20 16:01:00 2025 GMT
Subject: CN=40dfbe61c3e07c6b0a1ca25d9089872a0f5feca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ba:a6:9b:dd:58:69:99:22:a2:b7:e1:d7:8b:
d5:45:05:81:6a:56:e7:66:ca:69:1f:8d:e6:70:a7:
d6:74:bc:16:bb:e1:d8:95:0e:d3:c6:84:e3:28:8f:
53:8c:03:00:dc:b2:eb:69:e5:55:74:dd:9b:f7:aa:
3b:34:ce:e7:fd:33:bb:c0:ab:ed:4c:64:83:a6:14:
a1:b3:5a:95:0a:43:dd:66:a0:22:96:45:39:79:a4:
56:d6:1d:5e:25:a5:1f:f3:77:ae:0a:09:7c:75:ce:
0b:dc:17:16:9f:37:a9:15:8b:c5:79:fd:0e:91:81:
88:46:a8:ab:4e:3f:a8:40:f5:71:b7:fb:ee:b5:b6:
4c:b2:a4:78:4a:25:f4:e7:69:ba:af:e6:db:d8:40:
08:2f:db:65:fa:79:60:ec:44:f7:89:48:c8:a9:eb:
9c:41:32:af:84:1d:7c:2d:45:ed:5b:42:24:10:71:
25:30:d6:3b:9c:42:e6:f3:f8:0a:2c:4b:e8:72:fb:
a3:58:65:a3:48:3b:6a:ae:de:4f:68:6d:af:8b:21:
d9:2a:48:6d:28:b8:65:38:65:98:5c:90:30:7c:17:
53:85:15:45:4d:6e:d9:81:6a:46:45:0c:f4:2d:e1:
ce:35:6c:c9:5e:67:98:5d:70:0a:44:74:d2:06:0c:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DF:BE:61:C3:E0:7C:6B:0A:1C:A2:5D:90:89:87:2A:0F:5F:EC:A0
X509v3 Authority Key Identifier:
keyid:78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0a:49:21:b4:65:ce:cb:a8:f9:be:b2:e8:2d:d8:9f:4d:cb:
0e:9a:39:df:c1:be:12:ea:81:89:84:70:46:84:43:12:3c:6c:
a6:b1:fd:d9:52:0c:b1:94:01:15:ea:39:9d:c7:02:67:d1:09:
b4:c5:66:ac:d2:a1:89:40:05:c5:11:f1:a6:98:79:ec:4d:1e:
51:df:41:1e:69:04:b4:36:24:11:bf:9c:33:b2:a2:71:93:62:
97:e5:3f:34:72:6a:84:f6:fe:ee:19:d8:9a:25:04:9e:cb:3e:
85:f5:56:11:ee:36:f6:ee:f2:f2:31:a6:84:b5:1d:67:af:1c:
97:48:0c:c3:24:d5:50:b4:ac:46:4a:7c:3e:94:5a:2e:2a:7e:
95:16:2a:2c:51:95:18:e7:13:1f:7c:3d:fd:52:34:22:bb:00:
68:6c:c1:f8:b4:92:53:d7:fc:bb:01:1f:a1:05:f4:02:52:08:
46:c9:fe:1d:c3:92:95:35:2b:ce:11:44:50:e9:6e:5e:82:5a:
7c:b5:2e:54:e2:77:9d:0b:bc:3d:bd:20:91:a8:d1:b1:b5:c4:
a5:12:ea:14:d6:86:cf:fb:a6:88:9c:74:33:47:49:2e:52:11:
bc:3d:47:87:98:e6:c2:5a:61:1d:e4:24:60:38:db:02:12:a6:
fe:26:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:09:37 2025 by rpki-client