Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: eSD2C7+E0y4wVsGdYF7TlR77HZs5j77nSsu7dMxB3Cc=
Subject key identifier: 4B:F1:F0:2A:2D:BA:AA:90:6C:E1:78:B8:FC:E6:DC:8B:CF:03:F8:66
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 0199FD6B4D9DE313954FD1C67AA96A6C93AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 1400
Signing time: Sun 19 Oct 2025 17:01:31 +0000
Manifest this update: Sun 19 Oct 2025 17:01:31 +0000
Manifest next update: Mon 20 Oct 2025 17:01:31 +0000
Files and hashes: 1: HHXGSuGQRW_zAz7Tg7UBxMkUHpE.roa (hash: EXdQKgQbUheeBJFdVxwDKTAaBfIc+np/FEnci5xb95s=)
2: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: vzyk7fPwbGSEvyD7ZEJFypW0Dj8nmA6A1TTummUuyAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:4d:9d:e3:13:95:4f:d1:c6:7a:a9:6a:6c:93:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Oct 19 17:01:31 2025 GMT
Not After : Oct 20 17:01:31 2025 GMT
Subject: CN=4bf1f02a2dbaaa906ce178b8fce6dc8bcf03f866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:bc:b3:b9:ba:af:ac:21:a7:c2:5f:eb:e0:
8a:37:30:e0:c7:ca:64:82:0f:b3:d2:da:f7:19:71:
b3:d3:8e:f7:ac:af:7b:74:e3:26:28:26:2a:f5:5c:
db:be:0f:84:72:56:55:3b:01:88:a0:51:8d:56:ac:
f5:dc:63:49:88:88:57:43:2d:ba:78:02:b6:2e:ad:
57:70:c3:08:e2:02:8e:b1:9c:87:c4:61:e5:79:50:
3c:0c:90:b2:85:d8:63:d8:1e:33:2b:eb:8b:f1:d2:
65:74:30:ca:0b:33:ce:28:f5:e3:d1:b5:25:ff:68:
af:f5:53:46:30:00:4e:96:6e:7f:7f:a3:8e:c2:4c:
45:3e:ee:bc:53:a6:5c:6d:f3:2d:52:4a:a5:0c:9e:
5b:05:1c:a2:53:3a:ab:39:b8:81:d6:d6:26:aa:9c:
cc:db:ad:39:19:92:ff:11:2b:ca:20:f5:09:77:34:
a4:8b:30:fc:cd:5f:05:24:59:f1:14:4b:eb:d0:1a:
66:45:b0:85:81:ea:1a:38:8f:95:f4:32:ae:2a:c8:
46:33:30:bd:52:4e:b0:27:32:c6:0c:0c:d1:04:2a:
0a:c4:d7:01:0c:4c:b3:dd:f3:64:b9:c0:aa:05:0a:
ea:b9:53:ea:7e:ac:dd:40:cb:59:fb:50:14:73:cd:
5f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F1:F0:2A:2D:BA:AA:90:6C:E1:78:B8:FC:E6:DC:8B:CF:03:F8:66
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:60:cb:0e:b2:24:a1:3e:4b:65:26:73:55:2a:3e:df:c2:97:
fd:51:0d:f4:8b:45:9d:82:75:e7:2b:34:0f:5d:bb:73:8f:9d:
e1:4f:6e:51:d8:1b:ce:64:81:00:8b:e3:bc:2d:81:a1:24:90:
b6:a2:05:4b:2d:c3:46:96:98:85:e6:98:72:22:a3:7c:b9:62:
73:96:6d:33:bf:dd:cd:d0:70:67:dd:bc:ea:76:ea:b2:6e:b1:
b5:23:57:b4:3e:2e:33:61:0b:d5:3b:c4:50:e0:9d:4b:6b:a1:
77:29:b6:5d:15:8a:11:03:f2:20:75:a5:8e:9c:23:5a:ab:4d:
cb:cc:74:ba:56:b0:64:8a:0d:b4:01:7d:bf:7c:07:05:d8:0f:
47:2b:28:a9:10:14:be:91:66:5c:64:ed:75:62:49:13:f8:a8:
95:5e:52:0f:14:d0:39:76:99:02:32:68:16:25:03:9c:bc:af:
d3:84:38:e9:6a:7e:91:5f:35:6c:1e:ea:08:41:7c:85:6f:eb:
4f:5e:f5:3d:05:c9:31:08:47:a9:23:00:79:67:dd:6e:0f:12:
48:e7:9c:d2:b0:85:92:2c:93:5e:69:73:79:18:98:04:ad:27:
5f:88:3a:1c:d4:f1:49:26:64:ed:ff:80:59:32:93:3a:92:a8:
2b:9a:df:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:58 2025 by rpki-client