Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File: eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier: urNpXtJ/VY+gu6KAwmMHUASm4XFN9lvJHAqTXO0f/CE=
Subject key identifier: FF:32:F7:CC:18:A1:FD:30:DA:EA:E5:64:DE:B1:A7:47:83:DC:A1:5E
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial: 0199FDD93BFA3FF0022267CDEC48885D42A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number: 0BD4
Signing time: Sun 19 Oct 2025 19:01:36 +0000
Manifest this update: Sun 19 Oct 2025 19:01:36 +0000
Manifest next update: Mon 20 Oct 2025 19:01:36 +0000
Files and hashes: 1: WCZTQxU946nlR7ch0PPIZ_wC2wE.roa (hash: gB/77HCksF53BORp9peHh3slxdDcnobCSMUhewaJyNA=)
2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: sPXQ5mcr2ha0SWlNBr/O/Y8cf2lKAzaLTY23wQ81AEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:3b:fa:3f:f0:02:22:67:cd:ec:48:88:5d:42:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Validity
Not Before: Oct 19 19:01:36 2025 GMT
Not After : Oct 20 19:01:36 2025 GMT
Subject: CN=ff32f7cc18a1fd30daeae564deb1a74783dca15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5d:bd:ec:2b:6d:52:54:53:7e:80:60:e3:68:
0b:80:12:5d:89:86:dd:0b:3e:4f:5c:75:41:12:38:
e9:9e:95:da:5a:20:f1:fb:df:56:d0:4e:a5:7c:5f:
87:59:ff:a8:15:15:2e:b2:ea:6f:40:18:82:1f:bc:
25:7e:0a:b4:99:4c:56:83:b2:6f:69:fc:56:61:34:
ff:f7:6d:1e:5f:0b:61:00:f6:53:de:87:46:43:62:
df:51:7b:c9:db:b3:f7:1b:6a:ba:eb:85:40:05:2b:
bc:97:1d:2c:f8:d5:90:b6:56:20:4a:c8:0f:84:d4:
64:39:f5:ca:b5:41:de:56:43:13:00:62:a9:24:c4:
ef:65:01:ff:fd:10:93:c0:97:fe:12:93:fb:b7:1d:
20:a5:14:f2:58:8f:49:34:85:65:f0:98:e2:5d:c1:
fa:b5:5d:5f:c2:7d:63:7d:96:ee:00:f4:43:4b:44:
dc:0e:8a:cf:c9:5d:e9:f9:6d:1f:cf:7e:d6:ef:6e:
28:1c:d9:85:f5:13:31:2c:98:99:2f:8a:24:52:1a:
fa:20:a1:7f:40:1c:d3:a3:97:03:bb:f2:e5:ed:07:
39:f5:a9:6f:2f:60:60:d4:0c:9b:71:fd:9b:55:23:
4d:c4:dc:6c:55:36:4f:7e:54:ec:47:d0:dc:76:9a:
e9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:32:F7:CC:18:A1:FD:30:DA:EA:E5:64:DE:B1:A7:47:83:DC:A1:5E
X509v3 Authority Key Identifier:
keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ee:a1:92:b7:80:ff:39:47:99:74:87:9a:27:90:ef:0e:9c:
37:19:82:87:40:02:7b:48:68:86:56:cf:e3:11:8d:10:c9:a7:
a1:68:26:b5:5e:9d:1b:df:9a:35:b6:ea:3d:37:6d:76:75:84:
d7:af:81:74:fc:b4:75:c7:0d:df:de:06:82:50:05:c9:86:80:
75:e5:b2:93:5d:3b:5f:c3:a5:2b:47:de:a8:fe:94:31:17:d0:
f5:62:29:1a:8f:b8:c4:bb:37:b4:cc:e8:ea:73:37:5b:34:1e:
01:03:89:dc:81:c1:ca:bb:2d:68:c7:44:68:12:7e:04:5f:2e:
5d:d9:8c:36:b8:62:5e:78:84:e6:40:84:36:b9:b2:df:0c:1f:
17:4a:c1:c3:bb:9e:fb:1e:3e:11:41:76:de:91:2c:41:73:08:
86:02:fa:90:8c:96:a7:fd:67:83:da:8e:24:2f:ae:8d:c2:57:
90:3b:dd:58:7c:d3:9f:35:35:75:e3:bd:50:6a:7f:cd:da:d7:
f1:32:ed:43:e1:b4:be:b6:ee:7c:85:72:aa:16:77:b2:4b:5c:
03:a3:48:d8:6e:cc:d2:f7:1a:5f:79:78:34:e1:cc:ab:6e:cc:
b6:44:36:f2:75:9e:2d:db:15:e8:83:29:c4:fb:8e:0b:d5:ed:
ae:96:08:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:14 2025 by rpki-client