Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json)
Hash identifier: gXUAzW7Jpf5kkwK6iLZuBPZDh9/vAzgCr9/VMDpWm9g=
Subject key identifier: 04:80:4D:45:14:49:FD:CE:49:4B:A0:B5:10:8B:37:EA:58:C8:6C:0E
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 0199FBEAE466171137F5FC0818D79446581A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:39 +0000
Manifest this update: Sun 19 Oct 2025 10:01:39 +0000
Manifest next update: Mon 20 Oct 2025 10:01:39 +0000
Files and hashes: 1: 1qgt4GAyW_3c-IECItJTlUngLgw.roa (hash: JMxnB6RQt5YXqrAyQkabjodjhDTimqSiK2ILClsZiRA=)
2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: 4ZuKRoBh2KJEZ4qeeuYO5ktfVZwHYknnhrTlR5JJ8yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e4:66:17:11:37:f5:fc:08:18:d7:94:46:58:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Oct 19 10:01:39 2025 GMT
Not After : Oct 20 10:01:39 2025 GMT
Subject: CN=04804d451449fdce494ba0b5108b37ea58c86c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:56:89:dd:47:da:16:78:e9:c7:d4:70:36:
d7:d9:bd:39:99:b9:df:7e:0c:8d:b7:9d:5b:8b:bd:
10:1b:5f:6e:9e:ba:d0:c2:2b:5d:b7:2c:3f:28:cc:
11:94:03:be:00:51:59:f9:ee:4d:bb:eb:99:c1:ca:
41:10:ab:c1:46:ff:a0:bb:a6:65:2c:9e:79:49:0d:
62:b7:df:1f:29:0a:48:16:0b:86:c5:9f:c0:a2:a2:
f4:51:00:f0:11:1a:26:8e:1b:c4:18:9b:13:26:a7:
aa:62:c2:a7:f7:29:d6:aa:f1:09:32:ea:be:95:f3:
db:cb:5c:5c:a0:53:e1:dd:f9:99:a1:0c:a1:96:16:
43:36:72:fd:9e:2f:57:03:c0:a9:9e:c7:d6:58:1b:
68:1c:ab:e6:13:cd:33:d2:b5:7b:48:41:38:82:de:
2a:c0:54:af:55:04:7b:91:70:e9:5a:2b:04:75:b6:
a1:44:81:fc:a4:19:49:3f:e6:ce:25:3d:57:01:40:
53:72:eb:bb:3b:03:b3:b2:90:f6:b2:c1:19:a3:d3:
37:38:8c:10:0d:c1:23:47:74:36:df:2d:88:cf:bf:
35:ee:84:ae:56:18:f7:44:71:b6:3d:87:c3:f4:33:
93:8c:64:97:ea:be:05:05:bf:8d:70:f3:8d:2a:46:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:80:4D:45:14:49:FD:CE:49:4B:A0:B5:10:8B:37:EA:58:C8:6C:0E
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:87:c7:0f:e7:22:8c:1b:ac:5e:b2:01:67:76:bc:9b:f9:23:
99:04:29:a5:c8:38:92:46:ad:c0:26:a0:a9:93:23:21:1b:d5:
9b:dd:ad:e7:27:32:13:47:2e:75:0e:54:20:50:8a:ee:db:0d:
a2:fa:30:1b:53:ba:da:9c:9f:bc:5e:bd:69:63:4f:f1:3f:a0:
7a:60:5a:28:e8:b1:b0:2d:82:24:7f:62:d0:04:3c:df:b4:5f:
46:a5:41:e3:3b:b7:ce:a2:54:12:34:68:29:20:a7:67:a7:a3:
97:db:75:b1:97:69:af:ab:b2:07:ac:2b:a3:19:53:52:f6:85:
c1:5f:ea:2e:be:cf:5b:29:61:3b:b6:d6:ca:62:97:02:ab:27:
3a:68:06:01:f8:81:b2:15:1d:b8:0e:37:5d:d2:ac:c5:c5:a8:
ce:3c:94:eb:25:dd:b1:2d:64:0f:cd:07:48:e8:cf:15:c6:d4:
61:64:f0:66:69:99:bf:6f:2f:1f:62:c7:e3:5a:6b:60:68:fd:
08:c4:43:18:40:a4:54:37:84:dc:60:f9:8f:b0:95:ee:5c:44:
d3:1f:29:27:d0:84:72:3f:75:a2:6a:c7:0a:1c:5d:4b:57:30:
5d:7a:55:ea:ff:f5:de:ea:35:42:77:3e:a5:be:3a:0f:cb:a8:
a5:fe:09:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:55 2025 by rpki-client