Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: YbDPROwZE/R+P6S/iCqjmPOjpPSFCr8lrLgUFAkB7UM=
Subject key identifier: A8:9A:F1:F9:98:B8:85:BF:A9:A4:EF:E5:61:0E:C3:33:23:05:71:E3
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 019A03DA0FB0E3C505BF9AB5A15A618EC05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 163D
Signing time: Mon 20 Oct 2025 23:00:13 +0000
Manifest this update: Mon 20 Oct 2025 23:00:13 +0000
Manifest next update: Tue 21 Oct 2025 23:00:13 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: WKxBuYzJ6kKVPJFWoNA4J/y2IDzpuUsZdQeBbGBbTyE=)
2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:0f:b0:e3:c5:05:bf:9a:b5:a1:5a:61:8e:c0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Oct 20 23:00:13 2025 GMT
Not After : Oct 21 23:00:13 2025 GMT
Subject: CN=a89af1f998b885bfa9a4efe5610ec333230571e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:b3:d7:04:41:f5:6f:8d:46:a7:ba:aa:17:
d5:3f:29:5d:a2:2c:89:e6:af:7f:46:df:c6:a9:64:
79:5e:2e:56:f2:10:6c:b9:b7:c0:93:8e:92:d4:b8:
f8:0a:0a:5a:ef:05:81:2e:52:86:ba:ae:0e:dd:35:
b3:bc:2c:64:ae:70:23:f8:dc:44:26:5b:65:f7:59:
dc:33:4e:20:a1:e1:60:aa:3b:89:91:ab:ee:0d:d3:
c3:7a:43:fb:92:c2:c4:6b:4f:6e:cc:f4:13:52:57:
cb:d7:ef:88:0d:17:4a:50:d3:9d:1e:41:f9:c6:8c:
92:fb:81:62:c9:e2:b1:0b:21:91:42:cb:45:46:4b:
a8:d0:f9:7e:aa:b7:32:a3:b8:e6:89:54:e8:17:9e:
ad:4a:17:ef:a1:6c:20:52:fd:42:eb:de:5a:bc:5f:
15:08:48:06:66:8b:d3:61:9b:1c:ad:d5:e6:de:54:
8a:1c:02:f4:d3:db:05:cc:12:89:7f:7b:a5:f7:dd:
a7:f3:15:bd:12:6e:8e:c3:70:00:cf:2b:ae:23:64:
0f:52:52:2e:95:ce:c5:37:8c:8f:6b:ab:1f:c0:8b:
38:6a:f3:d9:b0:24:cd:a4:7f:e2:47:81:ab:74:f9:
33:af:48:71:19:25:e1:eb:28:76:55:12:db:ec:4d:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9A:F1:F9:98:B8:85:BF:A9:A4:EF:E5:61:0E:C3:33:23:05:71:E3
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:49:78:1c:81:e0:5e:74:d2:45:0c:83:c8:87:a8:b9:52:fd:
6f:05:19:21:fa:e2:0e:15:b8:76:2a:fe:f8:a8:71:69:06:d5:
3d:28:d9:3e:3a:9e:f6:7e:2d:c6:15:b2:6e:63:8c:46:07:0c:
e6:34:ae:7a:40:63:87:f1:54:1f:ea:71:46:b2:9b:8e:b4:cc:
59:e9:12:58:e5:9c:78:02:4a:5f:08:cb:32:78:e0:4c:dd:0a:
03:22:63:8b:97:98:c0:8b:fd:2f:3b:95:84:f9:da:8d:45:85:
47:cc:70:e9:4a:02:c2:95:ca:5d:cf:18:b8:6e:a4:6b:e0:e9:
ba:1a:0c:b8:f9:47:f7:a8:97:8e:4b:32:e3:df:07:0e:52:25:
60:60:80:f1:81:f6:ec:d9:99:8a:4c:ec:ef:b1:75:76:7f:5b:
dd:ca:07:f2:28:6d:19:32:43:0b:0e:33:7c:52:e7:53:c7:07:
54:c0:d3:46:37:a2:8f:24:1b:09:9b:38:04:d5:5e:de:1e:ab:
e2:67:a9:c2:f3:a0:b2:b1:36:d4:dd:38:98:03:d3:36:53:24:
ea:d6:ea:65:f7:d4:e9:6b:a6:27:92:ec:65:55:3a:d7:70:d4:
29:da:17:c6:de:e0:38:01:9a:2e:1c:f5:07:0b:8b:a8:49:bb:
2b:11:93:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:32:22 2025 by rpki-client