Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
File: eZNZZNoXA44j06SJCaE6JfsOWOs.mft (raw, json)
Hash identifier: jMwIpKmksft4QoKvFQ2QPslxMc/zeGN6JG0igGH+7Ts=
Subject key identifier: 16:FC:C3:45:D7:19:2A:8C:9D:1E:61:E3:F2:C3:FE:AF:3E:E9:28:77
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Certificate issuer: /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial: 019A006BDF0C8E57FEBD0FE51CD4891CEEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 07:01:00 +0000
Manifest this update: Mon 20 Oct 2025 07:01:00 +0000
Manifest next update: Tue 21 Oct 2025 07:01:00 +0000
Files and hashes: 1: b0GYLmjWKwhIOi3oAzYrvPVF7ak.roa (hash: j3QKWf4Na6ufdvRpfqdxKfUCQ/5sW3MTiaiymKVZLKk=)
2: eZNZZNoXA44j06SJCaE6JfsOWOs.crl (hash: Winxn//XSNt0ftEYkzM/zoGPsBBm7jyCYSoEYerjW4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:df:0c:8e:57:fe:bd:0f:e5:1c:d4:89:1c:ee:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
Validity
Not Before: Oct 20 07:01:00 2025 GMT
Not After : Oct 21 07:01:00 2025 GMT
Subject: CN=16fcc345d7192a8c9d1e61e3f2c3feaf3ee92877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:f0:fb:62:2a:8d:6a:95:7c:b9:9a:63:b5:
25:9d:c3:17:11:09:db:fc:78:11:f3:0b:b1:97:b0:
25:a5:c6:5e:7e:15:68:3a:77:7e:62:c3:1e:27:c2:
11:e9:e3:5c:89:0a:8a:33:41:53:92:31:96:b3:60:
c1:74:9d:f8:bd:b8:ae:73:8e:28:5e:ae:58:26:36:
63:e2:e9:94:12:0f:a2:2c:2e:e0:50:10:83:59:f3:
f3:bf:12:c3:66:66:bb:bf:3b:1d:74:ea:f0:97:eb:
72:7f:f5:43:c7:73:fb:f4:b9:6e:5e:52:6b:f0:b0:
3f:46:00:12:4e:0c:6b:02:9d:02:d4:e9:fb:f2:07:
e8:91:6c:7c:06:b5:26:c4:17:f9:92:bc:b1:3e:0f:
c0:48:8d:2e:9e:c0:90:39:7c:de:28:52:8f:f8:20:
bb:99:c4:cb:7b:a4:f2:c6:57:ef:7a:ef:f8:d8:fd:
d9:45:2c:ee:eb:79:2f:3b:6e:c9:a8:5b:9f:8b:fd:
44:e6:f4:00:ca:4d:4c:eb:df:12:5c:fe:f2:5d:bf:
43:22:27:38:42:e3:3e:2f:b1:17:55:a0:0a:82:91:
9f:01:45:32:97:d4:92:73:be:df:36:a3:f0:38:8f:
78:cf:38:56:46:cb:1b:d8:ee:6b:e0:04:41:46:2c:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FC:C3:45:D7:19:2A:8C:9D:1E:61:E3:F2:C3:FE:AF:3E:E9:28:77
X509v3 Authority Key Identifier:
keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:70:a8:a9:e4:23:5a:0e:85:9a:d2:fc:44:6e:88:dd:2a:0a:
0e:fd:a0:04:f2:4d:b0:49:f3:42:b4:24:40:11:1e:08:1e:3e:
90:ab:47:59:62:2d:69:30:a8:29:c5:cb:f4:af:43:e5:8b:3a:
88:7f:7a:78:80:a8:6a:35:26:d2:6f:9a:1e:02:0d:8b:a0:6d:
0f:7a:38:bd:f4:b0:44:2e:13:d3:dc:5c:c0:2e:46:7b:d0:ad:
9d:18:34:bc:86:00:0c:49:a5:29:91:1f:11:c2:c3:27:80:c3:
b9:18:c8:8a:6d:43:d7:03:5a:fb:fa:10:ed:11:51:60:3e:19:
b8:84:60:86:d9:84:30:9c:ce:31:44:8c:1d:dc:d3:f0:3e:32:
fb:b3:fd:61:3c:3a:8e:38:7e:e7:d8:da:e3:88:87:2d:37:e9:
cf:d9:32:e5:7b:75:8c:8a:10:6b:8c:d1:26:30:16:e0:fc:eb:
b1:28:31:53:ef:ad:5c:6d:25:82:45:49:ec:c7:45:5a:e0:af:
99:57:ee:e6:e2:b2:40:03:38:da:bf:c8:f9:fe:9b:ac:c4:fd:
33:fb:c3:67:f8:fd:18:0f:9f:7e:c8:5b:c4:c4:96:df:6e:90:
11:a3:98:14:6f:90:be:a7:6e:1c:af:2c:d5:57:6a:db:53:e8:
87:e5:11:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:08 2025 by rpki-client