Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
File: eaOyw2It-eh5guqDUJeKbJh1p8g.mft (raw, json)
Hash identifier: ggqgR2jCD55LC5ZZ2cesSSlQ5iEc46psCmV+43Aoww4=
Subject key identifier: 7F:A5:A7:1E:10:A7:68:27:FD:3E:E9:85:5A:79:6E:BC:42:72:1F:9A
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 019A02C78749B50FCF40CE6369391E443896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
Manifest number: 16EC
Signing time: Mon 20 Oct 2025 18:00:21 +0000
Manifest this update: Mon 20 Oct 2025 18:00:21 +0000
Manifest next update: Tue 21 Oct 2025 18:00:21 +0000
Files and hashes: 1: 16vis8mKCMw0Lqb7iG4NH7TCbeU.roa (hash: 7jQbnk7QOCJ8ZAWzucJtV6/4pdB8lxfRJErUH5wxQnk=)
2: WmLDow5KPtPm7R4XsODNb3nK6Og.roa (hash: 4GYJeuCBXCBDgFT4ZnecJgi27g3BGxeNgDA7fyyOWHA=)
3: eaOyw2It-eh5guqDUJeKbJh1p8g.crl (hash: gu5RI+f3/nWLz9kjVebJfG/rYskMxClMn431daL5gOA=)
4: sKFV1IZJE6PHOD4OWD9PuwV-r0c.roa (hash: FEZExqLNwEb0ZHJP/qaT8YTmmptHTZovCZeuHCrrdBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:87:49:b5:0f:cf:40:ce:63:69:39:1e:44:38:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Oct 20 18:00:21 2025 GMT
Not After : Oct 21 18:00:21 2025 GMT
Subject: CN=7fa5a71e10a76827fd3ee9855a796ebc42721f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:a2:cb:dc:55:a8:83:1b:dd:f3:73:48:b3:
50:62:ef:84:40:5e:7f:a4:4e:be:12:ed:03:29:f4:
dd:47:6b:56:4d:dc:e8:be:84:d4:a0:78:ea:2b:b9:
1b:ec:6d:fc:34:be:75:af:79:60:84:9c:89:7e:54:
d3:2f:22:7d:77:16:09:ae:54:27:10:2d:c2:17:87:
b4:8f:75:15:b4:3c:ae:9e:3e:12:e4:a9:17:13:9b:
c8:27:5c:9f:bf:8d:13:d5:8e:c9:0c:61:c7:d6:97:
4a:a3:01:d0:12:73:f5:7b:8a:01:db:aa:48:22:5a:
ae:df:18:47:70:de:26:59:8c:0f:1f:b7:6f:4d:02:
d3:72:dc:1e:65:c5:b1:da:92:f9:dd:9e:16:72:df:
ea:74:ca:c3:7f:7f:92:b5:ea:14:66:cd:d9:68:a4:
00:02:59:f7:fc:ff:e1:fb:8a:26:b0:4f:d1:87:96:
3a:16:ab:8a:f2:41:fe:f1:84:b4:ec:67:88:cf:66:
33:72:c3:6b:30:98:29:3f:d4:82:70:52:15:f8:a2:
99:0c:df:c7:ae:0b:ac:9b:37:5d:ce:11:14:7d:d0:
2b:b5:50:49:b6:59:ed:ee:e2:0d:38:02:57:49:43:
02:1a:8b:7d:0e:17:ba:ae:ce:8b:8f:2e:99:f4:71:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A5:A7:1E:10:A7:68:27:FD:3E:E9:85:5A:79:6E:BC:42:72:1F:9A
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:79:a1:c1:42:22:8d:23:59:ed:6a:bb:c5:ce:f2:de:a3:2c:
15:f6:7b:d6:ea:e4:c5:81:19:ec:f3:6c:0a:26:b3:93:0c:06:
ca:f7:2a:ce:a8:2c:48:ec:38:02:73:97:16:11:af:31:19:1f:
80:84:7b:84:30:f1:4f:26:0f:25:a6:5c:e2:0d:f7:dd:51:87:
73:5d:96:6c:dc:98:fa:8d:99:9a:ad:a8:e2:9d:c1:92:35:d4:
a3:7e:d5:ba:fa:c1:89:78:c4:a0:62:11:e6:ce:b5:0c:bd:52:
9b:c6:79:b8:b5:0f:f6:8b:1c:45:ca:4c:e1:42:ff:ba:52:16:
e2:fc:a1:1e:58:a5:d3:0e:78:20:3a:48:dd:73:95:ad:05:45:
5b:fd:60:60:77:62:c9:ae:6f:b6:02:8a:5f:67:61:7c:8c:97:
68:41:79:7f:31:ff:81:1c:13:d9:11:59:57:64:af:98:95:2a:
a2:00:59:36:86:79:88:48:73:7e:89:93:44:ca:09:79:b6:27:
39:4f:71:4c:39:33:40:20:3d:f3:e6:3e:93:a6:03:7e:3f:fc:
b6:e7:7d:74:cf:e7:00:31:60:e4:e0:47:8d:0e:96:34:7b:41:
8f:1c:f8:ad:d3:f0:9c:16:c0:eb:4e:bc:10:78:5c:9b:b9:61:
2a:56:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:43:06 2025 by rpki-client