Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
File: eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft (raw, json)
Hash identifier: 7SBF0dlfi9/WUSrhKRNEt66shDgwdYZ5Bc9IF60eD5Q=
Subject key identifier: D9:D1:48:7B:9E:67:50:CA:CE:37:CE:97:07:A3:8B:52:16:95:A9:FA
Authority key identifier: 78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
Certificate issuer: /CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Certificate serial: 0199FFFE5AD51492F9071667A98DC5825E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 05:01:23 +0000
Manifest this update: Mon 20 Oct 2025 05:01:23 +0000
Manifest next update: Tue 21 Oct 2025 05:01:23 +0000
Files and hashes: 1: eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl (hash: Hs5eGQuQaA/sTzH4jUi72Thq7xzEH63cXJFylR94s4s=)
2: hpIZj1aNVGCRsSVDc00BaExDrD4.roa (hash: 8bGQ2/PFRjS1aWZOpnSHBKRNTQbhLOIjn95p+sx+IoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:5a:d5:14:92:f9:07:16:67:a9:8d:c5:82:5e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Validity
Not Before: Oct 20 05:01:23 2025 GMT
Not After : Oct 21 05:01:23 2025 GMT
Subject: CN=d9d1487b9e6750cace37ce9707a38b521695a9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:70:34:52:c9:26:2b:95:9a:d9:e7:93:4d:
15:37:71:62:0e:16:18:c8:b0:b8:23:b3:cd:e7:d7:
c6:0b:5d:2c:45:47:74:ec:80:f1:67:27:9c:27:01:
86:72:86:3a:d1:77:9e:d1:69:30:91:42:8b:64:b9:
15:a9:40:a8:27:ee:d3:fd:c3:a4:b0:59:e3:7a:60:
26:e5:b5:a3:98:33:b2:a7:ef:70:0d:17:17:75:d7:
08:97:78:82:3b:c9:9b:fb:87:f3:8c:bc:6d:3c:f8:
55:61:a9:1c:14:0b:cc:9b:78:56:3b:4a:2a:38:02:
0c:fc:d8:a4:3a:43:93:c4:d3:8e:d2:d8:b1:dc:c9:
f9:72:ba:4c:45:d6:49:5b:de:13:9a:9f:c5:11:6b:
12:14:6f:2f:74:e6:96:6c:dc:3e:e2:a3:a0:d3:b8:
df:e7:63:1f:f0:ef:ce:39:f8:11:a1:d0:1b:04:91:
23:66:8d:27:fe:c3:7e:4d:e9:e2:8a:8b:0c:48:b3:
cc:b3:45:bf:dc:79:19:4c:a7:0c:5c:01:eb:af:f0:
ca:e3:67:df:6c:79:6e:bc:29:7e:08:ef:4b:a0:4e:
fa:32:ce:7f:bb:5e:90:d5:2c:5f:ed:32:4d:05:f3:
67:81:d7:e6:24:49:d9:b6:ae:7c:c2:a2:36:9b:13:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D1:48:7B:9E:67:50:CA:CE:37:CE:97:07:A3:8B:52:16:95:A9:FA
X509v3 Authority Key Identifier:
keyid:78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:20:f3:fc:8f:00:44:3e:d3:48:f3:9d:71:ce:c9:69:47:22:
b2:ce:a3:36:5f:79:5d:7b:c2:ad:1a:85:d0:54:26:35:ad:73:
88:c1:07:b8:b5:2c:a3:f6:02:4c:e2:ae:11:e6:5c:fe:2e:e5:
52:02:50:9a:93:bb:a3:ca:17:86:99:2b:9a:dc:d0:f1:cd:1d:
53:75:50:bb:75:ea:0e:4e:92:89:9b:dc:c6:8b:f7:23:93:c0:
40:d5:ff:24:09:e2:61:f4:2c:fd:a9:e9:bd:99:29:a7:6a:ae:
79:2f:4f:c1:b6:f8:4f:c9:a3:1a:13:24:1f:b9:a0:ea:95:77:
50:1f:bb:09:7f:b7:32:ef:59:b1:75:0b:56:75:60:51:b2:3f:
56:95:c4:a9:6e:b4:8c:6d:6f:9b:f7:47:c6:47:81:f4:70:32:
a5:a7:ef:c3:81:00:67:b1:f5:bb:ef:af:49:48:fb:36:30:79:
dc:23:3e:1f:50:ab:c9:78:e4:b9:96:34:d1:c0:f3:d3:d6:f5:
71:f4:d3:78:06:34:9d:52:89:65:6c:f8:6a:5c:db:43:79:00:
5e:a6:ac:35:de:b4:15:75:51:fc:32:4a:45:e8:5e:d7:5c:b7:
5e:07:ca:72:95:6c:a3:cd:33:89:d1:9d:4c:91:21:ff:39:df:
a3:bf:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:43 2025 by rpki-client