Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: WOOXKyYcH2sT9BFLKKFhN8KsON/sqWf3jEy5R+RaiQo=
Subject key identifier: 60:12:30:10:D8:EB:83:36:4E:F0:BB:FC:C2:0B:39:90:81:CE:AB:46
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 0199FE7DDDF145FA65D330DBB3BB273FE72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 0CBF
Signing time: Sun 19 Oct 2025 22:01:25 +0000
Manifest this update: Sun 19 Oct 2025 22:01:25 +0000
Manifest next update: Mon 20 Oct 2025 22:01:25 +0000
Files and hashes: 1: DBzbCVVWKBBC28Y3-45UdBhQsro.roa (hash: vieVkdTJtG2uejbz3Rj9wI1wTAldkSJkHwon8UEhcVM=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: GDKy/jakNyBGr+t9x/mM7abkNc8hnq2TR9yG4AC8yjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:dd:f1:45:fa:65:d3:30:db:b3:bb:27:3f:e7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Oct 19 22:01:25 2025 GMT
Not After : Oct 20 22:01:25 2025 GMT
Subject: CN=60123010d8eb83364ef0bbfcc20b399081ceab46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:12:8e:c3:8a:5a:39:9c:ce:c0:89:65:22:
3d:a2:87:64:93:65:36:37:46:8a:fc:0a:b2:dd:c1:
d8:8a:8b:f1:d6:44:14:66:d8:f2:eb:4a:85:f1:4b:
8c:94:74:b7:52:93:8d:b9:f8:3a:bd:67:e4:4f:27:
4b:cf:d9:0e:ec:fb:5b:6f:ff:3c:12:df:13:62:c6:
4a:c4:b2:c9:f8:bf:2b:48:29:dd:ab:ad:73:30:2d:
e3:89:a5:42:a9:7b:5e:88:f7:af:d2:95:a1:2c:9a:
74:64:fa:e7:61:06:d1:d5:0b:c3:f7:a1:b5:bf:ea:
4c:3c:ef:bc:78:a5:3d:51:20:d9:8c:e5:2d:58:77:
c3:2e:6b:8c:6b:ff:1d:3e:2b:55:0b:e5:80:8c:42:
53:2c:89:ab:92:aa:68:e6:87:5e:2e:ea:c5:cb:d7:
eb:5d:ba:01:bf:a5:2c:b1:ef:2c:0e:8e:8b:c9:06:
43:8a:54:81:a6:3b:3b:75:19:00:03:a2:2f:b4:a4:
75:72:ef:f1:86:ff:b4:45:3c:c8:b0:0b:62:37:67:
8f:3c:6b:f4:44:25:f9:7d:f3:be:cb:45:1b:6e:1b:
b0:57:3b:0b:ba:38:04:ae:0a:d1:ae:dc:64:ec:00:
6a:c9:aa:bf:c2:4a:09:da:ee:27:80:ae:eb:b8:99:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:12:30:10:D8:EB:83:36:4E:F0:BB:FC:C2:0B:39:90:81:CE:AB:46
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:89:51:02:eb:ff:d1:49:2a:df:d8:68:f3:83:6e:68:55:33:
9f:6f:8b:24:c3:d8:71:e2:06:e1:26:42:71:5c:05:72:c7:0d:
6d:41:55:f4:b0:32:45:da:c5:3c:5c:e9:c4:8d:29:83:78:94:
89:2c:ec:60:98:d2:54:47:d2:f7:2f:7c:3f:f7:50:14:0d:4a:
e5:c9:49:04:c2:4e:66:ad:7a:f3:fe:bf:00:01:4a:a0:fd:82:
74:33:6f:51:e7:c0:69:37:9a:4f:61:f2:42:99:27:fa:5b:d3:
cc:0f:c2:22:e1:05:45:e8:77:fa:14:5a:b2:1e:b3:26:da:9a:
2d:09:2f:2b:85:d2:6e:45:5e:d4:2e:cb:6b:0f:4d:04:5d:74:
34:60:44:4a:dd:7f:f7:7a:4e:50:65:8f:97:6c:33:ec:2b:4d:
e6:24:53:01:8d:32:b6:04:6e:45:5c:6a:20:a7:c2:25:5c:4e:
51:37:cc:40:69:7d:0b:fc:98:79:ac:ee:8b:c9:19:78:38:c5:
a1:0d:5e:08:b2:c0:ed:9d:ee:f1:d1:c8:18:e5:6e:c4:8e:c2:
4e:83:2e:f4:66:e2:f5:df:70:52:4f:5d:39:ca:f5:d2:99:8b:
98:46:e9:e3:17:02:2e:d7:99:96:76:fd:4e:2f:56:d5:40:81:
f6:50:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:50 2025 by rpki-client