Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
File: eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft (raw, json)
Hash identifier: skoVLBX+qOlcWGbvLgXNSwapG4PD1VzGyURr4EZDKHE=
Subject key identifier: 3E:61:38:D7:DC:1F:42:D7:F9:E7:FD:22:34:37:40:4A:81:74:99:78
Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
Certificate issuer: /CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Certificate serial: 0199FAD84F32D7A78295281BBAE5D4AB5ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
Manifest number: 032D
Signing time: Sun 19 Oct 2025 05:01:43 +0000
Manifest this update: Sun 19 Oct 2025 05:01:43 +0000
Manifest next update: Mon 20 Oct 2025 05:01:43 +0000
Files and hashes: 1: VFj5aKDFYxJGvJI6tYAdBkRUUKI.roa (hash: gWEnNe9T8U6TtdthLKRFfDmS/LnKXxsDWRpdZGNSQs4=)
2: eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl (hash: Q5LYIW3B1j/qpF7jgtHColhMUe4FZmkBIdnzXATrbsw=)
3: pCSKhYNkTR7SxUskaAwpFx35Lys.roa (hash: XnHKJyo6BAhxQvWoTo8yVgwue3aegX0njca6tfTmGRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:4f:32:d7:a7:82:95:28:1b:ba:e5:d4:ab:5e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Validity
Not Before: Oct 19 05:01:43 2025 GMT
Not After : Oct 20 05:01:43 2025 GMT
Subject: CN=3e6138d7dc1f42d7f9e7fd223437404a81749978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:e7:42:11:54:6d:93:21:ec:27:aa:12:ca:
17:db:96:98:2e:99:7c:dd:9c:96:3d:f3:4a:4d:7e:
fd:a5:43:f6:48:56:2c:db:00:2f:ec:25:1e:33:d1:
40:e3:a6:97:c1:ad:e8:14:98:fd:b9:76:06:cf:4e:
b7:4f:9c:ff:db:71:bd:05:2e:53:b5:8c:2b:95:19:
91:30:29:cb:22:d9:a1:86:0f:b0:4a:bc:af:88:be:
b9:3d:79:0f:b7:37:d9:29:da:54:d2:7e:ba:7b:23:
fa:b9:2d:83:14:2d:83:16:76:f9:c2:e8:3b:cc:f5:
b6:97:45:8d:d5:69:fa:ce:55:b3:41:a4:10:e1:49:
c0:27:31:77:30:84:3e:30:00:f6:46:7f:e1:0d:2c:
fb:8f:68:5b:4a:84:a6:94:58:04:c9:52:25:50:51:
2c:d0:ce:77:36:2a:1d:0d:74:f2:f9:10:ac:17:bb:
ba:ce:05:08:25:65:1b:28:29:f3:32:1a:65:25:2f:
60:35:df:c1:91:82:e3:72:fc:c2:5a:9d:19:ef:13:
fe:80:a6:bf:1d:8a:3f:ce:44:4e:87:22:5d:16:46:
17:44:d8:70:da:e5:84:d0:29:10:49:e3:04:50:0a:
1a:20:63:36:87:a1:db:c4:1e:a2:4f:6a:cb:16:16:
60:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:61:38:D7:DC:1F:42:D7:F9:E7:FD:22:34:37:40:4A:81:74:99:78
X509v3 Authority Key Identifier:
keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3d:da:88:38:4a:76:fa:51:4f:45:76:72:52:e9:5f:d9:c0:
4d:73:26:e8:71:19:e1:9c:82:31:be:a1:16:1c:27:10:6c:3a:
11:71:4e:1a:5b:7c:04:77:25:b4:61:6e:aa:9a:a6:7d:7f:ca:
cc:2e:51:9f:39:4d:8f:cc:1d:5d:8d:66:15:43:b1:f0:ca:63:
52:1a:86:e8:59:8e:64:0d:ea:84:49:b4:16:a5:1b:39:ca:84:
b0:82:5e:3f:f8:d1:c7:c3:4e:e6:05:6e:78:9a:33:b3:ff:c5:
64:46:48:52:a4:a7:aa:58:9c:36:3a:cd:c2:da:4e:c9:4f:73:
c1:cd:ed:59:d4:82:30:33:07:f2:6a:1e:f8:52:92:b6:94:a7:
7a:3c:86:de:c3:89:70:86:47:1c:19:88:66:cc:dd:e8:fe:2b:
48:67:8e:e1:7d:11:2c:95:fc:1b:16:12:ae:16:bd:fc:a5:f5:
d4:ee:fe:9c:16:aa:a7:74:c5:68:13:8c:80:67:f6:27:6b:96:
05:df:44:d5:40:e7:5f:ca:4e:ee:b6:1f:dc:43:c4:68:81:cd:
70:ee:a9:3e:9e:12:dc:0a:a0:dc:97:3d:bb:22:e3:e1:5e:10:
3c:2e:e5:e4:f9:c8:57:09:40:f9:b1:2c:07:a7:23:a5:3a:71:
ed:01:56:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:29 2025 by rpki-client