Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: vfEeHwKxKsl7H7vkW8hWFgHnc1GOnK9wYz24yvdUSpE=
Subject key identifier: EA:5B:7B:BF:47:5A:FD:7C:33:D1:86:BF:4F:F1:E1:12:E5:76:02:56
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 0199FC2156FA87E6BD1298ABAAB0213DC5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 0D9B
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: eJvxqWQVuJlIAcOu0zuhq-FEIwc.roa (hash: T9Btt+1WHrBsFsD5c6tC5d0RHMAv0qfav0ae3k59Hwg=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: 27o5JtiStEs+MHLizTHONj3fcG5JUmNJicl364HpWxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:56:fa:87:e6:bd:12:98:ab:aa:b0:21:3d:c5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=ea5b7bbf475afd7c33d186bf4ff1e112e5760256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:02:c7:69:3f:db:e4:55:1d:c4:93:1d:34:
27:4e:41:2b:55:ed:43:d9:4c:38:ad:46:44:49:f1:
05:d4:0e:80:28:c6:0c:dd:74:07:1e:37:57:ba:75:
2b:1f:aa:de:15:6a:63:3c:65:f4:bb:98:d2:5c:77:
3e:d0:a3:7a:08:be:2f:4e:ce:d3:06:03:aa:bd:a0:
d0:33:f3:77:2d:8b:25:3a:42:26:b2:b9:70:e3:3b:
62:3d:b3:dd:67:69:0c:fa:ba:c8:8e:32:6a:64:e1:
f6:c6:f8:97:35:86:3b:dc:86:6c:9d:ae:e9:bb:88:
bb:1b:47:e0:e1:22:8f:15:11:0c:16:80:a8:31:ed:
50:46:11:9f:85:6a:4d:44:82:be:94:6e:41:21:e6:
ea:45:70:21:57:a7:08:b6:c8:c7:c9:ed:a7:13:52:
1c:94:ba:84:2d:c1:63:04:dd:c3:eb:cf:32:c1:6b:
7b:97:36:dd:6e:83:d0:6a:77:46:3d:62:8b:5e:0a:
a3:46:71:e2:56:d4:a1:ce:e3:97:bc:cd:f0:2c:22:
95:5b:d9:1b:17:dd:eb:79:ac:b0:a9:24:4f:48:69:
af:5f:d3:c0:58:d7:58:89:54:3c:d2:83:c3:7e:ed:
53:74:78:c3:74:fe:df:80:4d:ca:89:9c:a4:5e:af:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5B:7B:BF:47:5A:FD:7C:33:D1:86:BF:4F:F1:E1:12:E5:76:02:56
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ca:f7:ff:d1:5d:b4:fc:e2:6c:32:5d:25:f9:88:3f:3d:90:
54:6b:61:ff:ea:db:1b:41:7a:6f:08:b4:55:84:0a:0d:44:30:
02:14:a1:85:0f:cf:21:d8:50:da:2b:8b:1d:05:09:c1:1d:29:
01:8e:c5:5e:e4:29:de:c5:94:40:e4:3d:67:bc:ed:5f:d8:7e:
1e:e6:71:e0:ab:df:32:40:9c:5c:e8:59:8b:66:4e:53:d3:a1:
c1:2a:4e:89:93:6c:1e:14:f0:83:fa:e1:62:3c:49:a3:ba:1b:
86:ab:33:2e:6a:d0:54:70:b2:3f:f3:d7:e7:79:7b:84:23:00:
98:5e:16:03:3c:13:84:cd:30:f8:fa:fa:f2:fb:47:18:c4:f4:
79:3d:dd:26:ca:88:a5:68:88:8a:5b:6f:b3:67:d3:c3:7b:62:
a9:18:12:71:d3:59:8a:8e:34:8a:c9:17:71:af:4d:16:72:ab:
d7:de:34:21:9c:31:1c:3b:63:11:27:38:8c:46:4b:05:ed:c4:
44:fc:32:74:4b:ef:69:57:41:76:01:21:80:f0:b9:52:1f:b9:
b0:0a:6e:14:eb:ce:c4:05:f3:f6:4d:d4:5e:33:34:08:f9:e9:
37:26:88:b1:77:21:a9:71:2f:c0:a0:1c:3b:1c:19:22:08:d6:
b6:b9:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:14 2025 by rpki-client