Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
File: Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json)
Hash identifier: ijZ0U4eRSsbFJ1HZg3th/2/A2qmAUEI3ErnP/XrWc7A=
Subject key identifier: D6:BC:83:70:2E:CA:ED:E5:D4:4D:C1:A7:21:F8:13:DE:E8:DA:15:BC
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Certificate issuer: /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial: 019A006C5509101092FB025D6BAAE3B2C70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 07:01:30 +0000
Manifest this update: Mon 20 Oct 2025 07:01:30 +0000
Manifest next update: Tue 21 Oct 2025 07:01:30 +0000
Files and hashes: 1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: lX4/IbaBKbCcnyOg69B8p16v6fDpOLEpMMy0A79eCjc=)
2: dFWtNsDJ-mUPtxThTA2MYEV4hMw.roa (hash: ixgpNKTZ9Dv34+AbK1Jrz2N3i33IFdJsOuKPNGIdi1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:55:09:10:10:92:fb:02:5d:6b:aa:e3:b2:c7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
Validity
Not Before: Oct 20 07:01:30 2025 GMT
Not After : Oct 21 07:01:30 2025 GMT
Subject: CN=d6bc83702ecaede5d44dc1a721f813dee8da15bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:58:09:49:8b:95:41:22:34:c4:d5:f9:49:
6a:09:96:26:5d:98:2f:4c:0b:47:51:21:5b:d5:f0:
1e:de:de:95:1b:9f:4a:5c:17:e2:c7:8e:bf:17:c0:
78:09:87:77:d8:b4:9a:70:d6:ab:04:08:c9:e6:c3:
1c:31:c8:6d:aa:33:de:d6:32:1c:eb:b0:c5:8a:63:
d7:36:61:59:40:b5:3f:6f:b2:c6:ab:e7:43:59:32:
b2:d7:5a:e1:f0:c8:df:20:46:44:81:2c:b7:3f:ed:
21:fa:04:0e:dc:03:c8:f7:16:63:c5:81:e8:4f:3c:
4b:1b:4c:3d:ca:77:82:f0:63:71:8e:44:40:23:f0:
dd:ad:e1:d0:5b:66:ae:66:58:6b:2d:ba:af:2b:70:
44:4e:f4:9a:cb:30:86:47:55:b3:bd:13:cc:dc:40:
62:fc:6f:45:cd:1a:40:c4:24:11:70:93:05:13:5a:
b4:bd:3e:61:f8:27:9f:89:35:30:c4:28:d7:46:da:
a6:cd:8a:ab:fd:f7:13:3c:df:59:45:f8:27:51:90:
8f:d5:33:66:c4:a0:30:36:ec:2b:c0:96:e5:5a:9c:
3d:c9:96:da:37:9a:6d:57:79:d6:ae:76:95:b9:44:
c3:bf:90:02:a0:2e:fa:c6:4f:34:45:93:bf:90:0c:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:83:70:2E:CA:ED:E5:D4:4D:C1:A7:21:F8:13:DE:E8:DA:15:BC
X509v3 Authority Key Identifier:
keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:54:71:e7:86:c1:5f:c6:77:a0:04:c5:e6:0f:f9:26:1b:9d:
a9:c4:b7:97:04:bb:b1:c8:e0:ff:c3:de:7a:04:1e:91:15:c7:
80:24:e5:f7:a3:de:7f:e6:68:9b:78:68:d5:87:d6:10:5d:da:
3a:2d:93:1b:33:3a:b1:f6:96:eb:6a:0e:b9:46:04:6c:50:ab:
87:bb:ab:87:33:ad:0e:5a:09:54:91:fa:40:2c:7a:57:73:b0:
38:3c:5f:d2:45:a6:84:bc:c9:80:27:c8:ef:73:24:7d:c6:80:
4a:9a:ff:6b:b6:d5:36:36:5a:1f:53:20:21:bb:7b:41:f5:23:
a5:cf:c7:f9:c0:6f:3b:f6:e2:28:68:12:d5:e8:40:17:63:74:
fb:47:c8:2a:5d:c3:f7:1b:fd:19:d4:02:11:46:22:c1:be:dd:
7b:6a:36:45:b8:fe:ff:93:3f:41:00:b0:bd:56:3f:60:9a:f6:
3e:3f:35:84:79:e6:2d:68:7c:6a:16:98:03:4a:5e:9f:ed:48:
ec:2f:2a:f2:d3:c2:e3:30:c1:ab:eb:d5:0e:95:59:80:6a:3d:
ed:58:be:48:b9:9d:2f:94:46:d7:d1:1e:64:38:7c:41:e1:fc:
80:47:68:58:a6:eb:de:21:4e:00:22:00:37:d4:86:d7:4f:0d:
4a:9e:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:54 2025 by rpki-client