
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
File: kB-EOslEjLB3kZF7kDVAFf_iPbc.mft (raw, json)
Hash identifier: ZXwbjY3UqdOMWQB7vBXHybR1hzyQO8cClcSURXkFJq4=
Subject key identifier: 27:87:6F:AE:8B:B3:37:8C:7C:D8:3A:54:0E:09:01:FD:20:1C:2A:F5
Authority key identifier: 90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7
Certificate issuer: /CN=901f843ac9448cb07791917b90354015ffe23db7
Certificate serial: 0199FE103A4CBF1A3F72945150E89166A7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 20:01:40 +0000
Manifest this update: Sun 19 Oct 2025 20:01:40 +0000
Manifest next update: Mon 20 Oct 2025 20:01:40 +0000
Files and hashes: 1: kB-EOslEjLB3kZF7kDVAFf_iPbc.crl (hash: YNr3xsOGGYt3cbHTaHUewKsC290wXho/ETH3v+BB+58=)
2: qJaxShBy0DTWJnv89u4j-u1rRt0.roa (hash: v1eQwogxLyju8Nd0v7YmtPyhLDpVTvEoi8QUOeFY/iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:3a:4c:bf:1a:3f:72:94:51:50:e8:91:66:a7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f843ac9448cb07791917b90354015ffe23db7
Validity
Not Before: Oct 19 20:01:40 2025 GMT
Not After : Oct 20 20:01:40 2025 GMT
Subject: CN=27876fae8bb3378c7cd83a540e0901fd201c2af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:2d:46:23:89:89:31:3c:e6:58:fc:60:bc:
5e:f6:70:0f:6b:a1:0b:8b:ab:05:34:48:70:a5:52:
7c:aa:ad:f4:59:3f:72:12:bf:61:3a:b4:f1:a0:78:
6d:c2:9c:54:e4:34:ae:46:f6:68:6c:fb:c0:db:bf:
38:cb:e6:02:d0:14:e5:f4:ff:31:9c:5a:5d:f4:05:
d1:dd:40:c3:5a:73:9c:ba:b1:cf:9f:24:d9:7b:44:
d9:42:c7:37:71:d5:d7:ed:9e:4f:46:7f:a9:b4:b8:
1b:48:4f:70:09:ac:9d:b7:cf:ac:f0:70:d9:8e:94:
a4:f6:de:d6:8a:43:64:e6:b1:28:7f:13:7a:70:d1:
87:12:b8:d4:ce:d0:ac:55:f6:c9:fc:0a:00:fe:f9:
5a:22:d9:7b:7d:e6:76:9c:7f:4e:6a:e5:46:0e:3e:
9c:7f:a2:81:7a:75:57:c1:d7:32:e8:55:33:3e:c3:
47:f2:b5:db:36:c7:b9:89:2b:b7:32:c6:77:79:1d:
0a:ef:2f:d6:d3:e2:84:02:dd:6c:79:6f:fe:fc:58:
d7:f2:51:45:7f:82:41:27:dd:05:7d:39:9a:ff:b0:
d3:68:f7:c1:39:45:bb:c0:bb:78:b3:b1:38:67:b0:
32:88:5f:6a:f9:10:53:cd:5c:c7:ca:4a:be:4e:05:
b1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:87:6F:AE:8B:B3:37:8C:7C:D8:3A:54:0E:09:01:FD:20:1C:2A:F5
X509v3 Authority Key Identifier:
keyid:90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f0:90:d8:c5:7c:8a:55:74:e9:fa:a4:20:a5:59:3c:8f:5c:
96:59:62:5b:8b:b3:ae:93:04:27:87:9e:49:2a:f6:4c:ef:96:
73:e1:39:3e:f7:6f:9e:63:7e:c0:29:e0:89:79:8f:e9:15:ad:
65:1f:b7:19:45:a8:86:16:8e:a9:0d:5f:fb:a8:41:2f:c1:6c:
e5:a4:2d:a4:16:6a:06:8c:07:f1:2a:4a:1a:56:4e:c5:43:49:
7c:c2:28:17:d0:00:9a:45:e8:ae:58:df:f2:1e:84:8f:d0:62:
ab:88:67:d4:3d:59:b9:c0:3a:53:46:94:df:fd:23:73:d1:b0:
04:3c:ea:aa:3a:f8:99:a3:94:eb:63:07:51:c9:9c:3f:9d:56:
a7:21:13:89:d6:90:83:dd:be:63:9a:03:ea:d1:89:fe:87:82:
54:fa:da:7b:fd:db:65:12:ff:b6:20:34:99:6b:f4:98:28:9b:
de:c3:5d:26:70:c5:46:f4:7f:a1:ca:fc:a0:a4:91:71:bb:8a:
2e:f2:11:aa:05:b0:c0:51:87:cc:db:32:4e:65:0a:07:ba:ea:
e6:1b:27:f0:2e:c0:b9:6b:b9:a2:7a:eb:68:a4:c1:ef:11:d1:
89:79:47:cc:96:6c:34:33:9d:85:50:06:65:3c:2f:19:3e:70:
ef:0d:4d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:35 2025 by rpki-client