Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File: Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier: 5cwdHBZ0VgtVj5iaC0oGATFA8d5MlfKBAwr+CwDb72E=
Subject key identifier: 22:EA:92:D8:01:83:FE:A2:47:A2:5D:93:F1:85:25:D8:DB:70:43:94
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer: /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial: 0199FBEB0913F6800E5E7ED591BE7F957E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number: 04F0
Signing time: Sun 19 Oct 2025 10:01:48 +0000
Manifest this update: Sun 19 Oct 2025 10:01:48 +0000
Manifest next update: Mon 20 Oct 2025 10:01:48 +0000
Files and hashes: 1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: U5G1Tsy4vNaFc1+WvXL98prEU9m/WLGyj7IN9OGHc3A=)
2: Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa (hash: Bv3OWsc+AnulFasemob+5BPRBgZPZ3l/tFY/Jb5RKa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:09:13:f6:80:0e:5e:7e:d5:91:be:7f:95:7e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Validity
Not Before: Oct 19 10:01:48 2025 GMT
Not After : Oct 20 10:01:48 2025 GMT
Subject: CN=22ea92d80183fea247a25d93f18525d8db704394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:d1:84:b3:31:27:00:44:c3:36:09:b0:0e:
42:8d:a4:32:c8:bc:f3:b9:58:1a:68:5f:9f:1f:a8:
9a:fc:59:65:f0:43:0d:e7:a9:8b:ec:c8:59:61:6d:
8f:c8:18:5c:7d:f2:09:fd:77:53:39:b9:41:a0:32:
b0:c7:6b:6f:16:ff:f1:8d:ad:85:bf:69:7f:46:a1:
f8:1b:5f:c2:3f:7f:1e:5b:06:d4:88:e6:0b:da:d9:
84:09:a1:e9:1b:29:98:a3:6a:ee:64:19:af:e8:f1:
34:66:f9:bf:5f:1c:ef:60:7d:84:b4:af:a1:f2:82:
20:fe:65:58:04:a5:91:14:aa:9d:bf:60:e2:da:e1:
4e:8e:ba:5f:c4:ba:46:7d:9e:7d:9b:b1:46:63:7c:
e6:92:74:27:81:a6:3c:11:e7:ec:dd:18:e2:9a:8a:
65:88:45:8d:91:7e:ac:de:b2:62:9b:eb:90:ed:7d:
73:81:56:1b:0f:ec:d0:2e:f6:c2:5d:16:4f:cb:c5:
f8:e6:ed:7a:d6:79:45:82:70:bc:00:c1:1f:65:f9:
35:c4:19:3c:99:de:e4:d6:82:2b:3a:1d:fb:b5:db:
16:6e:a0:ef:29:67:cc:8d:44:5d:f4:fa:3c:49:3d:
0e:1c:37:49:f4:3c:ec:8f:32:31:b3:92:da:c7:e9:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EA:92:D8:01:83:FE:A2:47:A2:5D:93:F1:85:25:D8:DB:70:43:94
X509v3 Authority Key Identifier:
keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:13:78:9e:5c:c0:28:00:fc:2b:20:90:a8:e7:67:6a:58:a0:
32:18:ee:46:72:9a:66:f9:a3:b0:49:75:a1:63:fd:28:3e:ea:
c1:39:82:99:f3:57:c3:ea:5d:b0:ff:67:d4:16:38:91:b0:fd:
81:2a:c7:6b:9b:4c:0b:ca:63:3f:af:f6:6d:c0:b3:e8:86:6f:
15:de:e6:cb:6b:75:f4:7b:cf:1f:33:df:72:9f:c4:c0:42:f8:
9e:87:98:a9:e3:30:b4:bc:1c:8d:c5:7b:66:d4:36:36:f2:3b:
a8:9f:55:7e:86:06:d8:8c:f2:c3:0c:b7:b3:ab:09:5a:d6:94:
5c:fe:0a:6e:62:ff:f9:66:dc:c2:6b:90:af:c6:b1:32:d4:e4:
d8:16:61:ea:29:83:22:2a:a1:5e:e6:c6:51:40:f3:f7:cd:f1:
c0:0e:e5:25:07:e2:49:5a:ad:8c:87:1f:e4:7f:ba:a6:f1:51:
49:21:96:0a:43:18:6e:22:b2:51:96:0a:67:11:32:f9:7c:18:
03:c9:1c:3a:78:61:e6:70:7c:8b:df:fb:ee:47:09:6d:a5:c9:
12:48:ab:77:79:9a:c6:81:ac:b2:bd:a2:49:c9:d2:91:93:92:
99:41:27:c5:76:41:55:a1:71:51:ca:55:05:04:ad:c3:d1:24:
ff:23:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:22 2025 by rpki-client