Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
File: eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft (raw, json)
Hash identifier: MiWQwMzxpw1yVXcEqE9Dy/Ap8lEB69WaWD+lFDKd+UI=
Subject key identifier: 84:A5:AB:ED:2A:4B:4D:3D:EB:1F:E6:D2:02:72:5D:81:31:5C:B3:1E
Authority key identifier: 78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9
Certificate issuer: /CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9
Certificate serial: 019A01B54C587F543B85DAFAB9978B13786A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
Manifest number: 0151
Signing time: Mon 20 Oct 2025 13:00:49 +0000
Manifest this update: Mon 20 Oct 2025 13:00:49 +0000
Manifest next update: Tue 21 Oct 2025 13:00:49 +0000
Files and hashes: 1: eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl (hash: pl1B/zp+1CwLUWKg1WDgF84xyXuOU6tbdO9TXW7SfY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:4c:58:7f:54:3b:85:da:fa:b9:97:8b:13:78:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9
Validity
Not Before: Oct 20 13:00:49 2025 GMT
Not After : Oct 21 13:00:49 2025 GMT
Subject: CN=84a5abed2a4b4d3deb1fe6d202725d81315cb31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:75:ec:b8:70:65:29:fa:a6:7e:46:c8:56:
5d:4a:cd:95:70:84:0b:be:2e:e3:ea:bf:1d:3d:fd:
4c:18:98:3c:43:6b:69:ef:f2:98:0f:80:39:ff:cb:
d3:1e:b5:9d:be:6f:9f:65:16:79:48:f3:3e:04:7f:
61:85:9b:88:33:a5:a1:a9:d2:30:8f:87:0b:cb:4b:
bd:bd:a8:0e:65:af:fd:10:11:5d:0d:b7:57:96:4d:
da:8a:48:09:6a:3b:97:bc:50:51:fa:c0:79:e1:ab:
07:c7:2f:a6:c0:56:6c:03:9c:f2:71:1c:10:1c:b5:
96:a5:86:ac:4d:69:98:7c:a8:85:10:22:6b:bb:58:
fa:d1:af:a7:88:25:56:2b:00:95:54:69:90:98:72:
25:ad:3b:b8:e2:90:a8:22:c9:e2:b7:9f:7b:87:5a:
50:e0:d9:ca:78:99:46:ff:25:58:d9:8e:62:6d:43:
4b:47:31:d3:83:84:a0:7d:26:cd:4c:08:56:3e:83:
ed:e0:86:70:a2:59:a4:33:34:5d:04:cf:d7:bf:59:
a5:ae:f4:b6:a8:c2:5e:f7:a7:23:31:62:be:7d:d9:
8b:a5:f0:93:42:3e:a2:47:a5:4c:51:81:65:bd:df:
64:08:f9:a5:3e:99:ac:79:07:c9:0a:a5:21:09:57:
4b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A5:AB:ED:2A:4B:4D:3D:EB:1F:E6:D2:02:72:5D:81:31:5C:B3:1E
X509v3 Authority Key Identifier:
keyid:78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:20:b7:22:41:6d:22:ca:0a:8c:aa:19:39:c7:95:38:ce:d1:
72:a4:f8:27:c0:fd:dc:4b:90:1d:2e:79:2b:2e:c3:2b:47:d4:
72:ce:dd:b8:3e:a3:16:c6:d1:a5:43:30:b2:36:37:77:0c:da:
11:9c:6c:cd:f6:2d:a9:7a:41:01:77:73:ff:33:ef:a8:6a:27:
21:95:8e:9a:6f:20:38:e4:50:27:6e:6a:d5:51:e4:8e:20:ef:
6a:b0:95:b5:7f:8e:38:32:9b:e5:53:7f:f8:8c:a6:48:d7:d6:
e6:bf:60:b2:4f:91:ca:3e:1f:f9:f7:b4:37:a1:96:f9:49:b3:
c0:58:01:c8:76:35:1c:e7:c4:0f:b5:77:c8:17:86:c2:86:24:
f4:ff:ea:47:ff:dd:1d:54:77:d1:51:43:f5:ad:72:6f:04:a8:
2a:33:94:e9:b8:66:5d:3f:ee:88:eb:b1:c6:d1:7c:11:fd:ae:
17:65:e9:41:a8:b3:95:87:8e:14:ac:9d:98:ec:75:9c:1a:67:
25:99:74:23:4d:5d:c7:d7:e9:0e:d9:ff:c2:cc:02:84:b5:0d:
22:53:13:68:49:52:23:b4:12:07:7c:15:4c:28:4a:36:5e:0c:
b3:49:4e:c8:07:d3:ea:94:de:bc:9b:9b:90:9d:b2:ac:73:93:
b5:10:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:24 2025 by rpki-client