Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
File: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json)
Hash identifier: XOtLejMN276YnBhnnrIhA/5i6quWsvzua+WPe/UeFws=
Subject key identifier: F1:A8:68:7B:21:71:D3:D0:7E:6D:C8:3B:D3:07:A6:39:8A:9D:EE:47
Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
Certificate issuer: /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Certificate serial: 019A4F2B7587DA6468121F35EE1A1F486E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
Manifest number: 0DCE
Signing time: Tue 04 Nov 2025 14:00:39 +0000
Manifest this update: Tue 04 Nov 2025 14:00:39 +0000
Manifest next update: Wed 05 Nov 2025 14:00:39 +0000
Files and hashes: 1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: 1b+3z7WASihXmq4qEE99CF6wcco1BCrghhucqghMtYE=)
2: C6VvOJhQ6LO3CnHxJ6KuDcvQH2c.roa (hash: SLDEqSk+tN+j+2o7yXrUPF3ZHKKAK2CSYSuFTkFJRpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:75:87:da:64:68:12:1f:35:ee:1a:1f:48:6e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Nov 5 14:00:39 2025 GMT
Subject: CN=f1a8687b2171d3d07e6dc83bd307a6398a9dee47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:42:d4:d8:09:f5:71:b4:a6:aa:40:0d:ec:
64:d6:da:5f:56:20:d2:84:45:e4:d2:1f:13:73:4d:
fa:06:7e:57:42:fd:4a:64:1a:85:47:85:9c:37:ed:
7a:8e:dc:0d:27:93:5f:3d:6d:24:f0:12:d1:2b:fa:
2f:78:d3:5e:88:9c:13:87:13:7a:8a:f9:28:df:8c:
1e:52:42:fe:d1:6c:28:46:42:4c:53:aa:40:33:1c:
a1:41:48:6b:29:e3:d5:82:fb:c5:ba:38:66:56:fb:
a3:c9:40:02:29:0a:9f:4e:01:a7:29:98:82:bb:fd:
0b:c2:ac:43:6d:3f:38:78:54:6f:3a:ac:a6:6b:aa:
90:ac:e2:3f:28:54:60:24:76:d4:7b:eb:1c:f9:6f:
8e:fa:c9:b1:d2:52:31:a2:f2:b9:d5:84:87:5e:75:
2f:2f:d1:68:92:6c:3a:75:93:50:74:91:da:71:14:
be:7c:fa:40:d3:43:18:3c:f8:84:35:9e:a7:7b:43:
10:54:3b:7a:91:dd:99:1c:c0:56:d0:56:c8:85:1a:
78:ad:e9:2d:db:1a:da:3b:93:d8:57:2f:c0:73:13:
d6:b3:c8:e0:78:8e:08:10:94:fe:18:1c:3d:0e:46:
e0:d9:0f:84:3d:d7:b5:81:e9:90:f0:0d:a6:a4:43:
e4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A8:68:7B:21:71:D3:D0:7E:6D:C8:3B:D3:07:A6:39:8A:9D:EE:47
X509v3 Authority Key Identifier:
keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:26:97:9c:c3:3e:1e:c7:8b:70:f9:dc:71:e8:0f:76:89:2e:
75:c0:85:6e:4c:f5:85:28:17:b4:ca:c9:a7:80:35:15:b9:bb:
d0:d7:f3:8d:99:70:49:ec:cd:5d:4a:63:11:f2:38:92:f7:de:
9e:f1:6e:aa:b4:7d:cc:82:65:0f:33:51:fa:9c:d9:c1:2e:70:
a6:a7:62:70:31:6a:ec:51:75:c7:df:d7:a4:0b:b2:45:bc:8f:
97:8b:d3:7e:d0:1f:2c:d6:f5:9f:f0:9c:0f:66:f4:50:8c:b6:
b6:24:2c:4f:f7:fc:a3:22:37:7d:48:50:15:be:49:6c:8c:52:
e3:ea:a3:c9:35:bb:e9:0f:ae:05:9c:93:a6:51:1c:99:ef:bc:
64:23:93:9b:1b:8f:a4:dc:9f:0e:0c:e5:c4:d4:56:e5:b8:9d:
62:b8:5e:f7:33:7e:5c:c3:80:c3:b0:49:9b:00:0d:d0:fd:71:
95:5b:00:31:aa:8f:ff:9e:3d:fc:06:45:46:cd:a3:cd:b6:78:
b7:f2:e8:18:78:e1:24:41:3a:54:5f:52:1e:37:16:18:7f:3d:
e4:6b:e6:9d:7f:a7:cd:50:be:1d:66:fc:ae:35:eb:43:6a:7e:
20:0f:e7:de:0f:c8:31:e0:c7:5c:64:30:1a:32:56:2d:fb:3e:
f5:a1:ba:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:23 2025 by rpki-client