Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
File: eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json)
Hash identifier: jAUkbh+iTlBVtbp2vMnMvP5owBhMvg4KIlXYU4ELUX0=
Subject key identifier: 8B:FC:63:E9:3F:D5:4D:0F:B1:FE:0E:B2:F0:FD:2D:AA:75:F3:2D:F6
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Certificate issuer: /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial: 019A4EF5A4378ACE34EA5F63A93844F5A6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: 0xD3QLVX-qA3FCr0U1Jkwk4eicg.roa (hash: DgMhk8OacC8J3+2qO2tKPU1mCaj5HskLKduZIM0dEVI=)
2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: cQYU/iGAFZiytgD9djhoWsd4m/L076rEjr1OngVh7P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a4:37:8a:ce:34:ea:5f:63:a9:38:44:f5:a6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=8bfc63e93fd54d0fb1fe0eb2f0fd2daa75f32df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:a3:fe:b5:5f:ce:77:c2:a2:89:b8:e8:31:
ea:9c:29:e4:e6:1a:83:3a:99:86:46:40:59:8b:1f:
dc:3c:98:0e:91:37:c2:71:70:ef:29:99:46:37:9f:
80:fe:f4:ed:35:28:c9:42:d7:85:41:5b:17:9b:e5:
b8:70:48:c3:d1:51:d7:a2:d7:49:dd:d9:78:ec:b5:
7d:d2:c7:bb:86:75:69:44:c4:9e:fb:12:45:d4:0e:
3a:60:99:d2:99:d5:d2:4b:39:e8:95:e8:34:bc:15:
0d:4f:c0:9d:cc:75:40:dd:df:db:4f:cf:96:2f:bd:
7d:8a:fb:7f:e5:c5:7e:df:2d:6e:a9:11:a3:6a:05:
fd:81:51:8f:fc:88:1a:96:c9:d8:71:0a:54:ee:c5:
ed:2d:85:6c:72:fb:25:78:54:e1:89:53:4f:d1:7c:
1c:09:52:5a:13:13:4e:a1:ce:8f:48:b3:18:a4:62:
86:46:4d:f7:cc:15:64:f1:fb:bc:4c:b4:1d:11:d8:
a9:ea:01:8f:99:1a:df:34:af:a1:0d:62:22:f5:6c:
6d:e3:bc:4c:c0:1c:52:e3:28:86:f1:4f:cc:66:3a:
67:7f:65:3f:04:5a:a9:f5:eb:cb:4e:d1:f0:0a:46:
43:af:63:97:8f:fb:dd:de:31:ed:4f:5c:73:73:79:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FC:63:E9:3F:D5:4D:0F:B1:FE:0E:B2:F0:FD:2D:AA:75:F3:2D:F6
X509v3 Authority Key Identifier:
keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f7:b0:f7:94:73:47:ba:f9:8f:4a:86:72:2c:2f:10:b5:16:
8c:bc:9a:ba:c4:b1:59:4d:76:e0:4c:10:7b:5b:26:12:73:ff:
c6:a5:3f:1e:b2:3e:04:7e:27:7c:54:af:8d:32:41:c2:c5:32:
f4:0c:4c:6e:1b:70:29:df:9b:ff:31:30:a5:f6:d5:ac:0a:80:
19:9b:a3:aa:ed:96:9f:73:3a:ad:cc:49:b8:7f:c1:d8:13:c4:
a5:ff:1a:ec:1d:16:4e:fc:7b:89:d1:b9:5e:5e:a1:ef:eb:20:
c6:c3:32:be:3d:9e:a0:d7:6e:49:e0:f8:73:60:ec:7e:61:e8:
24:81:7d:d7:08:7e:2b:ce:d6:67:6f:8e:a9:d6:0b:c7:07:bf:
7d:18:46:66:b4:5e:af:1f:0a:2f:01:d5:a2:a5:ca:a8:43:02:
95:c5:f6:e4:9b:7f:c0:a3:99:73:3e:f5:c9:05:f1:2e:c0:aa:
88:fd:1d:77:f9:97:da:c8:ba:7b:09:84:72:d2:4e:72:f7:ab:
64:7c:a1:05:5c:b9:4d:5f:41:bf:e5:03:e3:af:d6:cc:d5:34:
98:85:42:bb:ae:50:d7:6e:07:87:cd:de:a4:21:55:cc:bc:62:
69:1b:2d:0d:a5:3c:a5:1f:29:81:db:ca:e1:80:0d:84:6a:2c:
3c:9c:94:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:59 2025 by rpki-client