Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
File: eOe6jAiFO-VUxZTe0VammD66EFU.mft (raw, json)
Hash identifier: FOWEhTwG/B4S86T9COTBbvBV0aPpDoaWTJDc1ddp0rI=
Subject key identifier: F0:37:29:60:93:9A:B0:9E:1E:7A:CF:97:51:F6:0F:A4:78:D7:B4:16
Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
Certificate issuer: /CN=78e7ba8c08853be554c594ded156a6983eba1055
Certificate serial: 019A53081E73E673A20FC6B40D559FFF69D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
Manifest number: 13AC
Signing time: Wed 05 Nov 2025 08:00:32 +0000
Manifest this update: Wed 05 Nov 2025 08:00:32 +0000
Manifest next update: Thu 06 Nov 2025 08:00:32 +0000
Files and hashes: 1: PBFDNtiQmYI8zGG7kl8kQ6QSo3w.roa (hash: Zn4dyGMYJbfaJjvxLWrM7du9HmyBjKhPRokK9xNb0s0=)
2: eOe6jAiFO-VUxZTe0VammD66EFU.crl (hash: Dx5g8MEHHwGaR6d+psqNa7IA8iokISrf0l+y8S5DYig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:1e:73:e6:73:a2:0f:c6:b4:0d:55:9f:ff:69:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055
Validity
Not Before: Nov 5 08:00:32 2025 GMT
Not After : Nov 6 08:00:32 2025 GMT
Subject: CN=f0372960939ab09e1e7acf9751f60fa478d7b416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:88:56:a4:7d:a2:a3:92:6f:75:14:f0:14:d8:
c3:23:15:e6:45:a8:5e:06:0c:c4:fb:67:e2:55:3d:
80:c8:20:94:2a:a3:16:58:5a:d4:7e:61:70:cd:aa:
15:9f:7d:4f:24:10:19:78:b3:ef:ef:a6:c9:e1:eb:
d8:82:21:14:43:4b:fe:24:a4:b4:0f:21:52:47:e9:
60:fe:91:5d:21:94:c1:77:d2:d6:16:2b:9d:46:ec:
5b:50:6a:b2:ed:6b:76:7d:71:8d:fa:0a:cb:9e:19:
8d:0b:1f:2b:bf:9c:30:ec:ca:b6:64:af:e3:82:91:
4f:e3:ad:04:f8:18:16:91:60:3d:61:10:fc:3a:9e:
53:ee:fc:8b:3f:d8:19:39:44:92:a6:eb:fa:b7:60:
d5:a7:d2:87:f2:07:94:fa:a2:45:e6:a4:fc:19:23:
50:dd:c9:a1:c3:44:22:60:9c:2b:06:74:47:17:c7:
cb:8d:2b:84:69:83:1c:e4:94:d2:04:45:a8:93:7e:
36:07:a2:9e:69:29:19:bf:c0:af:9c:78:b1:83:f9:
f1:32:55:9d:7c:42:6f:48:56:1f:0e:03:ea:19:5d:
d2:8e:85:8b:89:3d:9d:b1:ec:7a:8b:0a:46:fa:6d:
f3:26:5e:a5:b2:c3:cc:b1:e4:d7:78:00:ce:ca:70:
4a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:37:29:60:93:9A:B0:9E:1E:7A:CF:97:51:F6:0F:A4:78:D7:B4:16
X509v3 Authority Key Identifier:
keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:74:01:66:66:d8:48:a2:ab:b0:07:ca:70:87:f1:fc:3e:d9:
7d:20:d1:76:17:64:4c:9d:d2:a0:f5:7f:62:1a:a6:5c:b1:c7:
c4:3e:fd:29:89:a5:e3:d8:8a:f1:39:5a:cb:7d:0c:6c:4f:1f:
b1:47:cf:a8:89:3d:82:60:78:a2:79:9e:b3:a3:56:4c:eb:f5:
72:17:35:60:bf:47:17:5c:76:9e:7b:0f:cf:3b:95:5b:f3:c2:
27:22:c2:16:8c:e6:3a:9b:a3:95:f5:a9:74:00:c9:e9:c2:28:
7e:44:d5:5d:ba:ce:bd:e2:8c:49:27:3f:8a:c5:a4:04:32:d3:
97:4e:ef:97:04:c8:06:ed:68:93:67:cd:6a:be:83:5e:d8:82:
3c:e5:3d:d5:dd:58:80:bc:a0:db:1d:60:f1:8a:c3:7a:b3:2e:
6f:2f:34:29:d0:06:64:c7:07:1b:79:94:1c:df:4c:57:08:15:
12:f3:a8:ad:9a:3f:60:06:7b:a1:e5:e8:ae:a1:42:52:b0:06:
7b:29:0c:f3:35:62:f0:68:96:f4:6a:23:da:2c:76:a6:b1:a8:
4b:1b:70:f8:01:6b:26:6f:c2:c4:9b:be:ab:c4:bd:f6:d5:58:
28:a4:8f:5a:29:43:7c:53:3f:47:40:bd:19:00:94:f8:94:dd:
c3:46:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:05:49 2025 by rpki-client