Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
File: eIKlTbKvSuLgSGRxuNUPj6X36GE.mft (raw, json)
Hash identifier: zM8+1bdxnFVMk+K9PKV9GuvP/DaW33HSmAZ3bt2b06Q=
Subject key identifier: A0:DB:FA:33:7B:40:3B:C7:3B:78:2D:6A:01:3F:A8:F7:0D:BB:C6:56
Authority key identifier: 78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
Certificate issuer: /CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Certificate serial: 019A5074F1611B2D2CF81A69BAD5B73BD023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
Manifest number: 27
Signing time: Tue 04 Nov 2025 20:00:32 +0000
Manifest this update: Tue 04 Nov 2025 20:00:32 +0000
Manifest next update: Wed 05 Nov 2025 20:00:32 +0000
Files and hashes: 1: aenbutlsHdIddYbTr8SaSbe80BI.roa (hash: AHbNxfBI1PuhNtZ/xkZPyFX+9IwZWsMH6bfEwT22XqQ=)
2: eIKlTbKvSuLgSGRxuNUPj6X36GE.crl (hash: K5NIV4F18J/bXquQT0wgAgEj4fl5ij7uqg2znGEhJDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:f1:61:1b:2d:2c:f8:1a:69:ba:d5:b7:3b:d0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Validity
Not Before: Nov 4 20:00:32 2025 GMT
Not After : Nov 5 20:00:32 2025 GMT
Subject: CN=a0dbfa337b403bc73b782d6a013fa8f70dbbc656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:fb:9a:3b:a6:6d:b4:45:ec:16:07:f9:91:
3d:1a:e6:b7:a5:20:5b:28:41:5e:8a:b8:f6:f0:6d:
b7:c2:e5:e9:73:f5:cd:83:02:57:c1:72:ff:22:70:
d7:ab:28:ca:e8:4d:3f:a6:e2:39:df:85:14:f8:47:
7c:9b:e2:25:18:f8:aa:b5:de:87:be:2c:51:28:4f:
69:e7:f4:21:ed:3b:fb:16:af:35:e4:51:85:f7:99:
6e:7c:a2:f6:5b:b3:45:f0:b4:23:3b:24:2d:ae:53:
b3:8a:c0:69:32:5b:eb:ba:9d:23:1d:d7:20:0f:a3:
df:18:80:9c:b6:6f:b0:7d:77:f8:6b:02:72:b9:d1:
92:14:b3:11:2a:b7:5f:3d:68:8f:96:7d:41:c8:91:
b3:02:d4:e3:f3:01:f5:31:84:18:32:85:23:e8:eb:
a8:d3:e1:8d:b5:7c:40:8e:1a:01:c9:14:87:43:24:
af:3f:93:fd:0e:27:91:da:c1:fa:ff:4b:6a:58:13:
70:8a:11:5c:0c:88:81:f5:d0:75:97:42:13:69:ef:
fa:62:5a:42:66:b4:9f:04:79:4a:ea:1a:20:dd:ea:
00:da:a4:86:c6:8a:dc:b5:96:81:ab:b3:14:1e:9b:
8e:84:7c:e6:a4:f1:d0:6c:73:57:ff:e3:71:ce:8d:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DB:FA:33:7B:40:3B:C7:3B:78:2D:6A:01:3F:A8:F7:0D:BB:C6:56
X509v3 Authority Key Identifier:
keyid:78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8f:9f:e7:68:73:c1:d1:b6:81:eb:1d:8e:62:a6:e5:4c:90:
49:17:bc:11:64:a5:ea:1d:8c:f8:5d:56:d2:5b:23:08:66:5f:
cb:e4:1e:e9:51:02:e3:9d:63:ef:51:57:01:f9:36:0c:e1:f0:
76:47:b0:48:b7:32:9d:d9:20:be:b6:93:f0:83:dd:ed:26:a1:
26:5a:45:d9:6f:d0:ef:27:38:d4:70:95:60:3a:0f:e2:43:66:
1f:86:28:70:5c:05:7f:75:c5:2c:e3:ef:1a:4a:43:41:ac:45:
56:79:c1:fd:29:0c:99:ce:97:7d:16:76:9e:e3:9c:31:de:2f:
95:8b:48:1b:79:8e:a5:ec:18:80:8b:b6:c7:6b:b4:a7:37:2e:
e5:02:17:18:c4:5c:97:df:94:4f:00:82:86:c9:c2:3b:01:ee:
91:42:52:63:cb:b8:63:f0:2e:cc:42:14:92:1a:e5:51:d7:e2:
f7:ee:79:67:56:a1:af:85:e4:b2:92:42:5d:8c:b1:e4:96:d8:
d6:08:ab:c4:d9:f9:2f:46:4a:bb:06:26:62:63:d4:eb:4c:4e:
ec:2b:95:11:ae:dd:62:90:9b:8c:0d:4c:61:ae:c3:b7:a7:e0:
b7:9a:e9:47:32:01:49:0e:86:02:85:44:f7:b5:10:2c:4e:ff:
16:76:d0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:36:46 2025 by rpki-client