Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
File: eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft (raw, json)
Hash identifier: zJdNWB++b7ttVRtj0cBDaXZmasXDnWlF+m11ESW8J48=
Subject key identifier: 7F:A0:0B:15:B1:EF:02:AA:B5:44:6C:60:D0:16:98:7F:CE:09:D7:E2
Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
Certificate issuer: /CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Certificate serial: 019A4FD051625DAC1EB42FDDA53DC3D51CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
Manifest number: 0359
Signing time: Tue 04 Nov 2025 17:00:43 +0000
Manifest this update: Tue 04 Nov 2025 17:00:43 +0000
Manifest next update: Wed 05 Nov 2025 17:00:43 +0000
Files and hashes: 1: VFj5aKDFYxJGvJI6tYAdBkRUUKI.roa (hash: gWEnNe9T8U6TtdthLKRFfDmS/LnKXxsDWRpdZGNSQs4=)
2: eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl (hash: rBEjJvtZ3i8757u8tZT81Vrvbg83SLu/iHWjE6oLIvo=)
3: pCSKhYNkTR7SxUskaAwpFx35Lys.roa (hash: XnHKJyo6BAhxQvWoTo8yVgwue3aegX0njca6tfTmGRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:51:62:5d:ac:1e:b4:2f:dd:a5:3d:c3:d5:1c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Validity
Not Before: Nov 4 17:00:43 2025 GMT
Not After : Nov 5 17:00:43 2025 GMT
Subject: CN=7fa00b15b1ef02aab5446c60d016987fce09d7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:39:b5:11:2d:65:3c:6d:3d:17:d8:2e:4f:4f:
f2:eb:e9:33:c7:41:c5:a6:4e:33:4b:38:14:2e:c8:
58:2a:f6:dc:e5:da:3c:f0:2e:3f:b6:35:fc:a8:76:
d7:dc:ca:2e:da:49:14:98:7c:3f:6b:af:b2:7c:07:
d7:c7:f2:67:a4:82:0e:9c:b1:51:b3:28:c3:c8:e9:
8e:a7:c4:f9:b9:3f:d9:5f:1f:aa:21:d5:78:37:59:
e3:31:d1:be:ac:d5:e1:77:e5:6e:90:e8:48:7d:0c:
56:e5:6d:93:d3:92:c5:4f:64:7b:a4:c7:cd:e4:0b:
df:08:97:f3:01:ad:df:ce:2b:89:99:3d:5b:01:bd:
eb:13:a8:9d:df:ec:5b:f3:15:2f:42:49:51:95:a7:
e9:57:0a:7f:37:15:29:81:3b:8b:c3:73:67:9a:bd:
7d:a7:ee:20:db:3e:b2:a2:d0:a9:8e:c2:04:04:b8:
bc:ac:95:fe:b0:4f:7f:ac:65:17:54:b5:23:8c:7b:
82:7c:8c:c9:cb:78:d5:7a:b4:e6:a1:b6:d7:2c:a5:
1f:41:69:e6:f3:d0:67:f1:5e:84:15:6c:15:a9:ad:
07:c3:af:78:84:9c:cd:0e:b3:90:04:c6:26:fb:19:
e3:13:82:be:09:2f:33:89:8a:b3:dc:96:37:d9:59:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A0:0B:15:B1:EF:02:AA:B5:44:6C:60:D0:16:98:7F:CE:09:D7:E2
X509v3 Authority Key Identifier:
keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:93:96:45:db:ef:42:ae:38:4c:d7:9f:a6:68:cf:fc:f0:e9:
89:6b:0f:1a:b6:75:82:e1:26:82:a4:9a:d6:f1:7b:53:8b:7b:
06:6a:bd:eb:d0:39:49:fe:ac:ca:e5:1f:6d:6f:f1:aa:5a:14:
99:25:06:21:c9:81:33:6c:04:70:49:70:2b:de:04:77:50:a6:
ca:03:3d:b5:58:22:48:c6:2e:55:e7:62:c2:72:7c:98:6d:49:
32:e2:d0:46:3c:c7:2e:11:aa:c7:f4:17:ea:ae:72:bf:93:b1:
c8:e3:81:7f:65:bf:61:c4:b7:df:c4:0c:7f:0d:07:0f:06:55:
b8:4b:f6:f9:92:af:97:24:c9:2c:05:bf:55:73:e5:91:cc:3d:
5a:54:1f:ef:fc:49:6c:62:ca:b8:3a:0f:bf:a3:da:54:e3:63:
12:1f:54:90:18:9c:ca:b7:f6:f4:b1:cf:e2:85:28:8a:d8:13:
d7:a3:0b:f0:ed:fe:6f:6f:f2:70:82:04:77:c8:52:5e:2f:0e:
3c:3f:38:04:93:05:1c:63:e4:50:6f:8b:66:4f:aa:bc:95:5a:
56:e2:92:02:ba:ba:cd:fa:77:f2:0a:b6:10:a6:b6:4c:bb:1b:
cd:72:fc:dc:74:49:8a:38:89:74:dd:ba:d6:45:be:23:e4:61:
13:fb:e0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:00:34 2025 by rpki-client