Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
File: Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json)
Hash identifier: BQBQkSHHqhbgxKj8VSiJgIk88Oi5mp7i2TStYDVdYAc=
Subject key identifier: B9:AA:B5:00:8D:D0:5A:1E:10:DA:23:C6:4F:E2:2B:28:58:1D:7E:80
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Certificate issuer: /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial: 019A4DAB058641D2333EBBCAA6A5753C9423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:44 +0000
Manifest this update: Tue 04 Nov 2025 07:00:44 +0000
Manifest next update: Wed 05 Nov 2025 07:00:44 +0000
Files and hashes: 1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: wYp5Ptel4UtADfTWMBXNO6Ew/5ykha2hRY+SIaf7l+A=)
2: dFWtNsDJ-mUPtxThTA2MYEV4hMw.roa (hash: ixgpNKTZ9Dv34+AbK1Jrz2N3i33IFdJsOuKPNGIdi1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:05:86:41:d2:33:3e:bb:ca:a6:a5:75:3c:94:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
Validity
Not Before: Nov 4 07:00:44 2025 GMT
Not After : Nov 5 07:00:44 2025 GMT
Subject: CN=b9aab5008dd05a1e10da23c64fe22b28581d7e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:b9:8a:48:b0:72:12:d3:8b:31:fc:84:99:
27:d6:db:f2:42:2f:f2:24:67:ac:c3:fb:c7:86:5e:
de:e3:46:b1:bf:bd:d7:3f:20:97:97:8e:bd:40:72:
16:a9:ba:cd:d2:05:d4:70:8b:2e:cf:d0:4e:17:dd:
88:b2:f7:6c:94:02:dc:47:ce:44:a7:50:33:d5:79:
6e:b8:2e:ed:46:8b:25:e6:51:76:65:08:0b:c2:e4:
fc:00:6b:a0:e6:bc:31:f8:b0:fa:19:21:03:47:99:
4a:d6:ae:0c:94:48:61:26:59:81:61:a3:19:44:64:
85:20:8a:99:38:2a:0e:85:2f:15:7b:30:45:65:bf:
36:a4:7d:ac:a7:28:34:2a:29:7e:1b:ff:f3:62:34:
07:d1:67:42:6d:a1:59:94:1e:9a:07:bb:f6:c1:7b:
3d:bf:1c:6c:79:9c:53:fd:79:2c:7a:b3:e2:51:b8:
2c:a7:7a:5b:44:d2:bb:5e:c3:e8:a9:33:d5:19:7d:
59:fd:f6:d5:4d:53:50:a1:7f:1c:20:e1:9a:b2:c7:
a2:f0:c9:26:72:34:e4:e6:90:5d:e0:ae:93:e5:f5:
76:d6:f8:a6:bf:a3:82:56:17:0e:2e:d3:7a:66:11:
7b:a3:23:85:2c:f0:0c:f3:33:c4:c4:f8:55:3d:e4:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AA:B5:00:8D:D0:5A:1E:10:DA:23:C6:4F:E2:2B:28:58:1D:7E:80
X509v3 Authority Key Identifier:
keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a7:12:ec:61:a1:6a:39:5e:e9:41:a6:9b:b5:32:08:7a:2d:
6a:40:45:fe:f6:64:98:d8:ed:29:1d:a6:e2:c0:0c:50:a2:85:
1b:5e:82:62:2e:02:bf:1d:c6:a5:5b:1f:cf:a9:7e:a9:74:20:
12:7e:37:55:c7:30:9e:e0:19:e7:f0:5a:92:90:a9:88:ce:dc:
06:e5:66:db:03:af:28:2d:9a:fd:bd:ad:8a:5c:ce:ef:02:d4:
36:bc:4e:d5:0a:bd:4d:1a:55:e9:35:23:e4:51:f6:28:40:4d:
dc:50:d6:70:2c:e5:13:f5:09:37:05:d0:85:aa:1d:64:40:3c:
fd:51:f7:ba:6e:19:17:6e:7c:5b:0d:1a:02:db:f8:00:d7:7b:
d7:17:6e:7d:e3:75:25:5c:5b:3d:e2:df:d7:58:28:20:11:ed:
b9:3b:ea:4d:34:f1:c4:69:c3:84:d3:32:83:94:73:3f:fa:9d:
d4:57:0b:a3:3b:77:74:f5:1e:73:c4:1c:91:5f:65:2b:5c:ac:
d1:6a:bb:64:0c:61:bf:3e:e9:e2:08:af:65:5d:5a:f8:3c:ea:
9c:88:75:9d:eb:1d:da:7e:43:96:a4:79:c7:ea:2d:81:67:8e:
0f:d8:c6:fd:fa:d5:1f:b5:03:2b:f9:93:d6:49:af:8b:4a:8a:
6f:09:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:00 2025 by rpki-client