Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File: Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier: 6NKJ6FhJzJVXnzAPkLobkkb4r2B9fL4R8fV9Apu3kbE=
Subject key identifier: 00:6D:21:C8:8B:E9:A6:C9:00:A6:DC:AC:DB:49:34:2D:B2:BF:AF:27
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer: /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial: 019A4EF42F57F2ED89F07C6ADA519DB06458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number: 051B
Signing time: Tue 04 Nov 2025 13:00:16 +0000
Manifest this update: Tue 04 Nov 2025 13:00:16 +0000
Manifest next update: Wed 05 Nov 2025 13:00:16 +0000
Files and hashes: 1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: uha3ZqfSSP/V0zrrHtAURX0uVNlsGcn4TdxFA2GoZ9U=)
2: Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa (hash: Bv3OWsc+AnulFasemob+5BPRBgZPZ3l/tFY/Jb5RKa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2f:57:f2:ed:89:f0:7c:6a:da:51:9d:b0:64:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Validity
Not Before: Nov 4 13:00:16 2025 GMT
Not After : Nov 5 13:00:16 2025 GMT
Subject: CN=006d21c88be9a6c900a6dcacdb49342db2bfaf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:c0:7b:f4:95:ab:3e:1b:9a:b7:c3:ed:a4:
3b:29:5c:9b:48:81:bc:79:ed:42:18:33:b0:36:5f:
a1:7c:dc:0c:3f:22:10:c1:ad:46:6c:ff:f6:3c:49:
60:6f:ef:a0:3d:5b:b6:e7:43:01:58:46:1d:89:79:
1a:61:83:aa:34:3e:6a:06:9d:69:01:fd:43:3d:19:
b6:76:f6:29:c4:f0:9a:c8:7b:e2:d6:fb:27:1e:01:
06:2c:eb:6e:eb:d1:64:d3:63:49:c8:c0:4d:94:28:
94:a3:47:b0:3c:9c:29:bf:1a:be:cc:e1:53:20:6a:
01:8e:a6:7f:72:5e:05:9b:70:59:d3:50:f3:31:b0:
5e:c9:9d:31:6b:cf:bc:57:c2:8d:5d:2c:4c:a1:8c:
45:54:df:80:f7:d5:50:2e:5c:61:67:88:62:44:7f:
79:c4:f2:bc:ac:64:cb:ca:ba:a4:15:23:4c:56:ac:
0d:8c:d2:4e:8d:e7:be:a1:46:00:e9:b8:79:d4:4f:
04:3d:70:17:12:5d:49:89:5b:fc:9a:4d:5f:a8:72:
81:54:ea:da:fc:bc:b0:e6:11:b7:e4:32:42:a6:3c:
a8:35:b6:5e:cb:74:7a:20:a2:c8:db:ae:57:e3:c0:
09:f2:88:f4:5e:79:57:5b:fe:28:75:58:d4:d4:86:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:21:C8:8B:E9:A6:C9:00:A6:DC:AC:DB:49:34:2D:B2:BF:AF:27
X509v3 Authority Key Identifier:
keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2a:05:8b:c6:cf:7c:09:3d:79:82:04:d6:fb:ee:87:b6:dc:
cf:cd:ee:01:ac:cd:19:f1:f4:43:65:37:eb:55:c5:1a:eb:52:
b8:b1:2b:51:05:6d:83:b7:c5:92:e5:ba:e3:ed:11:2d:46:b3:
6c:ae:05:5d:a5:6b:4c:4a:47:48:ff:bc:06:ad:54:ce:38:64:
b7:07:f1:ba:f8:72:33:6b:f9:73:17:9a:7d:08:66:51:a0:f7:
be:45:6c:b2:af:f6:55:ca:8f:bd:78:fd:4b:7e:f2:39:29:f0:
0a:1e:7b:6a:fc:b3:4f:c7:79:83:f4:5e:61:2c:5b:ed:3c:2c:
8c:eb:55:9b:b1:b7:dd:f8:81:0f:e6:d2:99:9f:96:0a:c8:8f:
25:56:07:43:7f:c5:a6:a6:dc:21:c5:62:2c:9b:40:1f:d7:62:
98:65:f2:fd:e5:36:6b:95:b5:02:d1:e0:62:15:f9:ff:7e:cc:
5a:df:57:2b:0f:81:f0:32:50:5a:77:5e:90:3b:34:ef:45:ff:
ce:42:49:85:24:f2:40:4e:b9:55:2e:b8:80:98:a5:6d:5e:a1:
83:81:51:01:98:4a:27:36:6a:e8:2c:fd:59:70:98:4d:0a:ec:
8c:ba:3c:fd:7c:56:e2:2d:3d:ee:90:b3:87:18:0c:c4:ab:71:
8a:ed:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:58 2025 by rpki-client