Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
File: eOe6jAiFO-VUxZTe0VammD66EFU.mft (raw, json)
Hash identifier: a7jJlf2eC4R5+SYhkdMujamTEdfelJ/iKx/k+olb1FQ=
Subject key identifier: D0:88:5C:69:78:13:BE:32:03:3E:E9:D7:F2:10:2C:7F:C2:37:8E:78
Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
Certificate issuer: /CN=78e7ba8c08853be554c594ded156a6983eba1055
Certificate serial: 01984B8A5BF4D69BA6CA13CE177FD23846F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
Manifest number: 129F
Signing time: Sun 27 Jul 2025 11:00:15 +0000
Manifest this update: Sun 27 Jul 2025 11:00:15 +0000
Manifest next update: Mon 28 Jul 2025 11:00:15 +0000
Files and hashes: 1: PBFDNtiQmYI8zGG7kl8kQ6QSo3w.roa (hash: Zn4dyGMYJbfaJjvxLWrM7du9HmyBjKhPRokK9xNb0s0=)
2: eOe6jAiFO-VUxZTe0VammD66EFU.crl (hash: sRpsoE2VL1909t+5F+RLhnQBIh6BlyzftmuQZBnjp2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:5b:f4:d6:9b:a6:ca:13:ce:17:7f:d2:38:46:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055
Validity
Not Before: Jul 27 11:00:15 2025 GMT
Not After : Jul 28 11:00:15 2025 GMT
Subject: CN=d0885c697813be32033ee9d7f2102c7fc2378e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:8d:01:38:8a:c7:e1:d9:e7:d1:7e:30:39:
a5:68:49:cf:c0:2d:aa:37:c6:84:26:fd:5c:c5:42:
a3:cc:7c:e7:7f:4d:2c:85:86:f8:79:a2:a3:93:ce:
0d:32:40:66:ce:78:af:21:07:0c:7a:0d:b1:9e:4f:
de:ec:c1:9c:29:b3:da:a9:70:70:66:62:59:a2:2d:
cb:c6:a4:82:07:b1:35:d6:73:27:85:5a:cf:8a:5d:
81:6c:fc:ec:a4:8e:a1:94:05:ad:0e:8c:7a:7f:64:
27:57:10:2d:aa:61:f7:14:12:c8:82:40:84:d7:7d:
f1:50:b5:4b:9d:16:48:fc:46:46:d0:ed:d7:0d:76:
90:fa:14:9f:bd:c1:21:ad:72:2e:9b:9f:6e:a2:aa:
e6:b3:71:84:ad:c1:b9:47:00:5d:d0:03:6c:60:d1:
c2:bf:d8:18:1c:31:01:7e:1b:76:ee:e9:28:76:54:
89:a9:85:5e:5a:a8:c6:d3:13:7e:93:05:5e:78:89:
78:e7:3b:27:94:33:39:d3:a8:af:a5:ac:7c:ec:e1:
74:fb:58:9e:b6:d9:bd:ce:c6:86:60:f8:26:9a:49:
c4:0c:4a:2c:42:e0:65:15:5b:48:fc:d8:c5:23:aa:
84:c4:1e:11:a8:23:2d:0c:6a:39:9e:b8:3b:e3:1b:
d8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:88:5C:69:78:13:BE:32:03:3E:E9:D7:F2:10:2C:7F:C2:37:8E:78
X509v3 Authority Key Identifier:
keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ce:9e:14:83:a9:fe:90:7d:f8:29:55:2f:99:14:49:e5:0c:
3f:8e:fe:5d:57:4e:95:0a:c9:ae:4d:cb:16:d9:88:4a:37:1f:
72:7a:49:06:b9:02:1a:ad:6c:18:7d:6e:00:e8:4e:47:31:a0:
68:f0:0d:ed:5c:d2:9b:72:c2:b4:9a:7c:bf:d4:47:e1:3a:c4:
03:7c:2b:b6:ec:0e:2a:90:d4:13:23:be:34:fd:94:6e:d5:d6:
97:1f:ea:c8:ed:2f:f7:e5:5c:e4:7e:83:12:d8:6a:d8:04:1f:
40:a5:fc:66:7a:2b:5c:28:5e:84:ec:f3:48:e0:c2:a5:7a:a3:
0e:8f:23:41:bd:c0:50:a9:17:e8:f3:a6:78:e2:a9:c0:e9:70:
d3:64:7c:7d:9a:65:90:47:be:bf:48:f3:21:53:ae:f3:43:8d:
84:53:c8:37:0b:06:36:17:05:ca:43:56:5f:25:58:ef:1d:89:
0a:34:65:de:ba:b7:0e:31:2e:db:2c:69:15:b6:2d:02:77:c8:
18:29:bb:a8:a5:ff:51:13:0c:d5:c2:43:ea:72:d8:a7:4c:fa:
44:08:c2:66:58:60:b0:3f:6c:b3:c2:13:e0:32:f2:85:0f:70:
69:2b:a0:b3:21:57:36:21:ae:fb:89:fd:ff:13:bf:9e:3b:a9:
bf:6a:e9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:54:23 2025 by rpki-client