Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
File: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json)
Hash identifier: dHWX2NaiPqI0OMgG2pfBBmgoXDmmoU05vteSVfKmIQM=
Subject key identifier: CF:FD:D6:0D:D6:80:9C:08:97:2B:0A:FC:1A:09:C3:46:F0:58:A0:D4
Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
Certificate issuer: /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Certificate serial: 019A1CF520ACB1C100CA2F0C0CED92C60106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
Manifest number: 0DB4
Signing time: Sat 25 Oct 2025 20:00:17 +0000
Manifest this update: Sat 25 Oct 2025 20:00:17 +0000
Manifest next update: Sun 26 Oct 2025 20:00:17 +0000
Files and hashes: 1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: rA+sN3qvcCUkupHaVqtEE9FRrODuy4GWmdhAZfOtzco=)
2: C6VvOJhQ6LO3CnHxJ6KuDcvQH2c.roa (hash: SLDEqSk+tN+j+2o7yXrUPF3ZHKKAK2CSYSuFTkFJRpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:20:ac:b1:c1:00:ca:2f:0c:0c:ed:92:c6:01:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Validity
Not Before: Oct 25 20:00:17 2025 GMT
Not After : Oct 26 20:00:17 2025 GMT
Subject: CN=cffdd60dd6809c08972b0afc1a09c346f058a0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:01:6e:16:00:ea:55:d9:d5:e0:9f:44:77:
7b:ef:f0:11:86:e8:e1:af:e3:d6:68:34:fa:ee:51:
8f:da:e3:75:f1:b5:95:7b:6b:d6:5a:18:f7:a3:93:
ae:e5:1d:19:ca:4f:7f:c5:b0:c1:d8:34:cf:e3:ad:
02:9d:79:15:31:22:cc:cf:ca:85:4f:da:24:0b:63:
db:92:5d:f9:eb:3e:6e:f2:e4:f6:a6:29:54:68:99:
1e:17:b7:9d:49:ca:86:1d:e3:7a:b6:b0:12:6c:e2:
81:45:f5:1f:f0:3a:18:6b:c6:b0:74:a6:0b:95:73:
bd:ff:89:49:52:b5:fe:6b:70:5a:5f:e6:9a:69:92:
8a:b1:5e:86:67:3e:6c:22:e2:bf:83:00:77:93:fb:
91:09:58:4b:ac:ef:54:26:e7:2d:b4:6f:e7:b2:23:
82:fb:18:f5:6e:0e:34:66:5e:06:1f:ac:6a:03:27:
a3:22:5f:e7:5c:34:a2:2c:16:d5:1a:e6:cd:69:65:
67:ec:9a:da:3a:a2:67:88:f8:f7:ca:18:ad:d5:6e:
16:69:14:53:d0:49:c2:fe:b2:6e:db:24:b9:ed:f1:
59:1f:07:c2:93:bb:09:d3:19:38:03:f4:d6:61:0a:
8a:63:82:9f:d1:f9:53:19:52:78:b6:6b:6f:c2:13:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FD:D6:0D:D6:80:9C:08:97:2B:0A:FC:1A:09:C3:46:F0:58:A0:D4
X509v3 Authority Key Identifier:
keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:78:39:81:dc:83:be:f4:e4:b9:2b:63:69:14:89:84:36:b9:
25:bb:5b:a9:b0:37:4c:1a:14:9e:11:54:3e:94:29:d8:48:90:
40:30:48:22:24:26:10:24:d5:2a:c4:4e:b3:89:58:b1:df:0b:
93:87:c7:88:a0:e0:59:f8:99:9a:c2:a2:a7:2e:df:f9:e7:30:
75:3c:db:c3:f1:1c:9f:b1:b3:fe:6c:19:1b:84:5d:28:71:da:
df:1e:7e:21:cf:4e:4c:14:48:1c:45:25:2a:c6:af:86:45:a1:
21:4e:51:e4:48:85:72:19:78:30:04:c7:f1:d8:db:da:f3:2b:
d1:98:24:8e:6b:8d:5e:df:0d:48:e0:f2:79:a8:c7:01:9c:1a:
2b:73:3f:97:bc:af:1b:e2:a7:aa:96:fe:6e:dd:de:23:fb:2a:
19:e7:b5:df:a8:00:33:12:da:db:47:1c:a2:e4:c7:15:c2:d4:
1f:98:ad:74:c1:67:41:2d:bc:cf:67:d0:c4:f0:1c:7d:14:c2:
6b:2f:78:e0:a8:a1:50:1f:d9:d1:5e:2c:07:6d:b0:68:12:7e:
e4:9c:f1:2f:b3:cb:a0:64:01:4e:07:01:75:4b:47:5a:df:6a:
93:68:7b:42:33:0a:06:38:0e:ad:13:2f:3b:80:8a:e2:fa:72:
a2:d5:f1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:19:10 2025 by rpki-client