Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
File: eEOlOB3OKHe7w1GmhO_OzdYT46o.mft (raw, json)
Hash identifier: O+O4fWiXfBtw0eb3m3cYDElxeMdj5N2SHS6CeX6NtbE=
Subject key identifier: 8B:E3:2A:39:64:5C:38:14:9C:6D:4E:08:45:CA:C1:7A:1B:6E:D9:DE
Authority key identifier: 78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA
Certificate issuer: /CN=7843a5381dce2877bbc351a684efcecdd613e3aa
Certificate serial: 019A7225FFCD017B871399763241FC0644F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
Manifest number: 128F
Signing time: Tue 11 Nov 2025 09:01:24 +0000
Manifest this update: Tue 11 Nov 2025 09:01:24 +0000
Manifest next update: Wed 12 Nov 2025 09:01:24 +0000
Files and hashes: 1: bb6nncvAhni078ZU5RtarugpVvQ.roa (hash: 6TYoEFu0AnfEraFXjdNI1tT+tX9iNJhtz1VPH2GMI28=)
2: eEOlOB3OKHe7w1GmhO_OzdYT46o.crl (hash: Sb1Y8Aeu0PtiqqezijmzoqFp6rS9A8emWq3toBAjgzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ff:cd:01:7b:87:13:99:76:32:41:fc:06:44:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7843a5381dce2877bbc351a684efcecdd613e3aa
Validity
Not Before: Nov 11 09:01:24 2025 GMT
Not After : Nov 12 09:01:24 2025 GMT
Subject: CN=8be32a39645c38149c6d4e0845cac17a1b6ed9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:a3:6b:e9:f3:d8:25:bf:50:4d:de:3f:78:
e5:1c:0f:4f:76:18:53:ba:a7:b3:26:58:15:31:04:
b7:88:87:7e:f2:29:57:ae:a1:bc:88:c9:5c:8e:63:
ae:31:88:8d:d6:15:8b:ca:ed:b4:c5:8a:f1:77:bf:
70:b3:c3:25:51:93:6a:a5:07:4a:d5:ba:f0:56:fe:
43:7a:15:a3:51:aa:9d:45:4f:8c:5e:56:a7:71:45:
3a:a2:df:d6:cb:8d:10:3e:07:eb:33:29:d4:55:91:
99:7f:36:1e:6d:22:8c:70:d4:2e:73:f5:c9:d1:07:
22:a3:78:cc:f5:bb:8b:81:60:39:b8:f1:71:e9:45:
67:76:3b:44:a8:95:23:1c:18:f8:7f:b2:78:0b:e5:
88:89:0f:88:67:45:fc:35:61:b1:c7:7a:77:30:7f:
c4:eb:ea:eb:36:aa:d6:36:12:5c:a7:e5:47:9d:e7:
dc:a4:9d:85:d3:46:77:44:44:79:72:38:be:05:27:
04:2b:47:75:17:6b:fb:fb:07:f1:97:8f:e3:01:6e:
f6:83:9b:90:5e:eb:b1:73:6d:19:8f:3b:44:b6:29:
d1:b2:6f:fe:66:aa:61:d1:e9:ee:00:09:b6:6c:f8:
e5:d1:20:f1:8d:e3:32:4a:8e:10:bc:ad:4b:ac:8a:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E3:2A:39:64:5C:38:14:9C:6D:4E:08:45:CA:C1:7A:1B:6E:D9:DE
X509v3 Authority Key Identifier:
keyid:78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:16:1e:c8:fa:ae:2a:b8:a2:77:01:97:1b:2e:a0:7c:b7:d8:
11:c4:19:89:77:23:b9:9d:5f:7d:bd:e7:e1:7f:8f:9c:bc:07:
4f:c0:50:2c:4d:da:16:78:89:1d:f1:ad:c1:a8:68:21:73:2f:
06:6d:af:1b:32:e0:11:e0:8f:ab:56:5b:91:7d:e3:52:15:4a:
b2:02:89:a7:a3:81:40:26:6e:2b:97:e7:26:d5:ea:b6:82:71:
57:01:fc:9c:72:97:05:8f:46:a1:a1:e3:9b:0a:f4:41:d5:76:
46:fa:1d:e3:ae:8e:95:6f:7a:e7:80:6c:24:97:0c:6e:0f:b0:
de:1d:6f:a1:b1:ef:0b:17:d8:8c:ee:ae:20:a2:00:e9:0a:0b:
56:89:47:1e:37:43:f0:2e:12:ca:37:3c:24:cd:70:4b:7d:76:
60:88:0f:7e:e4:57:e3:b9:8f:52:5c:c7:17:82:62:62:d6:89:
b0:79:ee:78:94:8c:a5:e5:96:34:16:38:e4:42:2f:da:25:fa:
68:54:2e:87:33:b7:42:33:32:47:f9:ae:60:19:68:33:48:cb:
e7:a5:6c:ac:e5:df:15:82:ed:77:88:d1:0e:b4:1a:3e:10:a8:
f4:fc:13:39:1f:13:8b:84:26:35:40:d7:58:f9:19:5f:4d:b6:
7a:23:f8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:25 2025 by rpki-client