Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
File: EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft (raw, json)
Hash identifier: 3Qs7SN3Hjz4oLzgYkqt5rSJE5dUEZhSlrlZy9S8Kvqw=
Subject key identifier: F2:5B:26:FF:D2:B6:F2:88:9D:B1:26:BC:48:EF:BD:51:35:3F:86:8B
Authority key identifier: 10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
Certificate issuer: /CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
Certificate serial: 019A0523BBE32B7E6EBDDD69BDE839FFDFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
Manifest number: 4B
Signing time: Tue 21 Oct 2025 05:00:18 +0000
Manifest this update: Tue 21 Oct 2025 05:00:18 +0000
Manifest next update: Wed 22 Oct 2025 05:00:18 +0000
Files and hashes: 1: 9rnL1t5Ldor0JB3KN3KrYlnILFc.roa (hash: 00esWyqmIW6yBsmGpeX9QfYrAUi9bLeAI/5cffpcKB8=)
2: EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl (hash: wubLtEZVj/WQj4UWUqzmu3w0U4ocDOPQ8emzADGx6Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:23:bb:e3:2b:7e:6e:bd:dd:69:bd:e8:39:ff:df:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
Validity
Not Before: Oct 21 05:00:18 2025 GMT
Not After : Oct 22 05:00:18 2025 GMT
Subject: CN=f25b26ffd2b6f2889db126bc48efbd51353f868b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:2b:1d:af:47:c0:a1:c1:3c:d2:ae:b7:92:
c6:bb:7c:d5:de:28:2e:8c:22:01:e3:fd:04:84:6d:
25:4f:3b:18:a9:8c:1a:02:91:d6:1d:4f:04:f0:2e:
aa:dc:5e:20:09:3a:06:1e:d2:08:3c:30:40:ac:d2:
d3:f0:d6:c8:dd:f7:38:71:dc:9c:d2:90:4e:db:58:
7f:0c:29:fd:cf:d5:38:6c:2d:70:0d:5e:0f:f1:cb:
79:4c:03:94:63:06:32:2a:63:67:2e:26:74:1e:85:
e9:3f:0d:c5:9b:17:2d:42:29:27:1a:9c:1e:43:e0:
31:4f:dd:87:ff:13:9c:b7:6f:33:b5:63:15:0b:a7:
cf:d1:6d:07:b5:67:3c:77:7a:97:aa:cb:8c:e2:54:
bf:bf:14:8e:8c:25:fd:01:98:21:b4:9d:79:00:75:
c9:8e:e4:a6:d9:2b:73:c4:48:3f:8a:4a:bd:b8:ce:
7f:38:20:fc:75:ef:4b:63:e0:34:4f:61:3c:6e:e0:
25:67:54:20:ed:7d:e0:06:b6:17:bc:dc:f2:a0:59:
41:bb:56:cc:26:43:c7:89:a7:36:cf:da:a8:c4:a6:
65:33:23:3d:34:3c:f3:df:cf:59:34:14:d0:dd:b5:
02:e7:09:bd:7f:e9:b6:73:80:34:ec:38:55:2e:ac:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5B:26:FF:D2:B6:F2:88:9D:B1:26:BC:48:EF:BD:51:35:3F:86:8B
X509v3 Authority Key Identifier:
keyid:10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d3:c7:67:5e:dd:ff:73:96:5e:91:28:cb:16:23:14:fc:4e:
03:f6:06:51:1f:1d:2a:8b:dd:d4:0b:83:5b:9b:99:d7:41:12:
09:1e:f3:15:14:d8:87:88:26:38:c7:e7:32:94:ce:40:fa:95:
b1:5c:25:f7:81:14:44:69:70:71:aa:62:fa:bb:8b:c6:0b:23:
09:11:94:41:08:9f:c6:8a:72:72:6d:15:6f:6b:40:a9:46:8f:
db:ef:db:f3:99:44:6e:2e:25:d4:0d:e3:2d:a8:2e:cb:65:1a:
7e:db:fd:f6:d7:68:14:c1:05:e1:ba:04:0b:3d:01:1c:ab:23:
86:29:11:a4:72:da:c3:29:42:b7:50:c3:f2:69:3b:73:87:d6:
c3:6a:4c:5b:84:2d:32:14:06:18:9f:ac:12:b2:9f:b9:a4:78:
30:d4:c7:2f:cb:dc:43:d5:01:0b:0d:38:07:5f:6a:7d:6d:50:
d2:7c:7a:cc:a3:7b:b9:65:40:05:7b:5b:a3:c6:63:e0:7c:19:
8b:96:32:8b:0f:7e:bd:9b:30:49:ef:7c:9d:f3:4b:de:bb:bd:
69:9b:3d:4b:40:ab:8e:91:3e:fb:8d:20:e2:02:51:c3:df:a4:
d9:56:93:3f:17:f7:d0:a3:c7:34:e9:8b:01:6f:14:2c:0c:cc:
fd:e5:38:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:34 2025 by rpki-client