Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File: eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier: MSW2fJthYKzFQc8ygONED8RsyPQw2WD/46vxzZJnsYE=
Subject key identifier: FD:84:89:26:DF:D8:0D:21:44:69:D5:B1:4B:6F:25:6E:FD:8F:29:BB
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer: /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial: 019A20D227AFC4A71EAB7353B3CA965D02F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number: 133F
Signing time: Sun 26 Oct 2025 14:00:34 +0000
Manifest this update: Sun 26 Oct 2025 14:00:34 +0000
Manifest next update: Mon 27 Oct 2025 14:00:34 +0000
Files and hashes: 1: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: qwWMUT9z1a+m0Y7u+WgyzHGBcNFrsfA4A/YTmNYt08Y=)
2: yuuro4DZVKBcq4qfaMzuK_H9btI.roa (hash: vk4eiNew6fQF6RCXYVJFZr4P4ma9BlPB3UnJJEu4bKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:27:af:c4:a7:1e:ab:73:53:b3:ca:96:5d:02:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Validity
Not Before: Oct 26 14:00:34 2025 GMT
Not After : Oct 27 14:00:34 2025 GMT
Subject: CN=fd848926dfd80d214469d5b14b6f256efd8f29bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:97:c0:a5:ce:d2:4c:ea:2d:86:2b:17:f4:
0c:4f:b8:d6:a9:e7:74:1f:3d:c7:12:3c:e5:b3:a8:
8c:a8:6b:2b:7f:ef:87:e8:94:51:04:e4:8f:ac:3b:
e8:24:98:35:b0:79:e4:51:3f:b8:87:8f:5a:4a:4b:
3b:c9:4f:66:54:a1:e5:3c:54:37:dc:41:a1:d1:9c:
1a:ff:67:77:36:d7:74:69:59:60:ec:73:4a:67:68:
f1:37:8c:fb:5f:29:9b:47:3d:8e:f1:a1:a4:9b:0e:
c8:b7:07:83:26:25:0b:b8:83:2d:90:de:7c:d5:c9:
5a:f1:5d:74:44:b1:9c:0d:3e:68:5c:44:97:a9:7d:
fd:46:d1:36:4c:f7:21:5d:77:e6:13:73:74:7e:07:
81:83:38:3b:74:06:2e:fc:8e:95:b7:e0:9a:17:fa:
58:a1:47:ca:25:93:d2:f2:39:66:cc:2d:e6:e4:85:
15:ae:3c:3a:71:e5:4e:53:59:63:df:28:79:7a:95:
f9:04:f3:4d:92:9f:ea:e1:61:ba:84:fe:77:d6:43:
37:69:3e:a8:9e:2f:37:8e:87:c6:d6:ee:0e:13:ea:
2f:2d:a0:d7:5f:ca:76:9e:7c:85:4c:08:50:08:45:
ca:df:44:ed:52:28:87:31:fc:8b:91:07:64:51:8c:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:84:89:26:DF:D8:0D:21:44:69:D5:B1:4B:6F:25:6E:FD:8F:29:BB
X509v3 Authority Key Identifier:
keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a4:13:da:51:99:10:ad:54:e0:e7:72:89:60:0e:57:ea:1e:
21:e2:fb:84:4b:d2:b3:d3:ba:12:ae:5e:af:56:37:62:c5:45:
d6:73:0a:9d:47:95:a1:62:6f:e5:a9:4b:25:8f:1e:b2:15:7a:
1f:0c:5d:0e:ce:8b:d0:e8:95:44:cc:57:7d:88:56:cf:54:ea:
90:ee:70:b5:59:e6:82:78:73:fc:94:42:af:08:88:ba:34:3e:
f4:62:38:9b:86:b8:15:83:46:40:72:fe:62:d7:bd:05:2b:1f:
a7:e4:6d:73:5c:b3:0b:c7:26:84:8f:ad:29:43:4c:6b:c7:29:
1a:d3:24:6d:66:60:f6:b6:41:c2:06:d9:1e:38:34:8c:d2:29:
3f:69:da:c3:5e:7b:66:bb:f2:53:22:f3:55:0d:0a:9a:b2:69:
45:0e:5f:a9:5f:58:c1:c6:ca:b8:52:5b:03:cb:34:cc:53:06:
3b:f4:3f:a2:6b:f4:5a:fb:c5:a7:b2:67:e4:c3:aa:b4:b7:fb:
33:3c:57:63:1a:7f:6a:de:c6:e2:11:8c:c6:ec:d6:fb:b8:1e:
4a:54:d3:ec:b8:4f:9b:31:95:6b:7f:2f:88:85:cc:1a:db:52:
ff:c1:a9:d5:23:31:cc:26:a0:3e:7c:8e:ca:90:df:2f:f3:c3:
71:f4:9d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:57:14 2025 by rpki-client