Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
File: EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft (raw, json)
Hash identifier: lLqPHCpBIVGwZcm1W0I3A1XcNUlcVBnISl5v2aHLuyM=
Subject key identifier: 42:C9:D9:A1:E8:27:FC:9A:CE:D0:A8:C0:74:FE:39:D1:AC:61:34:4C
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Certificate issuer: /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial: 019A2AE80ACAF0100733DFA7FABFEEA132CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
Manifest number: 1702
Signing time: Tue 28 Oct 2025 13:00:41 +0000
Manifest this update: Tue 28 Oct 2025 13:00:41 +0000
Manifest next update: Wed 29 Oct 2025 13:00:41 +0000
Files and hashes: 1: EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl (hash: ziBhax2VJPomCdrL48P+jjGwc/M8krDWx+XHBTSOApQ=)
2: lHRKfyePPGvimrfRqcUctBsZ3t0.roa (hash: jCxCLfT0tg6McLe0kWrq+Xn6320LZnpTRBq+E4YwsmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e8:0a:ca:f0:10:07:33:df:a7:fa:bf:ee:a1:32:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Validity
Not Before: Oct 28 13:00:41 2025 GMT
Not After : Oct 29 13:00:41 2025 GMT
Subject: CN=42c9d9a1e827fc9aced0a8c074fe39d1ac61344c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:e4:96:95:a8:c9:0e:83:ce:e1:af:8a:b4:
3a:c0:10:1c:76:d0:98:ab:32:99:ff:e4:70:cf:12:
4d:0a:4e:2f:80:37:d9:9f:91:13:ed:05:ec:db:ec:
25:17:90:75:07:ae:b8:7e:4d:24:5f:23:97:6d:6a:
f9:80:d3:b9:82:24:d2:f7:e5:8b:e7:f5:43:a9:b3:
16:69:e3:97:06:46:b0:b3:15:9f:7f:23:73:40:89:
fb:56:c5:ac:84:93:fb:e3:6c:cc:66:95:cc:f8:da:
df:c4:4f:19:68:13:e5:ef:10:28:c0:f6:f2:c9:72:
35:89:a9:21:b6:c1:d3:0b:ea:5a:a6:f8:eb:3b:7c:
a9:e6:59:45:9d:fc:c1:f4:e0:6b:b3:cd:0a:e6:6e:
8a:17:86:00:62:4b:30:b8:2c:7b:6d:05:28:5e:ae:
b4:78:25:d2:75:82:83:4e:61:b0:f0:a9:b6:87:9a:
44:2f:9b:46:de:ab:d6:f2:5b:e8:7c:bd:74:7a:3e:
4a:86:24:fc:40:34:7b:a5:7c:cd:da:6a:9b:31:b4:
d2:cb:91:5c:28:9d:a9:73:ea:84:4f:36:eb:eb:03:
f2:7e:94:5f:5a:f4:87:9e:7a:8d:a2:fb:94:0c:cf:
6f:7a:63:ef:5d:ce:49:98:7b:9f:13:53:eb:b5:af:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C9:D9:A1:E8:27:FC:9A:CE:D0:A8:C0:74:FE:39:D1:AC:61:34:4C
X509v3 Authority Key Identifier:
keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:74:b0:e7:15:2d:8e:82:4a:59:76:0f:85:59:5a:91:a4:ff:
fa:83:03:39:54:e5:3c:80:d5:82:40:5e:b2:5a:82:69:ea:fd:
90:44:72:97:fc:57:e6:f3:5f:00:79:d3:27:d5:b0:41:28:c6:
5d:34:60:9f:e9:94:c7:29:84:9b:57:eb:54:41:8f:ea:69:9a:
c6:ed:bb:75:3b:d6:8d:10:20:6a:76:c7:8f:c6:0a:14:c9:a0:
f7:bb:cf:de:da:a5:cb:97:be:8e:76:ff:6a:89:3b:62:12:a9:
fd:7e:64:4f:b1:9f:77:6d:fe:a1:f4:5e:d5:42:19:bf:9d:6b:
2d:9f:a8:5a:ca:96:46:69:96:4a:05:54:24:69:71:6d:05:02:
cf:7a:7c:e3:af:99:c4:6b:e9:ca:35:03:ab:9e:c8:49:10:6d:
40:6e:a2:61:b6:5e:11:3d:1c:5e:d3:3c:a4:60:1a:85:3d:88:
c6:25:9b:6f:8d:cc:8c:a4:2f:84:80:fa:c8:56:64:c3:12:85:
12:67:ea:31:1e:f7:1a:c6:d9:a7:78:7e:f8:50:04:fb:83:37:
61:3b:b4:7d:60:ee:74:77:63:9b:93:c2:dc:7e:84:63:29:a1:
67:2a:76:cb:fb:61:6f:5b:e1:61:35:59:6e:8b:fe:d0:7d:58:
c8:7c:54:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:25:04 2025 by rpki-client