Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
File: eUif00bnIUhmFZrC8OycmQxPFLk.mft (raw, json)
Hash identifier: spzZMGN3TyZKPTuE2epPrj/O9A+QgEyfizm5Bq0h9h4=
Subject key identifier: 1A:71:0A:42:92:96:F2:06:0C:E7:16:1A:94:B9:59:65:6C:2C:1D:6F
Authority key identifier: 79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
Certificate issuer: /CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Certificate serial: 019A06A48A2530F38DD348AA23E665A022E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
Manifest number: 0545
Signing time: Tue 21 Oct 2025 12:00:37 +0000
Manifest this update: Tue 21 Oct 2025 12:00:37 +0000
Manifest next update: Wed 22 Oct 2025 12:00:37 +0000
Files and hashes: 1: YbVpJmm5d19rM-zYZeA0ZWdtDMg.roa (hash: l5rWO723DVA6iEz8C5Lvzh9vlRYqelqcHe5HXOP/cpM=)
2: eUif00bnIUhmFZrC8OycmQxPFLk.crl (hash: 1GFQRLPZlQifMqkPud6K8zmVVrZMMKbVjfotFBvLAXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:a4:8a:25:30:f3:8d:d3:48:aa:23:e6:65:a0:22:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Validity
Not Before: Oct 21 12:00:37 2025 GMT
Not After : Oct 22 12:00:37 2025 GMT
Subject: CN=1a710a429296f2060ce7161a94b959656c2c1d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:3a:40:c5:b0:80:25:8e:fa:76:70:c4:cd:
38:af:c9:ea:58:9d:c2:35:9f:02:e3:ef:af:21:07:
52:c5:34:c8:62:0e:4e:fd:ea:eb:80:e7:36:48:d1:
84:d3:46:1b:8b:b3:1f:73:41:9e:cb:f5:e0:1d:a7:
a6:50:46:08:5f:5c:34:37:46:b4:f5:61:d4:53:aa:
50:f6:8d:b6:c6:11:15:3d:46:ca:43:93:6d:bd:cb:
72:f9:e3:45:9b:0b:23:2c:60:ed:e0:31:4c:79:d2:
a9:b5:a5:8d:d2:16:ba:32:1b:de:4b:75:72:c5:1c:
7e:d4:2f:82:b1:96:56:88:84:bc:a5:38:33:12:02:
47:a4:51:06:9d:ff:c4:14:e9:a8:a2:1d:da:55:1f:
c7:c3:7b:85:d1:88:6e:ba:e9:81:4d:2b:60:2b:3c:
05:f3:ed:e8:ba:df:e7:66:db:c9:e1:78:ad:79:53:
64:a2:a5:d5:c6:f0:3f:82:db:9d:10:f4:80:c3:24:
92:e0:dc:4d:29:f7:f1:c7:89:27:cb:bc:c2:b4:22:
5c:60:ff:bd:84:34:73:90:ff:13:52:29:c0:55:e5:
e8:1c:bf:4a:cf:3a:13:80:cb:3a:6a:95:90:29:48:
df:6f:c3:ea:8b:6f:6a:b9:2d:82:24:9c:b5:55:8b:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:71:0A:42:92:96:F2:06:0C:E7:16:1A:94:B9:59:65:6C:2C:1D:6F
X509v3 Authority Key Identifier:
keyid:79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ba:8a:d8:3d:a1:82:1a:c5:85:70:d4:44:fb:e3:71:b0:22:
c9:55:6b:17:79:b2:ee:4f:27:07:ef:95:2c:3e:d5:b5:94:7c:
25:cf:ae:9a:79:34:0f:c8:c6:12:a7:32:cc:0a:c0:f6:af:2e:
c1:e6:01:2a:f4:f7:7a:37:26:e6:db:fd:f7:65:ad:f8:16:ef:
98:d1:63:11:67:cc:c2:d1:cb:8b:22:e5:7c:3b:fe:bf:5e:61:
0c:47:88:58:47:d3:74:80:e9:0a:ee:29:75:40:b6:89:1a:48:
e0:17:97:59:1d:cf:ef:42:5e:d3:07:ca:6f:b2:88:50:51:53:
52:a1:90:85:28:2b:60:03:88:4a:bc:5a:be:3f:74:4b:be:ed:
85:9e:0d:06:32:83:5b:ee:a4:92:0f:73:66:c2:16:cc:03:f6:
9f:f5:9f:16:a7:8d:10:af:24:2d:3b:38:37:02:b2:01:da:32:
ad:d3:fa:c8:8e:7d:02:47:13:09:d9:f7:0e:f1:10:ea:70:56:
b8:62:0f:aa:8a:1c:ca:08:11:ac:bc:8c:bb:e6:a7:b6:21:f3:
9a:64:d5:f0:01:db:aa:cd:ef:40:29:38:15:84:ae:cc:6f:74:
a4:e5:db:7b:6c:22:a6:7b:dd:45:69:d3:57:b7:89:dc:c0:f9:
97:52:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:17:29 2025 by rpki-client