Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
File: ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft (raw, json)
Hash identifier: Fs4GnnaKPMWkZKhjlkk9rKUhKRjFOxWtvFPWgnV2NgA=
Subject key identifier: 0D:50:17:B2:BB:E2:69:7E:54:3E:65:D6:6E:89:B4:A9:8F:A7:6E:95
Authority key identifier: 7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
Certificate issuer: /CN=7a43253a368fc6475853971ba9235be0233d8b7c
Certificate serial: 019A0F3AD9EE54864B798BDDDAC4F9D4DDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
Manifest number: 1164
Signing time: Thu 23 Oct 2025 04:01:46 +0000
Manifest this update: Thu 23 Oct 2025 04:01:46 +0000
Manifest next update: Fri 24 Oct 2025 04:01:46 +0000
Files and hashes: 1: EyXyZh1NMVmQSwOvgsi_6X0fzdc.roa (hash: zdUTP+PrB9t/KpvAQvCmMyip6WSChLUYJHZuuaMU0rs=)
2: ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl (hash: xnwXKR6zRcW8xguqKElJjmB7IAM76/Hn+pTQ99eaSsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:3a:d9:ee:54:86:4b:79:8b:dd:da:c4:f9:d4:dd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a43253a368fc6475853971ba9235be0233d8b7c
Validity
Not Before: Oct 23 04:01:46 2025 GMT
Not After : Oct 24 04:01:46 2025 GMT
Subject: CN=0d5017b2bbe2697e543e65d66e89b4a98fa76e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:2c:9e:2d:75:54:b7:81:00:68:7b:50:66:
4a:d3:a5:a4:97:27:74:a7:6c:ed:89:97:51:30:c3:
c6:e3:55:f4:e4:d6:63:0d:44:57:b4:cc:e6:d1:20:
6d:09:8c:8f:ae:c1:d2:f3:00:0a:2a:a8:74:e0:0c:
b8:32:8c:b4:fe:dd:70:73:c4:ee:d9:fd:cf:13:54:
a3:88:95:4e:1f:d5:dc:65:ea:1f:9b:d5:85:29:76:
cc:fd:bf:9b:a1:aa:3e:b7:8e:71:c5:ee:b5:32:38:
0b:de:55:d0:9f:12:01:11:0e:a1:af:3f:71:9f:e9:
85:d5:0a:4a:26:a6:15:8f:d1:76:ec:c7:f7:85:f9:
d8:72:04:af:06:06:cb:b9:37:62:87:36:e6:cf:a3:
5c:89:1f:28:be:06:43:27:a1:ce:b9:54:86:21:f3:
a3:22:51:74:14:7a:44:a6:0d:84:e6:0f:84:0d:ae:
68:c8:32:ed:98:cb:20:d4:58:a5:45:ee:de:40:2c:
a1:10:7a:25:b1:a2:bf:b0:bb:a1:17:53:30:b1:d8:
aa:e3:32:50:47:6f:1f:81:da:d4:20:93:a0:f7:4b:
8a:1e:24:44:ff:fc:69:38:7d:12:7c:e3:74:be:70:
08:b9:8e:7a:15:0b:f1:e5:60:e0:cd:44:fe:b8:c1:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:50:17:B2:BB:E2:69:7E:54:3E:65:D6:6E:89:B4:A9:8F:A7:6E:95
X509v3 Authority Key Identifier:
keyid:7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:94:60:c5:0e:c1:9b:d5:25:25:36:4a:d4:d3:42:76:0a:90:
e0:e2:40:9f:56:86:dc:6a:27:9c:4b:b6:5d:bc:c9:e5:10:47:
b8:4d:e1:68:28:35:90:4d:4e:4d:01:b7:36:43:40:a2:f3:aa:
d8:ca:5e:58:2d:5e:66:27:b0:9e:98:3e:ff:e2:82:d0:5e:89:
8f:81:39:21:1b:c7:da:8a:c3:00:0f:70:78:fa:1c:ba:c4:24:
97:67:b4:e1:cc:3e:cb:8c:5c:48:cf:da:fe:60:b4:64:98:5d:
ea:eb:4c:5e:4d:7c:95:c3:6e:4b:f6:7e:44:9b:57:54:be:83:
5b:f7:12:af:b2:ef:93:1d:be:a9:9e:34:0a:64:ba:70:d5:6f:
2a:00:93:3c:37:30:5a:2d:73:bb:86:27:77:49:f6:33:9a:4a:
24:28:c0:ba:b5:3c:16:70:c4:7b:e3:41:db:c6:e6:06:60:04:
d1:6a:97:b0:07:35:78:5a:13:9d:ba:8b:b0:15:8e:e8:d7:2b:
2e:44:90:e9:80:b7:70:31:59:59:7f:21:27:3a:f5:0c:b6:4e:
35:ae:5d:b0:59:b9:f3:d5:bb:a1:c7:28:a0:37:da:98:9f:cd:
86:73:23:cd:13:e0:19:1a:f5:00:08:fc:a7:0c:53:4d:dd:78:
90:2a:af:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 12:10:38 2025 by rpki-client