Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
File: eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft (raw, json)
Hash identifier: gKTzpR5du+4YvaduYeWOl2xi3I1UMDTlDeiJ3xtYPm0=
Subject key identifier: 53:07:E9:8E:02:F2:ED:BD:A7:BE:59:83:98:A9:5E:A9:38:3E:63:B1
Authority key identifier: 79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
Certificate issuer: /CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Certificate serial: 019A1384BDDA9FA68031BB239CDAF68F72F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
Manifest number: 16EB
Signing time: Fri 24 Oct 2025 00:00:57 +0000
Manifest this update: Fri 24 Oct 2025 00:00:57 +0000
Manifest next update: Sat 25 Oct 2025 00:00:57 +0000
Files and hashes: 1: eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl (hash: snXBdRueDWJkO6MQGwJEWyHPG5qTinDdOsxnedvEK+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:84:bd:da:9f:a6:80:31:bb:23:9c:da:f6:8f:72:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Validity
Not Before: Oct 24 00:00:57 2025 GMT
Not After : Oct 25 00:00:57 2025 GMT
Subject: CN=5307e98e02f2edbda7be598398a95ea9383e63b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:df:70:89:4d:f6:70:39:57:65:3b:d8:23:
76:be:d7:52:40:d1:bc:77:c6:4d:19:d8:7a:21:c1:
65:36:51:6d:4a:dc:45:53:e2:bb:e6:55:de:3f:45:
b1:d0:b1:4b:e8:1e:06:73:26:f3:51:27:23:3d:be:
95:6f:50:61:d1:32:60:31:93:3f:1c:34:2e:6d:18:
43:56:3b:6b:f6:60:6d:ad:d9:f9:5e:39:c3:30:65:
90:85:8f:9d:63:78:b5:b3:2c:20:d4:6c:d7:03:32:
ba:97:ec:cc:73:81:01:8d:99:e5:9a:8d:9e:e9:6f:
90:c6:b5:d6:88:b1:45:e4:a7:a2:d7:64:d9:04:12:
e8:2f:44:94:0c:c4:ef:87:a2:21:fe:70:af:05:4f:
d1:79:aa:63:e5:3a:70:75:14:96:fa:45:9f:66:09:
a3:23:30:ac:01:bf:c7:11:63:e9:07:2a:2c:39:e0:
15:94:ae:39:ed:e3:d4:b3:2e:94:f6:e9:bb:bc:09:
a7:cd:bf:53:df:02:6a:16:a9:28:93:30:c6:d9:f1:
55:b5:ee:b1:01:e7:76:97:0a:df:36:7a:d6:eb:6f:
18:c3:84:1f:90:63:f7:31:a7:05:bd:32:59:c9:ff:
f2:01:69:7d:05:a5:f4:66:78:4f:5b:12:81:32:40:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:07:E9:8E:02:F2:ED:BD:A7:BE:59:83:98:A9:5E:A9:38:3E:63:B1
X509v3 Authority Key Identifier:
keyid:79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:be:aa:4f:64:3c:2c:22:f5:65:e5:e0:76:9d:de:08:49:17:
9a:86:d1:d5:65:c3:6e:bf:db:8a:7f:0f:f7:87:24:fe:aa:6e:
59:44:89:60:26:c9:7c:d3:c0:1d:6a:7f:91:ef:93:5c:14:27:
79:13:d0:74:d4:59:52:28:45:b0:46:47:e5:b6:0e:dd:45:1e:
bd:25:bf:94:49:bb:47:c0:cf:26:10:44:24:c6:91:eb:25:59:
d2:f6:b9:98:75:4a:64:70:59:14:b1:6e:46:54:f5:42:2e:b0:
92:95:be:3d:76:3b:ce:9e:bb:8d:8d:31:4a:20:ca:0e:99:46:
f1:64:bd:c3:70:23:af:3e:75:4f:bf:c3:93:1a:2b:cb:52:b8:
f7:91:c0:bc:51:55:9a:19:b7:b2:cc:a6:d9:4a:75:1e:b2:f9:
29:f9:2d:97:bd:10:3e:90:d3:6f:fc:70:45:70:a3:b4:d7:ba:
8f:57:fc:51:96:95:d8:96:aa:92:92:3d:a1:73:66:2e:69:a8:
e1:15:ae:0b:bb:89:b5:63:be:8d:98:2e:10:c2:fa:46:8d:fe:
b1:68:a6:96:c5:22:85:e0:31:23:29:84:3f:e4:e9:e2:66:85:
39:5f:c6:76:63:d4:e2:f7:92:63:47:31:29:2b:a9:85:8a:a6:
2d:42:94:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 02:44:03 2025 by rpki-client