Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File: EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier: TW/yiM8eKIGj0B5D+OXWWa/iEw9vHz8YCGtqhg2lZDs=
Subject key identifier: 13:8D:03:89:53:BC:4B:EA:4E:D6:AC:67:B7:57:CA:9E:AC:80:22:92
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 019A11968564A635724264960EA08BB46541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number: 0FE3
Signing time: Thu 23 Oct 2025 15:01:08 +0000
Manifest this update: Thu 23 Oct 2025 15:01:08 +0000
Manifest next update: Fri 24 Oct 2025 15:01:08 +0000
Files and hashes: 1: 1jyVG685LkAasuEJLUPQjxJIjx8.roa (hash: DWYO2Mf6OexFPHlvZ0RE64fO/e9+/+xwtyYXQHGkjEU=)
2: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: gofm9Jvz6QKzgHLXR5CzFRhHX4N7wgNnkavXqoKbJYY=)
3: JmhavQCJc5YnIlopAxHIw2DUMUU.roa (hash: v4gVDRFKxyXMWebq6LZbmBqGUeq2Q/D6ShHZHU8b8+s=)
4: gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa (hash: oFJ3MXVl1iMSZ8pMJXy4ddvnZMU6K7cXSyKqIdFC6UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:96:85:64:a6:35:72:42:64:96:0e:a0:8b:b4:65:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Oct 23 15:01:08 2025 GMT
Not After : Oct 24 15:01:08 2025 GMT
Subject: CN=138d038953bc4bea4ed6ac67b757ca9eac802292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:e2:2e:67:25:b3:3a:58:02:fb:8a:e2:09:
c0:eb:04:ca:9b:6d:44:8f:64:dd:9a:ca:6b:27:ef:
4a:72:ef:e9:13:06:f1:9c:35:e8:11:eb:03:14:bf:
16:af:f3:93:28:12:06:e5:b4:4e:c4:d2:ef:7d:59:
cb:0c:4e:95:3a:e9:16:e3:c0:ec:a8:e9:44:71:35:
b9:8e:e0:2b:00:ed:59:38:c3:46:f1:c0:98:e9:9a:
c4:78:20:38:88:06:6f:ca:1c:66:fa:d1:93:05:e4:
e6:4a:81:f3:e2:96:c8:95:81:cc:a2:69:f9:b9:24:
aa:b3:a6:5b:d8:f5:4c:1e:27:73:56:68:4a:ef:15:
6a:30:72:51:e2:2e:aa:dd:dc:eb:fe:b7:b3:4e:5e:
03:82:44:58:a9:6d:23:e1:46:d3:af:af:35:84:0d:
9b:31:d6:cd:80:a6:29:6d:c8:35:07:af:66:a5:dc:
74:11:2c:ab:f4:ab:5e:be:1c:89:d7:a2:64:f2:b2:
16:cf:b4:54:99:bf:e5:23:16:ab:41:6a:db:cd:67:
04:26:85:99:b1:81:05:46:89:3b:c4:7e:a9:be:cd:
6f:77:fa:b9:81:78:d4:7f:f7:2f:8a:a8:87:50:55:
da:f0:f9:22:2b:dd:9a:cd:b6:09:52:de:5d:b9:b9:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8D:03:89:53:BC:4B:EA:4E:D6:AC:67:B7:57:CA:9E:AC:80:22:92
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8f:6a:61:d0:90:9e:b3:fa:11:68:27:a5:73:c2:4a:eb:01:
67:54:b7:1b:01:d1:a3:c0:5a:2b:95:9f:a6:65:86:86:6d:b6:
a5:7b:7f:8c:ed:b3:ea:9f:c9:f9:d9:aa:22:1e:55:c2:41:95:
14:16:0c:91:dc:48:f4:bd:94:7f:7c:3a:50:50:f7:95:3d:a7:
6b:69:2e:e8:76:f3:13:6a:00:f3:7a:6e:b5:2a:91:ca:43:9b:
a6:d4:81:0d:5b:90:00:4a:50:de:ab:aa:e6:3e:ac:8a:a4:15:
e7:23:fd:37:c1:2a:4a:7d:11:66:68:7a:e8:1c:8b:cc:29:b0:
9d:88:9f:5e:90:d1:b2:18:51:ac:17:b3:6f:0a:f7:b5:c0:92:
cc:9e:02:fd:76:3c:fb:14:a6:30:24:c4:4f:28:ca:0f:7c:7f:
f8:2f:da:d2:6a:74:31:ba:60:4a:3d:1b:d0:c9:86:14:dc:ff:
a0:fe:8c:97:cb:8b:58:14:58:93:6d:50:25:df:07:3a:02:ed:
52:2b:b1:b0:31:e9:ba:2f:b0:e2:05:6e:30:4d:e5:35:42:a3:
1e:e4:ad:b2:27:fd:eb:6e:8a:3f:14:5c:5f:cf:60:65:33:74:
f7:7c:bb:c9:dd:78:36:d9:36:6b:b7:3a:d2:40:47:45:ac:df:
0d:7e:d4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 00:19:14 2025 by rpki-client