Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
File: eIKlTbKvSuLgSGRxuNUPj6X36GE.mft (raw, json)
Hash identifier: 1hA6E9rw3og8HHoQj48z3VvJ8zpZH0iueV57FQUA1lA=
Subject key identifier: 58:F8:A7:AD:90:68:C1:E6:D4:8D:94:04:79:62:61:45:EA:C4:40:A9
Authority key identifier: 78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
Certificate issuer: /CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Certificate serial: 019A27E6A7A7C63DA4969A9082271B07EB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
Manifest number: 12
Signing time: Mon 27 Oct 2025 23:00:18 +0000
Manifest this update: Mon 27 Oct 2025 23:00:18 +0000
Manifest next update: Tue 28 Oct 2025 23:00:18 +0000
Files and hashes: 1: aenbutlsHdIddYbTr8SaSbe80BI.roa (hash: AHbNxfBI1PuhNtZ/xkZPyFX+9IwZWsMH6bfEwT22XqQ=)
2: eIKlTbKvSuLgSGRxuNUPj6X36GE.crl (hash: aQCMxsPMC7trUuBPCS1i3N9APew79rN3efoAM2u7k/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:e6:a7:a7:c6:3d:a4:96:9a:90:82:27:1b:07:eb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Validity
Not Before: Oct 27 23:00:18 2025 GMT
Not After : Oct 28 23:00:18 2025 GMT
Subject: CN=58f8a7ad9068c1e6d48d940479626145eac440a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:07:09:c7:be:ef:19:7b:06:69:ba:b6:97:
63:86:5b:3b:bb:af:74:31:25:07:e2:20:88:22:46:
2d:24:85:af:61:69:12:4a:ed:b0:6c:ed:ed:18:dd:
57:ad:e7:af:9f:68:0e:97:cf:76:b3:de:6d:67:56:
09:0e:c7:09:80:9d:9e:a4:64:fe:8d:65:39:58:bd:
50:fc:d1:c9:f7:14:e1:29:85:14:2f:e9:57:2a:30:
26:62:4c:31:25:1f:3f:81:f8:d4:88:35:54:28:e9:
2c:67:12:4e:88:dc:17:cf:aa:a6:ba:62:2a:b8:9f:
ad:34:25:d3:5a:4e:09:04:ee:32:fe:c4:4d:31:aa:
88:93:e8:5e:d7:31:12:66:b0:0c:d2:4c:25:70:19:
5b:6d:cb:95:be:66:67:54:7c:cd:cf:bd:9d:0c:93:
0b:c9:7d:3d:d3:69:0c:65:b6:c5:e6:d5:60:9e:da:
1d:c5:64:b3:f8:44:11:44:7f:bd:a8:dd:da:f2:9d:
66:53:87:47:04:dc:17:e9:58:83:6c:6e:8e:19:b1:
27:9a:36:4d:f4:99:31:e7:17:1b:53:fe:cb:7b:07:
4f:77:ca:6e:4f:6b:a2:08:1b:0d:fa:04:87:e0:1f:
ff:5e:1a:fb:7f:f5:1a:11:b3:8c:78:3b:d8:01:d4:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F8:A7:AD:90:68:C1:E6:D4:8D:94:04:79:62:61:45:EA:C4:40:A9
X509v3 Authority Key Identifier:
keyid:78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f7:a9:1d:e2:51:d5:53:3d:7d:81:4c:bd:3a:7c:ba:6a:8d:
08:de:d1:4a:50:b5:e0:c8:45:f9:98:2b:7b:ad:3b:a3:de:fa:
85:cf:42:c9:bd:ca:1a:ae:4e:cb:11:6d:32:38:1e:e7:f8:f9:
af:54:4b:70:3e:6e:90:12:af:a9:0e:4c:0b:73:48:bc:68:ca:
12:7c:0c:23:1e:bd:ce:62:bc:ca:32:c0:83:6b:3c:f8:da:c7:
89:9c:ad:40:25:e4:75:c8:6b:b3:80:a3:89:71:98:d0:b0:22:
a9:a1:9f:79:64:4b:a4:8b:24:b9:d4:fe:65:71:46:e6:df:9a:
c1:36:bd:54:7e:c9:b4:56:50:71:9f:ee:26:7d:09:74:f6:72:
cc:0d:71:52:40:ef:ce:83:a0:ce:a6:e9:b8:8d:a8:e4:d3:90:
a3:ae:6f:b8:f6:17:2c:82:7b:74:cf:1e:fc:a6:4d:74:9a:43:
e7:c9:73:47:a9:26:21:bf:b2:20:90:d4:35:42:81:7d:48:36:
ca:9d:19:ca:44:96:f5:68:c8:d0:61:cf:b6:a5:0e:97:c3:b0:
3b:b9:a2:44:56:bf:56:e0:24:99:ec:34:62:26:b2:49:48:ef:
80:53:f2:85:7b:1c:2b:58:9f:47:fd:8c:bc:55:c5:69:d9:5a:
8f:6e:5b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:09:06 2025 by rpki-client