Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
File: eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft (raw, json)
Hash identifier: FHYuPYsLzQytfLYW7sBctm638BqJTUztv/cMLzUJgdw=
Subject key identifier: D9:88:0C:6B:F0:17:A6:08:F1:B6:41:CF:44:BE:C1:C1:ED:41:3D:E8
Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
Certificate issuer: /CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Certificate serial: 019A0C38F4BA876BDD3AD6F5F417F52751B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
Manifest number: 0336
Signing time: Wed 22 Oct 2025 14:00:50 +0000
Manifest this update: Wed 22 Oct 2025 14:00:50 +0000
Manifest next update: Thu 23 Oct 2025 14:00:50 +0000
Files and hashes: 1: VFj5aKDFYxJGvJI6tYAdBkRUUKI.roa (hash: gWEnNe9T8U6TtdthLKRFfDmS/LnKXxsDWRpdZGNSQs4=)
2: eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl (hash: p126D7tjAWLOdTOIF9/dvOJIm6PeDfq9k4d3vz7oeIo=)
3: pCSKhYNkTR7SxUskaAwpFx35Lys.roa (hash: XnHKJyo6BAhxQvWoTo8yVgwue3aegX0njca6tfTmGRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:38:f4:ba:87:6b:dd:3a:d6:f5:f4:17:f5:27:51:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Validity
Not Before: Oct 22 14:00:50 2025 GMT
Not After : Oct 23 14:00:50 2025 GMT
Subject: CN=d9880c6bf017a608f1b641cf44bec1c1ed413de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cc:41:1b:c4:6d:5f:16:84:91:52:d0:72:af:
ba:6f:83:af:6b:9b:9c:a8:e9:9f:52:09:a6:67:b4:
10:a6:8c:61:eb:60:30:72:56:24:89:4f:31:fa:df:
b7:7d:1a:e0:19:f0:d4:f3:22:4f:aa:cf:58:dc:ca:
73:d6:ea:a3:ab:8c:7c:f8:c6:d4:2c:37:09:3e:3e:
11:5f:d6:1d:4e:8c:97:99:6e:47:37:7e:ea:6d:dd:
bc:3b:b8:a4:94:67:be:54:30:fe:9a:7e:0e:e0:5d:
6e:d2:91:08:7c:82:b6:72:5d:d8:0e:5c:87:a3:68:
c8:1f:58:4d:d6:71:54:8c:a8:69:64:82:28:89:f7:
34:ed:76:a0:09:56:9d:f7:95:ae:7f:14:53:5d:52:
fd:30:69:ab:b7:1b:69:a4:64:c5:b3:f4:1f:2b:f1:
41:ea:d7:2c:50:68:6f:ad:19:a1:1b:20:9b:85:f5:
1c:37:36:77:78:c0:b2:e5:50:37:53:da:39:ba:4c:
7c:14:b8:76:be:b1:9d:68:28:97:6a:e5:fc:7f:69:
be:48:31:0b:85:94:54:73:29:4b:f2:b9:33:c3:89:
33:53:ba:3c:4f:81:44:7a:ae:60:35:55:8c:c5:8e:
ce:dc:41:f7:0e:5a:52:6d:d1:84:c6:b9:67:34:a4:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:88:0C:6B:F0:17:A6:08:F1:B6:41:CF:44:BE:C1:C1:ED:41:3D:E8
X509v3 Authority Key Identifier:
keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d0:61:ce:aa:3b:d7:03:b2:a5:25:c7:12:21:f8:eb:e4:dd:
3f:0c:d6:8a:9f:6a:3a:5c:b8:83:cb:ff:40:7c:3a:b2:97:24:
b7:5b:a4:da:77:7e:37:09:3b:89:63:22:aa:5e:e9:61:55:5e:
f9:44:19:c0:bb:d8:f2:24:1c:be:77:56:ae:d4:8b:59:c0:c6:
70:41:0e:50:11:5f:91:c7:d1:24:7a:a1:39:55:03:2c:1f:a1:
f6:6f:e3:8a:ab:f1:ca:af:57:62:7a:8e:68:a4:95:4d:38:06:
83:19:31:03:ab:90:e3:9c:01:0e:8b:d0:9f:16:2a:0b:56:bd:
2a:a8:03:e2:3b:23:ab:2d:94:a4:5b:55:35:17:1e:5e:90:86:
31:00:df:fc:8d:10:25:5a:ac:58:6c:b9:11:b5:52:3e:ce:15:
f8:e3:78:80:5f:d2:34:f5:41:c2:65:22:da:f2:08:da:09:ba:
97:e3:cd:df:a5:33:06:bc:9f:6e:e6:9f:f2:06:33:8a:e5:bf:
a6:61:8c:54:f9:85:37:89:27:23:18:d3:b9:5a:cd:4c:be:6a:
c0:cd:45:bf:06:78:0e:0c:d9:ca:fc:b1:83:06:c0:e1:d6:bd:
84:19:b8:3f:28:d2:75:e6:57:5f:25:f9:1a:ed:f4:0f:6e:ec:
d6:fe:95:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 21:30:30 2025 by rpki-client