Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
File: eojTDTUC0d-66TDV6pzJ1yY-lQg.mft (raw, json)
Hash identifier: FT5phW4vUC48vSsWcs0xoYK9Ayq5wlX9IKQJ+i/H7nE=
Subject key identifier: D8:B3:5D:21:CF:A3:06:0F:40:DE:E4:0D:C8:5A:F8:E2:11:7F:3F:9A
Authority key identifier: 7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08
Certificate issuer: /CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
Certificate serial: 019A72CA75009F6B1761740AF0428C714B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
Manifest number: 0415
Signing time: Tue 11 Nov 2025 12:01:02 +0000
Manifest this update: Tue 11 Nov 2025 12:01:02 +0000
Manifest next update: Wed 12 Nov 2025 12:01:02 +0000
Files and hashes: 1: W8sGLPfZJfk-AE8QSt5pW51bYBc.roa (hash: WTLS8/lHH8tSlHx/vjXHMnAP1canB1yYuL3OZnBm/0I=)
2: eojTDTUC0d-66TDV6pzJ1yY-lQg.crl (hash: Qq28X4OsHbFdQ2s8Vy4hipBWR11VGLaPp5tHdSjX8d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:75:00:9f:6b:17:61:74:0a:f0:42:8c:71:4b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
Validity
Not Before: Nov 11 12:01:02 2025 GMT
Not After : Nov 12 12:01:02 2025 GMT
Subject: CN=d8b35d21cfa3060f40dee40dc85af8e2117f3f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:87:03:df:81:77:00:0c:54:89:27:3e:f1:
3e:61:4a:92:ab:51:5c:0e:b9:ca:02:70:54:cb:36:
0d:4e:d6:63:17:40:5a:a4:6b:af:ad:11:6e:e1:b8:
be:07:4a:fb:96:fb:8a:75:05:c1:db:c5:21:ae:63:
39:65:76:45:c3:6e:66:0c:88:af:c6:e3:93:4d:9c:
b4:e3:1b:99:d0:12:73:1a:38:f4:fa:08:cd:21:d2:
7d:79:97:04:b4:48:8e:bd:fb:56:ae:db:5e:b7:d7:
93:22:4a:36:03:5f:11:fc:f7:36:69:7e:85:14:9b:
aa:61:9e:f0:6c:b0:fb:eb:fc:42:cf:55:a7:7f:cb:
13:fc:2b:7b:d6:70:c9:a7:e0:d7:40:25:d8:30:76:
31:0c:1a:3d:53:82:f3:09:b2:3f:30:97:44:ab:e2:
40:3c:b7:e5:db:be:38:3d:60:10:f6:14:f0:4d:b9:
81:e2:82:b0:3e:ad:9e:6c:f8:3c:55:df:9e:51:3a:
8d:76:8e:ab:60:07:57:d7:6f:ba:48:65:5d:7e:1c:
6e:50:db:37:d6:3d:87:e4:66:56:54:ed:e0:5b:3d:
57:f2:62:a1:d6:60:e0:58:be:12:53:d2:bc:68:d0:
52:60:30:cf:75:36:4f:cd:dd:c3:50:3a:c7:00:0a:
67:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B3:5D:21:CF:A3:06:0F:40:DE:E4:0D:C8:5A:F8:E2:11:7F:3F:9A
X509v3 Authority Key Identifier:
keyid:7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7c:47:d4:8a:15:b8:bc:c3:10:52:51:cf:d4:0d:1c:ef:d4:
da:ff:67:1e:cc:2d:93:6f:07:af:7a:65:ef:fb:9b:54:2f:44:
d1:79:e0:e6:71:f1:fe:1f:d8:f4:56:b1:7d:45:55:9a:10:4f:
11:fb:ba:ca:8c:c8:6a:a1:56:65:db:38:90:3a:ec:e0:10:2e:
bc:39:3e:29:2b:a6:79:ea:75:a8:cd:95:f0:21:b9:11:55:dc:
98:2b:61:fa:c6:2e:62:e8:45:e3:4e:98:9a:c8:03:7c:90:6f:
6f:e8:aa:e6:8a:ce:4b:1b:c7:0d:db:18:f9:2b:ae:11:36:e5:
4a:6f:a9:ab:dd:d3:87:e7:7f:f6:5d:c4:b0:1b:e0:c0:0c:e1:
ed:c2:af:1b:49:38:d7:31:84:73:32:4b:61:4b:c3:df:bd:71:
7d:60:e0:38:d6:7d:d7:4b:96:61:7a:55:cd:b9:e4:40:6b:c8:
39:6f:4d:8e:c1:82:63:45:2f:dd:ea:d0:c0:e5:03:cd:7f:05:
5b:b6:2f:9f:60:06:af:0c:a5:ce:23:46:a5:03:d4:d5:c3:c4:
ee:9f:77:03:77:68:ed:7b:a1:ac:84:f3:4a:e1:45:6d:4b:b4:
09:f9:4b:83:21:f8:1d:6a:d1:3c:27:e9:94:01:50:80:78:34:
9c:ce:08:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:24 2025 by rpki-client