Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File: Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier: C+yO52epbsePYS+kC2KSmP3MnYJ5M1VnXdl55w2xUas=
Subject key identifier: 27:5F:A1:03:50:7E:6F:E2:95:D7:BB:35:FF:C3:F5:68:77:2D:AF:EE
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer: /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial: 019A2C323334DF430B8E481CD062E2DA1313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number: 0509
Signing time: Tue 28 Oct 2025 19:01:18 +0000
Manifest this update: Tue 28 Oct 2025 19:01:18 +0000
Manifest next update: Wed 29 Oct 2025 19:01:18 +0000
Files and hashes: 1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: Ca9088pQ4BKv7t7Y1YR7UVESbTTp72SFTD1wyEyjaQc=)
2: Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa (hash: Bv3OWsc+AnulFasemob+5BPRBgZPZ3l/tFY/Jb5RKa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:32:33:34:df:43:0b:8e:48:1c:d0:62:e2:da:13:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Validity
Not Before: Oct 28 19:01:18 2025 GMT
Not After : Oct 29 19:01:18 2025 GMT
Subject: CN=275fa103507e6fe295d7bb35ffc3f568772dafee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9f:96:d8:ad:a7:56:65:ea:8b:34:54:f6:a6:
5d:5b:62:4e:d1:4d:63:06:4a:e6:d3:d4:c0:8b:21:
ee:f8:46:77:d1:a9:cf:6d:a9:3b:7b:1d:e3:33:a7:
8e:64:e5:cb:23:4b:b1:4d:4e:e5:3c:22:7e:4b:ef:
21:6d:30:7c:a7:02:85:04:7f:61:11:96:8c:f9:5c:
66:d2:39:93:22:db:6b:d6:8a:da:93:c8:ff:b4:53:
4f:06:02:6d:9f:33:97:7c:1f:df:f1:e2:88:3c:f5:
83:e7:ca:d4:15:45:5f:91:04:62:8f:77:f4:d7:65:
52:d6:42:e9:72:88:b4:01:a8:fe:b2:5b:df:c8:7f:
4a:78:cd:97:f8:93:e8:e6:85:b3:d9:77:18:b6:ab:
e7:5e:fd:3e:91:ea:6f:96:92:1b:44:8a:ab:16:5c:
ba:51:72:1e:d6:84:e3:a3:e6:f3:58:52:bf:d3:68:
52:7f:d4:c1:9c:02:19:2c:c1:9b:d7:29:35:0a:8b:
34:73:fe:e8:3f:a3:14:a8:10:0f:fa:0f:7c:b9:52:
0c:2d:03:6d:a0:91:59:c2:78:37:2a:2d:57:22:e5:
96:f1:27:56:cb:3d:ba:7e:4b:23:bf:a8:74:f9:e6:
79:58:ab:72:d1:ca:aa:84:2c:63:87:d4:6f:80:e4:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5F:A1:03:50:7E:6F:E2:95:D7:BB:35:FF:C3:F5:68:77:2D:AF:EE
X509v3 Authority Key Identifier:
keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4d:84:ae:69:e5:cd:db:58:f2:08:f3:8b:e2:b7:3a:60:de:
70:2a:06:6b:e0:00:98:84:a6:a2:c1:33:1b:7e:68:d0:57:b8:
71:5d:45:cd:69:03:cd:f3:e7:53:76:1a:1d:21:66:54:ec:ae:
47:d3:74:86:ca:94:a2:ce:19:34:5a:fb:8b:60:dd:ed:24:e7:
ad:3c:bd:c4:61:18:9f:2a:21:eb:4a:87:4d:a8:82:48:dd:9d:
f9:b1:8d:45:c3:82:2a:1e:23:17:53:3a:7a:08:e7:2a:a9:b4:
a0:4a:27:0e:44:0b:aa:8b:24:ae:7e:28:37:cf:5d:54:13:74:
4e:78:04:6c:92:0c:8f:0e:4c:c7:5b:16:a4:af:ac:19:75:f0:
0f:80:a7:db:48:6e:bd:0d:30:3f:24:39:c4:a7:ab:13:26:b4:
7f:c7:dd:41:85:77:ba:de:2b:6f:cb:44:3d:1c:e1:81:d8:1e:
08:24:00:83:b2:89:27:67:1e:3f:ed:15:45:e4:6c:54:10:94:
f2:72:18:2a:54:de:91:fe:0d:73:dd:70:1d:ae:24:b3:44:43:
24:0a:12:f8:34:cf:71:85:2b:50:1e:44:41:2b:64:c1:e8:34:
3a:e9:85:9e:45:d3:c1:f9:e7:ad:e5:f3:8c:a9:e2:9f:dd:77:
f8:7d:e2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:47:24 2025 by rpki-client