Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: y0zO86advo/pvZFlcYZU+q7Kr9ywZnzjVFDN6bHgX2o=
Subject key identifier: 5B:0C:9B:BD:F4:1B:47:8C:A8:EC:E9:2E:A7:43:FD:90:1A:87:6C:21
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 019A21E4C600E459818FF5467200A32C9E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 14A9
Signing time: Sun 26 Oct 2025 19:00:32 +0000
Manifest this update: Sun 26 Oct 2025 19:00:32 +0000
Manifest next update: Mon 27 Oct 2025 19:00:32 +0000
Files and hashes: 1: 1coqSPvIzRCZ1S6Z5EWORCEy_NY.roa (hash: HDpNqOrJZAq1XJhPSThcDVAo56N193hVEjKsFT9RCtc=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: QhlK6gG8/6R0NviJ+vLSehIrsAjxLLzIVMoL15yroiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:c6:00:e4:59:81:8f:f5:46:72:00:a3:2c:9e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Oct 26 19:00:32 2025 GMT
Not After : Oct 27 19:00:32 2025 GMT
Subject: CN=5b0c9bbdf41b478ca8ece92ea743fd901a876c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:4e:e4:53:15:a1:de:e5:f3:83:c6:11:f3:
9b:ac:c9:3b:d6:f0:37:5f:28:f1:ea:f7:9a:f7:6b:
58:89:88:1f:18:70:f7:0e:7a:3a:89:e2:18:30:cc:
a8:e9:b6:d1:c8:6a:e6:a9:ca:35:8d:f7:0b:68:08:
f3:34:d7:28:c7:4c:fb:99:8f:53:49:e4:53:b2:b9:
c8:40:d2:8a:47:10:a6:7b:cd:f6:d0:5c:d6:70:26:
b2:b0:55:df:58:61:0e:33:c5:a7:39:b1:6d:5a:d6:
1f:cd:aa:73:64:3f:b5:d7:db:9e:97:a9:ae:56:64:
2d:60:24:de:46:fa:cb:4f:52:11:42:91:73:b3:70:
5a:bc:c0:c7:a3:35:79:77:dc:a0:0f:07:28:94:20:
16:8f:1d:88:8d:a7:f2:44:30:1c:6e:40:a0:73:d5:
cc:5e:ff:f8:3e:91:14:ed:7d:a3:b7:2a:47:a8:35:
47:24:c8:05:7c:d4:b6:73:4a:30:68:30:b3:7b:11:
37:9b:eb:24:6d:eb:c0:bb:d2:15:18:5a:ab:31:51:
7b:74:6c:f3:5d:e4:b7:0f:25:95:be:cf:db:6d:a6:
7a:8b:4b:cc:12:14:28:60:ee:eb:5a:c4:65:c1:6c:
3b:c2:89:45:72:f6:2c:5a:2f:31:ce:13:1f:63:3d:
24:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0C:9B:BD:F4:1B:47:8C:A8:EC:E9:2E:A7:43:FD:90:1A:87:6C:21
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3a:d9:76:cd:87:71:c0:dc:ce:74:93:f9:11:9a:e6:e9:8c:
41:3a:c7:1d:86:90:6b:97:1e:8f:27:65:77:02:1b:a2:12:73:
d9:61:57:f6:9c:e3:78:f3:3d:8e:bf:f5:15:c9:a4:ec:99:bf:
81:28:5d:84:c5:11:67:bb:2a:2a:cf:bd:b7:1e:13:0a:24:7b:
d8:01:dd:05:c0:e9:3d:45:3a:ef:8a:fa:77:d5:a5:e4:31:55:
9d:83:b7:ac:75:c7:b4:c2:1f:2f:99:59:93:1c:0e:5a:e0:4c:
3e:f9:a0:ab:2c:26:f1:82:2a:b2:d5:e0:13:9c:e8:a2:93:e2:
58:45:04:67:5b:95:21:51:cb:71:a3:02:bb:92:68:f8:67:08:
53:9c:1e:62:41:3f:6f:82:6d:74:d8:fe:b1:ed:02:20:8a:f1:
9c:f5:bf:5a:f2:08:4e:e7:41:bc:b3:f7:78:ca:cc:6f:27:f9:
0e:44:50:e4:33:5b:c0:aa:16:99:62:00:87:c9:31:05:6a:96:
5d:7f:f7:ae:4a:f9:9d:a4:69:58:87:aa:de:68:2b:a9:4d:dd:
01:f8:1f:16:07:0c:11:0d:b2:57:68:f1:9d:8e:39:3b:ed:48:
15:e0:d7:f2:dc:03:38:50:f8:05:01:ae:2b:06:cb:fd:de:ff:
97:3f:5c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:57:24 2025 by rpki-client