Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
File: e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft (raw, json)
Hash identifier: shVVpxgqWinLQ0R5M7dRr9p1KoxDmeee/Gdz3Geg9XI=
Subject key identifier: 33:55:0D:84:53:C5:8A:D1:6E:B9:D4:2E:7D:F3:00:46:99:8D:70:FB
Authority key identifier: 7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
Certificate issuer: /CN=7bd78d9140ad6e742e167063206582c1c45952bf
Certificate serial: 019A4D072D2D9F324F9D5A9E3CCA20E14AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
Manifest number: 157B
Signing time: Tue 04 Nov 2025 04:01:47 +0000
Manifest this update: Tue 04 Nov 2025 04:01:47 +0000
Manifest next update: Wed 05 Nov 2025 04:01:47 +0000
Files and hashes: 1: e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl (hash: 4ZMqfdWB5vOVIqSRTsErnyAZp9rycfXC/FtyglsNoL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:2d:2d:9f:32:4f:9d:5a:9e:3c:ca:20:e1:4a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd78d9140ad6e742e167063206582c1c45952bf
Validity
Not Before: Nov 4 04:01:47 2025 GMT
Not After : Nov 5 04:01:47 2025 GMT
Subject: CN=33550d8453c58ad16eb9d42e7df30046998d70fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:31:2c:23:1c:6e:bd:2d:c3:4c:79:13:c8:
41:dd:2b:df:d3:d9:6c:d7:9f:f0:48:12:c7:66:e6:
32:2c:08:49:3c:8e:1d:17:9b:a7:96:69:37:82:72:
e2:7b:de:72:10:71:9f:17:26:44:50:e1:45:dc:59:
0e:19:cb:94:60:0d:2e:a8:51:8a:92:0f:8f:cd:8f:
ed:3d:3c:4a:e1:54:55:19:09:e4:de:40:70:80:d5:
ca:73:15:2a:dc:d2:44:f3:dd:c3:10:3c:84:d7:c9:
2d:41:6f:5c:76:cc:07:2e:b8:97:e4:28:54:ce:83:
7e:9b:d8:36:9d:4e:c5:bc:9d:a5:32:f9:d5:6f:46:
98:0d:bd:4a:8b:1c:c1:42:ad:e3:33:1a:e5:f0:05:
96:cd:d4:11:1b:1b:af:8d:cc:85:10:05:76:06:52:
11:f6:e0:26:dd:a0:0c:c9:0b:e5:f2:f8:f2:97:52:
03:52:c0:af:ce:78:e1:10:1a:c8:96:1a:c0:28:13:
e3:25:4b:20:26:f6:d9:94:50:6e:81:7d:84:c4:ef:
9b:71:25:ca:3d:33:b2:0d:1e:72:70:8b:b1:43:4b:
30:0e:fd:41:50:b9:07:00:a1:43:68:b3:f4:b3:dc:
e4:d6:c6:1c:ae:d8:b3:b6:28:72:d8:e4:b3:c9:88:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:55:0D:84:53:C5:8A:D1:6E:B9:D4:2E:7D:F3:00:46:99:8D:70:FB
X509v3 Authority Key Identifier:
keyid:7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ba:43:8e:08:2d:9f:7c:96:fb:f8:e5:17:2c:7b:ab:f5:fc:
25:76:88:48:b7:b1:47:4b:fb:01:fa:d0:81:f6:c5:b7:fa:e0:
b2:1b:3a:23:ad:72:82:bd:4c:ef:4e:30:de:ef:76:e9:5a:0b:
f4:e3:2e:b3:3d:2c:68:61:5a:9d:78:fc:24:91:45:7b:0e:72:
aa:e7:36:48:f6:12:9c:b3:ca:7b:fa:06:ae:2a:fc:a7:d4:84:
cc:ce:f1:45:85:50:ee:6a:71:d3:50:6a:a4:39:20:ff:e4:5e:
b3:92:00:b4:43:90:c8:22:b6:cc:f9:20:f0:95:f0:0e:e7:94:
d8:e5:9f:9a:4a:9a:b1:56:c7:4e:75:40:d7:11:0a:2d:df:f3:
30:27:46:f1:f4:be:08:51:7f:eb:f4:83:b7:99:e5:10:9b:be:
bd:6d:37:cd:5f:5f:2b:95:1d:04:16:ae:19:62:4c:52:36:34:
f1:85:9c:3c:ef:25:da:b9:31:24:86:07:ee:83:0b:e4:f0:e5:
ab:b4:39:36:c9:c6:8b:f0:52:cc:3a:a9:42:af:25:b3:82:d5:
02:cc:f6:ef:9e:f1:95:78:89:e2:1f:8b:cf:3a:53:b2:6c:7c:
9a:5f:e9:17:d4:4b:fe:bd:9f:22:41:48:d6:93:99:9e:72:94:
d6:2c:e0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:14 2025 by rpki-client