Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier: pHeV35zmqtwH/HtUnuQLTnZHrl0T2XgFE4lX6LhanPg=
Subject key identifier: A4:6A:39:49:B5:3E:4C:0A:C3:41:FE:DF:85:3A:FD:75:80:8D:0D:C7
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 019A50E36DFBE97E36072B9E4D783C8BF789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number: 0D38
Signing time: Tue 04 Nov 2025 22:01:13 +0000
Manifest this update: Tue 04 Nov 2025 22:01:13 +0000
Manifest next update: Wed 05 Nov 2025 22:01:13 +0000
Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: KqH20JqmLChA/FZzHr3N4nbjsdbFYj0h2HE8PJybJ+Y=)
2: aCl-dDRoPO0jTR0Ib_QeJDjdmS4.roa (hash: HeEdwIKN+ZitbMNTMVlHyhG8Cl/ej6Fq6W5v+LAsobU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:6d:fb:e9:7e:36:07:2b:9e:4d:78:3c:8b:f7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Nov 4 22:01:13 2025 GMT
Not After : Nov 5 22:01:13 2025 GMT
Subject: CN=a46a3949b53e4c0ac341fedf853afd75808d0dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ca:44:59:db:bd:cd:f1:b2:f9:34:be:67:b3:
d2:93:db:2a:75:8a:62:e2:88:c1:60:c4:4d:01:a1:
93:e4:4b:3d:1c:11:24:bb:22:16:a7:55:0f:f0:1f:
16:db:04:b4:75:92:d1:23:03:eb:2e:14:93:7b:5a:
e5:62:5d:92:fc:db:53:27:94:23:aa:4d:7b:d8:8a:
96:c7:3e:fe:e9:9f:8d:53:30:fc:22:46:33:74:b8:
39:3a:f4:21:8d:3c:71:dc:9e:25:78:87:fb:a6:e4:
d8:23:b7:18:3b:2b:57:a8:64:3f:b2:ef:94:3e:74:
7c:7b:4e:9d:cc:59:8b:60:71:ee:62:b5:34:68:54:
08:b7:c0:7a:9d:76:11:35:3b:4c:f6:38:d5:d9:18:
69:6e:31:f7:20:9f:42:ba:0a:0a:14:4c:7c:23:ae:
6b:12:6e:48:60:24:78:c0:75:df:90:8b:af:06:b3:
c5:9f:79:59:1a:fb:79:7d:71:2e:25:a1:a7:83:7d:
40:2f:a1:b3:1c:51:cc:52:ac:36:9a:b3:cd:d3:04:
91:80:f7:d9:4c:45:a9:ce:f7:54:65:0e:cb:31:02:
e8:ac:84:b2:66:57:21:72:a5:e3:e6:f4:bf:54:d8:
fc:2b:55:f8:af:31:f9:d4:af:19:36:4d:cc:85:6f:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6A:39:49:B5:3E:4C:0A:C3:41:FE:DF:85:3A:FD:75:80:8D:0D:C7
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:0f:e8:f6:fc:5e:5e:4f:ce:2a:6b:5e:06:db:b9:11:0a:00:
9f:91:b7:e7:b2:48:96:50:a9:9f:7f:88:5b:5a:e2:84:59:a5:
20:fe:8a:f4:1d:8a:92:d6:51:f0:97:05:45:53:fc:fb:f2:77:
8e:6b:a9:f3:d5:4b:0b:b5:bd:08:8b:e0:ff:1c:a0:52:18:7d:
9b:02:61:91:73:02:0b:1f:49:72:ef:78:91:2a:84:40:60:54:
b5:d7:42:18:43:8e:12:9c:6b:2e:ac:d7:86:20:9a:a5:dd:fe:
b4:2b:55:4a:cd:39:01:6a:de:38:d4:0a:a6:f1:5a:ee:43:73:
bf:83:ff:eb:3c:43:55:5c:40:d7:b4:20:fb:2e:b4:40:da:ba:
db:a7:5a:fd:76:ce:b5:10:6f:d6:1f:4b:8f:74:1d:be:09:28:
b4:31:ff:8d:63:79:34:b1:e8:2e:0c:83:2d:e9:91:b0:ff:06:
02:06:f0:b7:0b:93:5f:4e:6a:97:09:4b:b2:93:8e:0b:08:38:
91:bd:73:32:cf:e6:46:47:28:ef:99:71:f1:0c:d8:90:de:47:
79:ab:df:1b:94:82:1b:15:9f:1c:d4:b8:0c:ee:d6:71:99:eb:
e2:5e:d1:4b:ba:7a:bb:4f:38:2e:bc:c0:21:3e:16:9c:90:98:
bf:c0:3a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:30:10 2025 by rpki-client