Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
File: e4J6zGgKop3ayCOInYeGPkFLJBE.mft (raw, json)
Hash identifier: 2TmNlhUAa4JcFnnWniNPDOYDB7YQR/JEqkH3VFUWEaM=
Subject key identifier: 97:63:3F:46:95:88:6E:DD:AF:6D:D8:D6:47:55:E1:F6:4F:6E:21:CF
Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
Certificate issuer: /CN=7b827acc680aa29ddac823889d87863e414b2411
Certificate serial: 019A500751EAF9FD98BBFA01EAFDE0F6F21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 18:00:48 +0000
Manifest this update: Tue 04 Nov 2025 18:00:48 +0000
Manifest next update: Wed 05 Nov 2025 18:00:48 +0000
Files and hashes: 1: e4J6zGgKop3ayCOInYeGPkFLJBE.crl (hash: BzcG4D/HyIJv0gm/NaJ2mrWF/GWGWWX7yNUerbd6sHM=)
2: vAUqTPB1ggTD55ydvicj8MOXqzU.roa (hash: ANS6SkWw8/TFy8xaxFG7MJ7RE0vAnysZgfuBquUIKSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:51:ea:f9:fd:98:bb:fa:01:ea:fd:e0:f6:f2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411
Validity
Not Before: Nov 4 18:00:48 2025 GMT
Not After : Nov 5 18:00:48 2025 GMT
Subject: CN=97633f4695886eddaf6dd8d64755e1f64f6e21cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:0c:10:4e:4b:30:61:4d:39:67:68:29:c8:
2c:9d:5b:4d:d7:56:2f:29:ad:62:97:30:83:e4:38:
8f:d5:ea:9c:6d:68:da:81:0a:ef:e2:3c:f3:8c:90:
16:e2:fc:5c:49:09:a6:d2:23:81:3c:46:c9:9c:93:
1e:46:8f:c5:94:5b:07:a6:b0:11:34:a9:01:d6:da:
8b:77:66:1d:a8:5c:cc:00:56:48:99:22:f5:22:64:
d3:ae:2c:fc:49:fc:f9:fe:24:07:e4:c8:74:b5:7f:
c6:16:7c:ce:2e:40:65:b8:f9:6b:b2:14:43:67:43:
0d:44:34:90:45:e7:40:31:e6:8e:56:cc:21:ae:63:
35:ce:18:a2:88:0d:7d:3d:5c:b8:d1:4d:d9:6e:a0:
46:3c:69:bf:76:a3:21:fa:d7:d6:c2:33:44:fa:98:
a5:f1:3c:e6:9a:43:84:63:9c:60:6c:b4:d4:04:ad:
56:54:99:72:70:3b:08:d3:2a:4b:9c:e7:c5:88:d4:
15:42:f7:94:1b:4d:f5:fd:41:06:98:dd:67:e4:3b:
4f:57:b2:98:d9:1b:04:51:99:4c:fc:e6:76:f0:a2:
35:c5:af:2b:ca:d9:82:2a:ec:1f:d8:f8:a0:a2:04:
0d:f9:b7:08:93:2b:22:70:86:34:1c:13:b5:ef:99:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:63:3F:46:95:88:6E:DD:AF:6D:D8:D6:47:55:E1:F6:4F:6E:21:CF
X509v3 Authority Key Identifier:
keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:96:4a:51:1e:da:a8:94:16:98:d3:4c:fe:ab:92:d0:e0:7c:
80:ea:dd:4a:8e:db:d9:a7:23:2e:af:12:97:ef:41:91:6d:21:
5b:ec:d3:1d:6e:4d:12:90:34:b0:73:55:68:88:3a:c3:ae:b6:
81:31:15:f2:fc:b8:9a:90:3b:ae:3e:9c:5e:00:d8:26:b2:fa:
fa:19:9f:73:3f:ec:6a:95:86:4d:4c:d8:23:b9:8a:ca:ce:65:
e3:4c:91:a1:d5:86:54:23:b4:c0:fd:2e:42:50:94:2a:27:6f:
89:12:1e:fa:24:d1:d4:50:0c:a7:30:d6:79:04:86:00:0c:d7:
5b:df:9f:91:8e:07:3e:e8:22:27:ea:8d:3e:a4:67:b6:ff:54:
1e:fd:79:ae:b7:4f:ea:01:87:41:bb:ce:26:7d:b7:30:4f:13:
28:0c:d8:e4:71:5f:1a:79:32:4a:7b:54:33:18:e3:d3:f0:ed:
9a:65:05:83:76:55:99:5c:e8:8a:32:84:2b:41:95:ff:9b:74:
a0:7c:22:75:d5:21:e8:47:77:f8:cb:76:6d:85:d5:43:15:5d:
a6:f7:73:63:3b:b9:a5:ee:79:2f:2e:b3:be:b3:fd:93:c9:2b:
e7:83:b2:8d:c3:ba:b5:48:e9:29:55:fe:f3:2f:66:f9:ce:4a:
d4:3f:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:43:53 2025 by rpki-client