Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: wif/5m+lVroNSxkxLUjFd5MqDces1KMvhsIt9EpCgxA=
Subject key identifier: C5:58:BB:23:66:27:36:C0:6A:FE:7A:02:68:C6:34:89:6F:55:84:26
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 019A5375E7F794B780D869354D7ABA467050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 10:00:27 +0000
Manifest this update: Wed 05 Nov 2025 10:00:27 +0000
Manifest next update: Thu 06 Nov 2025 10:00:27 +0000
Files and hashes: 1: A2mB37rJmerIuB24l4Bs4lzgXqo.roa (hash: ndaVFcXFO0lVM0GIop/3BjpE63WSZdctz0XY3LjKsVI=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: jcEUG2BQdsXTubjEjKSXdtkxDc7Cz2gr78FoB3ZTrKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:e7:f7:94:b7:80:d8:69:35:4d:7a:ba:46:70:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Nov 5 10:00:27 2025 GMT
Not After : Nov 6 10:00:27 2025 GMT
Subject: CN=c558bb23662736c06afe7a0268c634896f558426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:c0:07:24:5b:c6:e6:54:ec:15:5c:47:ca:
25:d2:e6:cd:41:ab:b3:a3:e5:e1:f2:dd:d9:60:c4:
25:3c:f6:74:43:1f:e2:db:47:b2:c1:0d:75:21:fb:
b1:89:76:8a:f6:16:f3:38:21:9c:af:22:f9:1d:12:
15:0c:8b:ee:92:da:e9:d8:e8:54:d0:51:72:26:d4:
8d:d2:7e:9b:f4:6c:45:77:39:59:f9:b3:a7:97:4e:
a8:9f:fc:63:f1:6d:7a:b0:a9:eb:b2:5a:cc:c7:b0:
52:82:87:91:77:e7:eb:ba:7d:b0:01:2e:f4:a9:d0:
16:25:ce:e6:90:73:59:b9:ec:e6:2e:e4:32:4f:5b:
04:b9:8e:61:d0:a5:13:c0:cd:95:b0:1e:76:f5:12:
e6:fe:b9:27:10:27:6b:e0:c7:78:0c:9d:da:16:d1:
6e:f9:b1:f4:a2:1a:fe:c4:94:c7:40:46:7e:47:7a:
b7:78:06:20:9a:07:b9:69:21:32:a4:b2:90:57:49:
19:62:be:8a:54:0b:97:b3:a2:30:3a:a0:ce:aa:9b:
27:e9:ad:96:07:a4:ab:72:58:37:d1:e2:ec:cd:64:
00:5d:48:79:04:29:5e:a7:ec:6f:38:83:db:39:9f:
e9:b1:33:d1:49:68:4c:12:a8:df:cd:77:fb:cb:6b:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:58:BB:23:66:27:36:C0:6A:FE:7A:02:68:C6:34:89:6F:55:84:26
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f8:40:31:ae:48:87:31:aa:7a:d2:bd:81:1d:49:b3:27:9f:
44:98:3c:65:34:0c:5a:51:86:77:9d:28:66:94:13:e4:49:1c:
c5:94:81:0b:65:ec:71:0a:93:f2:c2:01:bf:41:6b:40:75:dc:
8d:30:84:c7:78:9c:c7:ba:c2:a9:35:cc:34:c9:ba:5e:0f:fb:
13:ef:9f:81:70:51:4e:77:54:bd:81:b4:20:80:bf:12:91:04:
b6:c7:63:84:e8:5a:5b:35:c7:24:91:19:d2:5b:3e:f0:60:d1:
35:79:8d:26:20:81:0c:41:42:64:63:ea:94:51:7f:20:77:f6:
c0:72:c5:a8:34:b8:51:26:ff:e6:8c:0f:41:cc:69:b2:b2:4e:
01:c6:55:43:10:5f:6a:be:37:d5:d0:91:32:1a:53:da:7b:37:
92:c2:09:e7:ac:d4:b9:57:7e:43:d1:39:13:86:87:2a:66:7b:
8c:8e:41:3b:b1:ad:55:3b:02:de:7a:6b:ad:c2:7d:64:90:00:
3b:58:1a:06:59:d6:81:50:aa:3f:5b:f2:6c:20:b1:b7:ca:23:
d6:0c:82:66:66:89:d4:23:5b:ad:30:cd:4d:4c:60:36:f8:88:
c9:0c:30:b9:38:cf:4d:c0:dc:03:17:4a:28:05:b8:09:3c:2d:
23:7d:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:58:32 2025 by rpki-client