Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File: ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier: Wo0zFUSK3KU2MKv0FYEQY9RTeEcoWtRTmCdgC8KAfK8=
Subject key identifier: 3D:8C:25:57:96:B7:1C:8B:F7:92:BD:62:D3:0F:17:CD:2C:7F:B3:FE
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer: /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial: 019A4D07A56AD509496DF03C58E1B7BA3C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 04:02:17 +0000
Manifest this update: Tue 04 Nov 2025 04:02:17 +0000
Manifest next update: Wed 05 Nov 2025 04:02:17 +0000
Files and hashes: 1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: 9BNdqG22rNjV+xObiKEPUGbr/06kMEpI/nPu5dea36s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:a5:6a:d5:09:49:6d:f0:3c:58:e1:b7:ba:3c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Validity
Not Before: Nov 4 04:02:17 2025 GMT
Not After : Nov 5 04:02:17 2025 GMT
Subject: CN=3d8c255796b71c8bf792bd62d30f17cd2c7fb3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:61:5c:b2:a4:54:ae:85:3c:3e:72:69:81:
2f:74:70:28:1a:a5:cb:59:09:ee:fd:8b:0a:90:0f:
6c:f4:b7:3c:42:40:56:02:a4:66:5a:98:53:b4:49:
a6:b9:2b:93:37:c9:13:78:5b:57:ed:84:e4:f7:d7:
ae:cb:cb:a8:54:92:a2:1f:d8:dd:36:e9:84:45:70:
b4:d0:dc:bb:0c:5a:ab:61:99:42:1d:39:a7:51:9c:
bb:b6:84:10:cd:6b:41:a8:c7:05:a4:63:8e:fc:bc:
87:67:49:2b:92:22:cc:c8:83:fe:71:60:d3:6c:f9:
a1:dc:ae:0f:53:1f:26:b3:fd:e6:39:7c:c2:41:62:
ce:c3:78:3c:20:38:92:34:b4:f3:c4:93:b7:03:10:
60:8b:70:1a:0c:2e:fc:57:fa:02:92:af:ce:aa:d4:
f3:fd:36:58:7d:ed:16:77:86:fc:73:57:6f:51:60:
3d:c9:19:ff:15:14:a9:c8:90:31:a9:02:16:68:ca:
07:0b:f6:84:1c:02:ae:f6:33:3a:22:38:c3:c7:de:
ae:12:c6:e6:e8:ad:39:17:d1:54:d9:9e:17:ea:1a:
86:a9:3b:b1:52:3c:71:4b:fb:75:79:07:bb:d5:ac:
16:62:99:bc:a8:7d:db:4c:dd:90:dd:4c:97:a9:03:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8C:25:57:96:B7:1C:8B:F7:92:BD:62:D3:0F:17:CD:2C:7F:B3:FE
X509v3 Authority Key Identifier:
keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ef:b8:11:8c:f7:fb:b6:77:79:85:a2:a9:87:72:75:08:d4:
d5:db:a5:42:0b:05:25:af:2f:a5:22:e9:ec:b7:52:c1:f0:6e:
87:a6:66:33:5d:75:87:cb:85:9c:fc:9f:f4:e8:b2:ea:54:86:
66:d3:05:e2:11:a9:38:91:8b:e8:a3:85:46:13:ed:65:05:1f:
d7:e4:7e:7c:6a:18:f7:4c:74:6d:21:dd:34:51:17:1b:fb:a8:
12:71:fd:2d:c1:3f:4f:01:88:67:4b:ba:a8:54:e3:6e:35:28:
d5:97:83:24:85:59:57:a4:3d:ed:6b:90:e8:79:af:16:be:ef:
77:a7:91:61:6f:e6:94:34:e7:9e:47:ef:02:fa:e8:6a:85:61:
9c:de:6e:45:fe:6e:47:fd:3d:78:47:2d:30:26:86:71:d8:2d:
13:87:ba:cd:0b:42:cb:dc:a3:ae:8a:af:cf:2b:fc:89:72:da:
f9:64:54:a8:38:51:e8:1a:1f:95:05:73:50:7a:38:09:b6:6c:
98:71:82:bb:83:0d:01:d0:8f:19:c4:e1:c4:68:e9:8c:17:7d:
47:32:1f:27:19:75:d5:c9:de:52:4f:dd:5c:90:91:13:ee:0f:
55:93:06:2e:35:62:ca:a8:b7:13:16:ef:be:cf:2e:86:63:bb:
a2:a7:5c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:21 2025 by rpki-client