Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: jY1WCtNQFJocGmKpP4ZYynrfaNrftwFBcJeSaMoKmUw=
Subject key identifier: 0D:35:BA:B4:4B:77:44:67:60:A2:94:8C:88:D3:97:90:B9:E5:7E:24
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 019A4F999239580D2FEBBA6E74E1D25681BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 155D
Signing time: Tue 04 Nov 2025 16:00:55 +0000
Manifest this update: Tue 04 Nov 2025 16:00:55 +0000
Manifest next update: Wed 05 Nov 2025 16:00:55 +0000
Files and hashes: 1: 4GeQc9KQXXi6xI1vB_7_1xuddrA.roa (hash: EUSBq2g9uve+neWandDVOfufL8m9jgeOZuElm8BWqRs=)
2: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: 3qNGRbKRXY1wZFnJUYrQrI1sAV1qT0P1kJpIK3eKb4A=)
3: mrO_skF5U6ZGJqbgAfNZfugggNM.roa (hash: yfwhNV2BqjohUdfQURFd8JsTx2XS1MSjZ6sAAemAuqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:92:39:58:0d:2f:eb:ba:6e:74:e1:d2:56:81:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Nov 4 16:00:55 2025 GMT
Not After : Nov 5 16:00:55 2025 GMT
Subject: CN=0d35bab44b77446760a2948c88d39790b9e57e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:58:e0:f8:28:49:22:76:fd:d8:3f:f6:c9:
14:3a:b9:a8:b8:cf:0e:c6:3e:ce:d3:c8:a4:d5:40:
b7:d1:53:62:98:ad:dc:7a:32:c2:2b:b7:4e:77:a9:
08:c4:1b:cc:63:f3:5d:7a:48:14:25:f8:7f:50:c8:
34:72:43:40:b8:c6:be:7c:cf:81:3a:22:bd:cf:c3:
5b:5e:32:53:5f:60:58:c3:17:9a:de:4c:9e:ca:c9:
52:d3:c7:53:6c:41:18:a2:ab:53:fb:20:19:08:f0:
87:42:6e:b1:fd:df:5e:0d:bc:58:8f:14:db:35:07:
72:ec:e6:1f:00:e1:dd:2b:30:f5:de:81:9c:e0:63:
3f:cf:3c:e9:9a:37:2b:9e:2a:d5:42:ff:f4:ad:92:
fa:d9:3a:aa:54:d5:e6:61:cf:0b:ad:8c:be:5e:2f:
5f:ea:f9:4e:0f:fb:94:d5:2b:cf:2e:7f:71:e0:d6:
18:f3:b2:4a:86:af:ab:9e:ff:f6:3d:60:39:64:e3:
30:55:6f:61:de:97:82:24:55:81:80:8b:71:bc:eb:
b6:e1:34:fc:38:2e:eb:7f:64:6a:d5:05:1a:fb:96:
e9:05:9a:e2:f3:1b:b6:e0:9d:9f:b6:6b:0d:cc:01:
3e:59:27:bc:13:9b:a5:c6:49:c5:a3:ae:35:35:99:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:35:BA:B4:4B:77:44:67:60:A2:94:8C:88:D3:97:90:B9:E5:7E:24
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:77:26:04:b7:c6:46:47:6a:cf:a5:30:7b:77:79:37:ec:29:
f9:d6:eb:62:3f:83:0e:0a:4c:26:4b:24:59:bc:12:4a:54:cd:
d2:73:ab:e1:84:de:ac:41:bd:a8:b7:80:96:25:7a:ee:c7:d0:
6f:0e:6b:59:0a:6f:82:af:43:4f:a3:80:ee:e2:e3:71:2b:eb:
4a:dc:c8:9d:f2:c6:14:6a:cf:85:ea:63:80:1e:62:47:45:4d:
0a:a6:25:60:bf:a6:b3:07:f6:46:2e:a8:02:e5:eb:bd:dc:8e:
ea:17:e9:7f:16:7e:ab:d5:07:fb:57:2b:9d:0f:18:6a:ec:b4:
58:85:b5:ec:f9:29:11:36:58:1f:76:70:63:8d:5b:44:03:80:
83:a7:9b:d7:bd:7e:6b:3b:ab:b6:bf:f3:5a:17:fe:ff:c5:7c:
81:de:19:ad:d8:45:e6:71:07:0d:8e:b1:6a:ad:94:ed:d3:00:
6d:3c:6b:bf:51:dd:eb:b2:6c:d9:c3:dd:5e:93:b0:fa:a6:c0:
9c:df:c9:42:f1:a9:c6:0e:16:0b:d7:e6:47:f7:b3:17:6c:6c:
a5:a5:f7:06:bc:4e:c7:88:51:39:e7:1e:a6:31:31:e9:16:37:
37:d7:86:43:8f:69:dd:50:d3:bc:df:cf:21:57:f0:fd:44:67:
d3:50:ae:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:21 2025 by rpki-client