Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: JDkrOWCj+/vJ/be+LzajEELeXRaDwjiq2x7i55r46lw=
Subject key identifier: E0:95:61:F5:54:F8:26:A0:4F:28:05:B2:A0:7B:67:F6:DC:70:57:33
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 019A4D3CC68826A19877E61EADFC97E5C3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 1332
Signing time: Tue 04 Nov 2025 05:00:19 +0000
Manifest this update: Tue 04 Nov 2025 05:00:19 +0000
Manifest next update: Wed 05 Nov 2025 05:00:19 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: svJwM/d5jGAVAFs1/Ng3klHGY5sEkZfBvyNsabBAhJw=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:c6:88:26:a1:98:77:e6:1e:ad:fc:97:e5:c3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Nov 4 05:00:19 2025 GMT
Not After : Nov 5 05:00:19 2025 GMT
Subject: CN=e09561f554f826a04f2805b2a07b67f6dc705733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:f1:d2:59:67:9a:0b:b1:65:24:76:c1:a5:
29:4e:6e:a8:09:35:ce:02:6c:73:b5:b1:f9:6e:0d:
a7:73:70:df:87:d8:06:1f:0c:f8:4d:73:d0:ca:05:
28:e3:8c:9e:26:e0:4d:17:14:24:a6:4b:26:e1:07:
e9:6e:a0:8e:5d:b4:ea:e3:7c:1d:93:28:44:0b:fd:
06:c2:50:fb:9b:81:7d:7f:c5:ba:b6:03:44:55:29:
3d:72:cf:c7:a8:30:29:cd:10:1b:22:e4:6e:3b:ef:
5d:86:c3:f2:11:e5:b2:84:2d:2c:76:f7:3d:ba:23:
31:27:8d:09:26:66:6e:ec:9e:9c:45:27:94:33:4a:
6a:f2:a1:b4:87:b3:55:df:c4:14:2f:62:c3:3d:00:
7f:c1:ff:96:f5:43:06:30:a1:e9:d6:b0:c6:3e:61:
70:c3:55:16:6b:6e:bf:98:c7:3f:ea:26:bd:a8:56:
30:5d:ad:57:3e:ba:e4:3c:64:ee:ef:a4:f9:10:19:
22:e1:b0:25:6a:71:33:41:38:0b:76:8b:8a:be:dc:
d0:0a:b1:7c:dd:c7:e9:cf:3c:ef:e2:91:72:12:2d:
0c:fc:e4:d7:3e:47:3f:f8:5c:e4:93:df:4d:c8:92:
e4:c3:0c:67:6b:40:22:29:fe:00:c2:9f:a9:98:1f:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:61:F5:54:F8:26:A0:4F:28:05:B2:A0:7B:67:F6:DC:70:57:33
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:96:60:af:0a:14:60:79:22:09:34:c1:24:77:a5:14:b5:9f:
39:9e:90:93:a5:3f:53:55:02:38:8d:d6:fa:25:c8:65:93:e4:
23:28:97:6e:76:49:10:5a:b6:88:60:09:94:a9:33:97:f0:70:
22:90:be:b6:4a:7a:33:3f:d6:5e:b0:a4:44:d2:7b:49:8a:d5:
33:53:a2:17:83:eb:b3:13:38:a0:86:90:e0:7d:b6:9b:68:77:
3e:29:ac:a2:35:84:69:09:6e:8d:7d:3d:ec:38:db:66:71:20:
65:4a:23:49:98:cf:f3:ab:d1:0b:50:c1:15:e4:90:1a:a4:14:
54:d5:1e:3c:b5:74:1b:e9:0c:a5:ab:e5:ed:57:38:e4:cb:c4:
77:a1:56:16:d8:c2:fe:55:37:76:89:58:79:14:de:de:c2:b5:
1e:98:2d:df:c6:e1:47:d8:4e:ec:3c:a3:02:62:23:5e:5c:c4:
8f:97:45:ce:0e:b5:82:e6:32:de:5d:0b:53:55:73:ff:f8:1c:
1d:3a:3b:1e:f7:af:2c:0a:12:48:2d:5a:8f:cb:68:65:4d:d8:
8b:f9:60:e4:03:08:5c:bc:1c:80:e5:79:b4:12:db:20:97:cb:
a0:31:30:fe:7b:ee:66:29:58:ea:8e:52:53:77:d4:df:c8:32:
43:43:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:02 2025 by rpki-client