Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
File: ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json)
Hash identifier: CXjfNfJsngit2WpPA8bneIQ6lVdD6gr5J0Z8xAcCZ4I=
Subject key identifier: AC:12:96:E8:93:A7:83:48:D6:F6:D5:D5:4D:59:9A:E4:6D:89:8D:B1
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Certificate issuer: /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial: 019A4D73AAC23D1DCDB5F63119ADBAD5FB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:17 +0000
Manifest this update: Tue 04 Nov 2025 06:00:17 +0000
Manifest next update: Wed 05 Nov 2025 06:00:17 +0000
Files and hashes: 1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: wceteobh6vevFdMOG2jX7/OFBStxNEFMY7k41yCVFgg=)
2: LbvGosx0sr1hJwd78ZXVswGnqXM.roa (hash: zrhSsms7Xu5tLT+xCwRwdoOuFODUIch3dzNZbH3HeT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:aa:c2:3d:1d:cd:b5:f6:31:19:ad:ba:d5:fb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Validity
Not Before: Nov 4 06:00:17 2025 GMT
Not After : Nov 5 06:00:17 2025 GMT
Subject: CN=ac1296e893a78348d6f6d5d54d599ae46d898db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:dc:f6:3f:40:d4:db:f1:5a:e4:a6:e0:84:
0b:8a:70:bf:92:f6:d9:9e:f7:de:c9:90:67:c5:31:
b9:94:c0:67:27:25:d5:30:13:04:ec:68:9c:16:f1:
a3:56:8a:df:c5:a5:08:cc:f2:9f:56:6a:d7:49:77:
34:80:4b:38:08:e8:e8:03:33:ab:db:a5:d7:8e:80:
79:26:49:ec:c9:55:92:c8:2c:77:99:45:81:87:e2:
50:26:e2:ec:d0:c4:0d:d1:22:7a:8a:d5:07:ae:85:
a7:c4:da:fc:36:3f:10:ca:19:67:46:a7:84:3a:c5:
32:c6:fc:0e:06:22:89:55:22:3d:e3:30:27:47:33:
63:c6:46:85:8a:4b:ae:fa:ae:98:b4:37:3b:eb:88:
c2:57:e2:1f:c1:b2:52:af:c4:06:27:70:33:0c:34:
78:6b:e6:a2:de:30:47:0b:9d:c9:6a:0a:21:40:aa:
4e:ec:8f:43:61:56:6b:5d:a2:eb:6e:17:76:19:9c:
10:bf:60:8a:37:bf:7a:a5:ad:65:0e:ca:0b:f7:0b:
1c:6d:90:b5:3b:7b:ab:ae:27:9d:b0:1d:bc:31:ea:
15:05:77:49:85:eb:de:3b:56:65:3e:2a:c5:bc:4d:
18:0c:f5:a3:10:71:52:01:75:75:7e:5b:77:8e:a2:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:12:96:E8:93:A7:83:48:D6:F6:D5:D5:4D:59:9A:E4:6D:89:8D:B1
X509v3 Authority Key Identifier:
keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:57:69:0e:ce:70:f1:2a:e3:26:b1:9c:c8:43:19:da:3a:af:
81:e3:a7:17:3e:d9:49:fe:2a:4c:9d:45:98:b4:fd:c9:64:27:
57:33:7f:84:cc:7b:13:de:71:d6:1a:7b:e4:48:eb:16:a3:85:
73:b2:ce:20:8f:41:c3:16:e2:a6:d5:19:43:b5:b3:ee:49:23:
7a:9c:d7:5e:99:aa:37:9d:0d:c9:10:19:e8:65:1b:ab:c4:42:
83:b6:ed:87:83:28:89:19:7b:f3:21:1c:29:f3:2f:7e:c6:9a:
00:35:e0:f9:5e:97:10:ff:29:34:1b:3d:05:ee:cd:ad:0c:f3:
9b:b8:21:a7:1a:f5:83:1b:c6:a6:c0:18:1c:93:30:2c:a8:0f:
7a:b6:83:92:e0:b4:41:f4:80:9b:90:35:27:7f:c9:70:e8:84:
dc:27:4a:c4:51:1f:f9:0e:30:3e:3f:d6:dd:c6:fa:bc:c0:ba:
9e:93:e1:5a:54:f9:5b:b7:b5:34:12:8d:c4:7b:c5:25:20:10:
4f:bb:d1:83:cf:35:80:4b:1a:dc:a3:e0:af:df:5f:cd:22:fe:
9c:86:bb:77:04:a0:aa:df:de:f5:61:d8:89:3b:b6:bf:1a:5d:
91:63:82:4f:d0:30:36:f6:3f:6a:22:6f:5c:01:94:a2:6e:b5:
4e:ef:ec:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:26 2025 by rpki-client