Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: yi3whmWpb9yucVxeSJs64HBKa+JwI7hf8SNKIngzw7U=
Subject key identifier: C8:70:ED:EA:51:A6:0C:C5:EC:58:02:8C:B6:54:80:CC:64:51:B0:EC
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 019A515052D5D16BFD81DE3668A06C385E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 0DEF
Signing time: Wed 05 Nov 2025 00:00:09 +0000
Manifest this update: Wed 05 Nov 2025 00:00:09 +0000
Manifest next update: Thu 06 Nov 2025 00:00:09 +0000
Files and hashes: 1: NdVYKLIGP2QzOZX__MqzIgHzXXA.roa (hash: JpTAajbqtuyws0Zyn29UdijI9/GnNDr8LpptWtQUD6A=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: Cl4Odkq/PytbAq2ds0MZ/RrtBMtCUmbKnAJ/XHDthrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:52:d5:d1:6b:fd:81:de:36:68:a0:6c:38:5e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Nov 5 00:00:09 2025 GMT
Not After : Nov 6 00:00:09 2025 GMT
Subject: CN=c870edea51a60cc5ec58028cb65480cc6451b0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:f8:45:b5:da:c2:b0:d8:69:90:7a:00:aa:
70:32:14:45:a6:3a:ee:12:53:2b:b3:0e:12:0b:19:
d6:bb:d8:28:33:0f:95:20:be:80:d9:0d:85:41:aa:
48:d0:d1:82:c0:e8:9a:b7:af:41:42:0c:9b:bd:26:
80:23:33:68:0a:1d:ed:50:80:c3:be:4a:96:00:70:
91:2a:c0:ab:49:18:e6:75:89:b1:a2:03:b6:9a:75:
e6:fa:96:f5:ae:7b:20:37:58:43:ee:b9:9a:14:57:
70:16:87:c0:61:34:86:d4:96:39:dd:3b:10:f6:7e:
62:74:77:8f:e7:c4:49:67:87:4d:59:48:e6:f2:0d:
59:72:8c:de:c5:a7:11:1a:f9:32:01:04:93:f9:87:
57:56:72:b8:e1:fb:d0:e4:2b:27:5b:6f:8f:4e:0a:
ee:1a:7c:74:13:11:4e:74:d3:a4:e2:c6:ee:c3:15:
e3:bb:10:14:d2:e6:5d:28:17:c3:be:54:d4:47:a2:
28:3b:81:1d:da:d7:c4:1c:ee:6d:2b:c3:f4:ea:53:
b4:36:70:6c:98:0b:37:cc:4d:63:84:8f:13:27:bb:
eb:a9:d7:4a:38:4a:88:d4:4f:ee:09:4c:b2:86:0b:
38:99:2e:e1:b9:2b:3d:26:5e:ee:bd:5f:8f:ce:ad:
9a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:70:ED:EA:51:A6:0C:C5:EC:58:02:8C:B6:54:80:CC:64:51:B0:EC
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e4:ff:75:4f:1e:a1:29:1b:41:84:6c:30:60:9c:37:62:3e:
73:04:3a:5b:3d:b4:10:75:c2:48:8c:97:43:df:54:b5:1b:37:
62:47:c6:02:5f:d5:4d:c1:2f:ce:e8:69:1e:66:e6:3d:0a:10:
30:77:21:15:a1:20:3e:3d:39:c0:f9:8b:aa:ae:a9:8b:a5:2d:
de:a4:31:cf:41:5d:77:20:91:3b:20:55:67:ac:52:8b:d2:f1:
8c:63:bc:0d:d1:11:10:27:ea:6d:4b:ad:9b:51:b5:9c:38:8c:
0b:30:f7:1d:72:a0:89:de:8d:f8:3b:48:c3:d1:ce:70:af:f9:
4f:ff:18:2c:69:f8:7c:e3:4e:6f:dc:fe:5f:a8:5a:53:0f:77:
57:a8:a7:3b:de:83:61:90:86:98:4d:ae:29:bb:d6:84:c9:f5:
b1:7f:c2:aa:b1:0b:8c:a5:73:45:8a:ef:bf:b7:ee:05:4b:5f:
a1:fc:55:fa:ac:7f:8e:06:31:03:b4:b9:2e:15:11:29:7d:56:
17:05:63:31:55:66:1d:ca:65:27:84:0f:7b:d5:34:cf:c2:cf:
31:14:1b:23:2f:3c:ca:2b:88:e7:ae:e0:90:6a:8c:c6:c4:ea:
b0:5d:01:05:2f:0f:0e:a5:99:02:bb:71:a6:4a:75:4e:38:02:
f2:64:8b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:15:56 2025 by rpki-client