Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier: RY9JwjY6XKLDY6zxYetRKEfdPzuTqLYd5JqGpzs3SkA=
Subject key identifier: 8F:2D:A0:07:25:3A:FE:52:AF:81:CD:42:C1:A4:F8:2D:77:06:98:88
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 019A54BF3A4AC77C507B7FBECC9017E418E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number: 13C0
Signing time: Wed 05 Nov 2025 16:00:09 +0000
Manifest this update: Wed 05 Nov 2025 16:00:09 +0000
Manifest next update: Thu 06 Nov 2025 16:00:09 +0000
Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: IvccF0lPusuCqwhWw+r5xr9OHDyGVlXAKitC+Ot1l/M=)
2: f7kAf3KV7qb69Z3Irf9QrNtLyY0.roa (hash: jPD7nunzn9cSBTS41yie793CY1UObq7bXZ4qPAfEbsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:3a:4a:c7:7c:50:7b:7f:be:cc:90:17:e4:18:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: Nov 5 16:00:09 2025 GMT
Not After : Nov 6 16:00:09 2025 GMT
Subject: CN=8f2da007253afe52af81cd42c1a4f82d77069888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:b6:67:28:fe:fe:7e:a3:b4:1e:e4:b0:1d:
03:20:73:47:84:00:9e:d3:1f:cb:31:96:d5:e5:de:
91:78:e5:00:1d:d6:7a:4c:27:f0:9b:90:1c:e2:e9:
94:13:35:e8:4c:a2:b1:3e:65:71:7f:50:fb:a0:30:
62:08:61:a7:79:4f:9e:01:ae:f1:b1:bf:07:7d:d6:
1a:7a:96:be:a8:b9:ef:c0:c5:cb:88:25:28:58:5f:
a5:4d:63:79:71:86:35:93:00:12:9e:4d:d6:58:82:
ba:12:1f:af:19:80:c1:10:ee:ad:fc:27:32:fe:b4:
00:9b:c3:77:76:76:32:e4:f9:0f:65:0e:32:33:80:
fa:e3:0f:91:d1:57:ce:ae:e2:52:fb:09:d8:0a:0a:
45:cc:55:a8:19:f7:8c:4e:25:7e:a4:e5:d8:8a:e1:
db:85:a1:2d:6d:39:ac:1e:81:f6:9f:ef:5d:37:e3:
d7:00:ce:de:7a:bf:02:16:4f:26:6e:eb:10:3e:4d:
13:18:e4:7f:6a:c0:0d:69:37:8b:4b:7f:8e:66:dd:
3e:da:65:06:4a:58:3c:66:31:ce:22:56:09:d7:c4:
e6:96:41:ce:a2:4b:44:19:c1:a7:94:20:e5:f4:cb:
46:37:71:e4:74:fe:8b:bf:d7:28:5a:2d:3b:32:21:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2D:A0:07:25:3A:FE:52:AF:81:CD:42:C1:A4:F8:2D:77:06:98:88
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b5:1d:ca:ec:1c:77:5e:ed:bf:fc:4c:6f:a1:c3:09:64:54:
60:1b:c2:58:26:63:4b:a6:f7:5b:c3:11:86:c4:85:53:d3:69:
a8:8d:c0:91:32:58:84:bf:88:9a:91:56:fc:e4:54:0e:8e:fa:
54:56:3c:f7:aa:ea:6e:9d:9b:5a:04:d3:8d:24:9c:f6:0d:03:
20:25:73:f4:53:ba:da:93:00:64:41:06:38:ea:46:d9:27:1e:
f8:b7:2f:d0:90:89:a5:0f:20:1b:1d:b9:ed:2b:e3:fe:53:40:
9c:10:fa:e9:a3:49:92:9b:bf:87:5b:43:90:39:6c:e8:85:ac:
7a:a5:4f:48:49:4f:36:ce:0e:c1:2c:d5:cb:0c:dc:dd:51:89:
e5:c0:4f:91:5c:a4:51:28:5b:10:cf:e3:8c:93:e6:89:35:1f:
d7:fb:15:18:4e:93:e3:e1:c3:fb:cf:5d:73:cd:68:bc:38:82:
42:1e:bd:6d:c4:0b:dd:63:54:0b:d4:68:a5:c4:be:d4:97:a9:
25:ba:3f:d7:91:de:0f:a3:13:4c:55:9c:00:c1:d0:ae:91:4a:
16:70:43:12:8c:fa:d1:38:9a:55:f0:c4:36:a1:e0:a9:5f:c0:
ac:6d:db:8b:0a:46:e5:45:ed:30:f5:eb:84:e6:91:cb:8e:48:
14:96:a4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:49 2025 by rpki-client