Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: pOw9yPpxBJIIFwm9OtVwU7bZ5JO4uloBg59W0ZrGTGY=
Subject key identifier: 24:92:29:DE:00:4B:75:37:05:BD:25:13:8D:CF:23:F0:A2:FE:56:81
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 019A526345FEB99D056C22593A8DFC6EEA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 0E47
Signing time: Wed 05 Nov 2025 05:00:28 +0000
Manifest this update: Wed 05 Nov 2025 05:00:28 +0000
Manifest next update: Thu 06 Nov 2025 05:00:28 +0000
Files and hashes: 1: 7HrDROWVcljE8-8l6AcztjVNWWw.roa (hash: aPUy9G990LG8Gt7ev2zQpoBPfmmiK94lRTjU13MQxug=)
2: AC883ZSFeLZkC1mvfN3COR1ZIn0.roa (hash: yFCKOZ3uJ8W8rt1Xv99w8FDNXVYQbjjKrbhWZG8+e8A=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: 10OWUUZ13uhalwX0be15TMIy9pVMwHDx10DB1kSj2Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:45:fe:b9:9d:05:6c:22:59:3a:8d:fc:6e:ea:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Nov 5 05:00:28 2025 GMT
Not After : Nov 6 05:00:28 2025 GMT
Subject: CN=249229de004b753705bd25138dcf23f0a2fe5681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:98:3d:b7:1a:38:6f:a5:9b:61:64:eb:13:
19:33:f9:a8:1e:86:fc:fb:54:76:27:42:14:b3:26:
2b:77:2b:1c:cc:9f:29:dd:d2:9f:5e:76:68:f2:c2:
26:04:5e:47:97:19:90:81:44:75:f5:8f:6d:2d:a0:
96:58:f4:14:09:d9:63:de:06:bb:3f:47:2c:19:81:
72:45:16:81:e4:27:9d:a8:80:69:31:ce:1a:55:67:
68:a2:38:2b:a8:ca:73:e7:e2:6c:c1:42:ae:29:ac:
11:50:85:fb:dd:14:82:a5:8e:5b:bb:5a:ef:a6:17:
6d:21:50:64:c9:20:e1:f2:72:5d:e1:d9:0b:e3:59:
c3:68:3b:52:b6:41:f9:3e:de:55:2c:fe:a1:58:b2:
9e:20:55:d8:48:e5:d8:3d:04:4b:d8:cc:44:78:c5:
51:13:5a:96:43:09:02:25:c4:6d:6f:33:4e:f1:a8:
fb:6b:21:e1:b7:af:89:ae:cb:a9:c1:71:e2:9e:3d:
7c:14:dc:94:5b:7a:f0:29:d6:69:11:c2:ee:6f:e6:
ea:d0:53:8e:aa:cb:c0:58:30:ad:3e:85:2e:0a:d3:
78:18:13:dd:22:72:8f:0f:c5:4f:f5:ba:1e:5e:4a:
4d:84:76:4d:51:08:80:2a:6b:9d:48:d8:63:7d:b5:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:92:29:DE:00:4B:75:37:05:BD:25:13:8D:CF:23:F0:A2:FE:56:81
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:da:67:50:92:fc:0f:9a:7c:27:77:18:c2:56:98:92:9e:fe:
93:29:d8:37:4f:7d:7e:83:51:26:9f:51:ea:a3:ef:f6:71:2c:
89:c7:7b:d9:f0:9e:c3:d4:df:56:a6:3b:d3:76:c4:f1:ee:6f:
f4:9a:6a:7c:09:c3:b0:ae:28:a4:19:e2:b9:d0:d1:df:54:9e:
45:6f:fd:3e:78:5a:a6:bb:f8:0a:7f:94:e9:d3:52:dd:ad:79:
51:02:44:24:c2:59:87:f3:bc:01:63:31:17:71:6e:e5:cc:11:
db:50:a6:72:56:ce:ba:1c:d2:6a:fd:fe:5e:b6:ad:73:99:19:
3b:ef:2f:36:c6:5f:e2:6a:eb:c2:e5:b1:51:20:eb:2f:32:49:
38:9d:ba:2e:e8:07:f9:b6:d9:13:56:5e:29:0a:ba:e8:fa:77:
b0:4b:92:7d:b2:74:69:f4:9c:4c:6e:4f:6a:28:0a:2d:5a:d1:
e2:5a:7b:52:8e:cd:8e:bd:8f:36:5a:4c:f0:62:4f:69:83:88:
16:43:8b:46:dc:b6:6d:82:3a:dd:cf:1d:f4:ec:bc:9f:92:07:
fa:f3:96:39:21:00:dc:52:0b:80:1c:b6:d9:24:b8:76:56:40:
5b:cc:85:7d:e6:d8:1d:7e:a7:7b:bd:a7:9c:3b:35:48:70:a0:
2b:e6:62:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:39:16 2025 by rpki-client