Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File: E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier: F+Hhw87IyYPZb3IYtwPXvK6XXxBwFuO3xMa41WpNIUI=
Subject key identifier: 25:B2:FE:6B:FE:97:1F:6E:0C:82:47:27:18:E2:A6:A0:4A:41:DE:42
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial: 019A4D74109FDCFB8114D197307358D4E4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 06:00:43 +0000
Manifest this update: Tue 04 Nov 2025 06:00:43 +0000
Manifest next update: Wed 05 Nov 2025 06:00:43 +0000
Files and hashes: 1: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: hSwyydeSc8Csq3hIY9Qdhgkwq9RQAmBxA/kbm3zoZh4=)
2: i3utctSwXJrSkgd5Tbp5Iqklo-Y.roa (hash: we3OAkuZWKug5XOiU5EwCdxx9AgvZmIQX0TruehoLK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:10:9f:dc:fb:81:14:d1:97:30:73:58:d4:e4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Validity
Not Before: Nov 4 06:00:43 2025 GMT
Not After : Nov 5 06:00:43 2025 GMT
Subject: CN=25b2fe6bfe971f6e0c82472718e2a6a04a41de42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:a2:e6:ff:ff:4d:26:18:65:e6:2b:78:a3:
3f:8a:1f:8c:34:82:3d:c3:8d:df:be:c1:ce:e9:de:
f3:20:1e:31:b4:cf:5a:68:c4:c0:4f:3d:67:88:47:
ce:1f:3b:50:35:c8:0c:fa:f3:35:1f:ea:2f:02:7d:
bf:43:8e:b1:63:88:13:ab:e5:81:50:57:2e:32:e1:
e6:b9:54:eb:ba:d8:b3:06:fb:42:d0:97:9c:d2:6e:
2e:62:45:48:55:42:85:80:51:c2:1f:35:4a:60:56:
fb:6f:3d:8d:40:6d:f5:6c:58:c3:7e:bc:86:45:e4:
fd:db:c5:12:f7:9c:80:4f:12:d4:70:23:78:a1:a6:
17:0e:e9:65:53:5e:64:cb:52:c2:94:7c:fe:5c:af:
91:fb:b5:16:76:6d:72:e4:15:01:3d:82:c3:8a:ae:
98:81:11:df:9b:62:f2:97:3c:81:4d:c2:ea:0f:11:
9a:26:58:bc:13:64:5d:b4:7f:ab:7d:15:64:48:1a:
61:d2:da:65:6f:ce:7a:62:89:78:d7:6c:ba:9e:c7:
34:2e:3d:1d:94:3f:d4:03:dc:2f:c8:4c:79:02:01:
dc:b4:9e:92:d6:0e:e9:21:2c:b5:96:c1:d9:73:c7:
9e:b7:ff:24:46:37:fd:19:2b:fb:81:7a:51:b0:44:
57:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B2:FE:6B:FE:97:1F:6E:0C:82:47:27:18:E2:A6:A0:4A:41:DE:42
X509v3 Authority Key Identifier:
keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:57:31:8c:3a:eb:5c:b5:84:51:e9:cd:d2:22:be:bc:f7:67:
ca:a4:9d:40:86:24:36:f2:eb:63:9a:36:eb:01:8e:1e:08:2c:
f6:be:10:b5:2b:34:06:b5:16:bd:24:72:d4:aa:bd:b2:20:9d:
4e:96:76:95:31:97:6f:2f:2f:a8:a8:ad:63:4d:ce:41:23:4d:
80:f7:58:be:3b:77:ee:9a:2d:88:15:b1:7e:1c:5f:d6:33:a7:
1d:ad:1d:69:65:fd:ff:41:4c:03:85:42:ba:46:5e:9a:a6:d6:
55:46:cb:31:e7:a8:0f:cf:25:fb:b4:66:ef:81:ee:4f:2d:a7:
0a:be:8f:18:a2:56:7a:a1:89:11:f2:55:35:db:c0:b5:e1:db:
db:4e:17:f5:f2:26:15:55:de:27:4e:77:f0:73:59:56:09:8a:
6e:b5:fd:1e:91:8d:45:0e:eb:8d:f1:32:3e:69:6e:e2:a3:e9:
34:de:ff:e2:3b:55:c2:47:84:d7:a7:7a:df:2c:a7:66:a7:bf:
12:5b:9a:b2:4f:2e:fc:5f:b2:48:36:ab:db:91:6f:85:19:b6:
02:e1:76:0b:18:02:ac:0b:fb:12:1f:d8:ec:86:40:a1:9d:06:
22:23:39:7c:dc:42:99:73:06:df:d3:f2:43:fb:c6:51:52:cc:
5e:1e:13:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:16 2025 by rpki-client