Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
File: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft (raw, json)
Hash identifier: DKPSti9b+IIAGG+vEFIuLdhjjL+8r7fN3ln7zkjE4GE=
Subject key identifier: EC:DA:78:28:9D:34:A0:EC:8A:7E:D0:AE:F5:46:25:68:66:96:70:A7
Authority key identifier: 13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
Certificate issuer: /CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Certificate serial: 019A4F991B5187D0B46AA184B9C0177CB19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
Manifest number: 1707
Signing time: Tue 04 Nov 2025 16:00:25 +0000
Manifest this update: Tue 04 Nov 2025 16:00:25 +0000
Manifest next update: Wed 05 Nov 2025 16:00:25 +0000
Files and hashes: 1: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl (hash: Ff3A9E4/yVz7ByHP4p8HjnCDTntJ/eAiEh7z5Ui245U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:1b:51:87:d0:b4:6a:a1:84:b9:c0:17:7c:b1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Validity
Not Before: Nov 4 16:00:25 2025 GMT
Not After : Nov 5 16:00:25 2025 GMT
Subject: CN=ecda78289d34a0ec8a7ed0aef5462568669670a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7c:0a:90:5d:21:61:83:bb:7c:26:d4:f6:f9:
04:4b:41:49:b6:d5:f2:20:c3:45:5c:f0:0b:c2:2b:
06:17:24:a1:8e:2e:30:cf:c3:d4:30:83:ad:4b:85:
fd:bd:e9:87:c4:9e:b1:2f:69:12:96:b4:e0:0a:45:
4b:4f:7f:d0:7a:89:2a:a1:6b:0f:d7:74:5e:25:76:
30:7f:51:ea:08:b3:6d:53:83:4c:d9:2f:16:55:d2:
eb:8b:9c:74:e5:1d:59:78:83:bd:52:6d:17:2c:5c:
ee:58:c9:26:d9:62:98:7c:07:5c:1e:fd:08:ac:72:
34:ff:e7:f0:b8:1b:af:74:58:92:ae:1b:94:30:4b:
12:a3:83:48:9b:71:cb:2f:1c:8f:8f:31:03:eb:24:
73:89:f8:0b:f5:6f:a8:4e:26:24:a8:fa:1c:14:15:
47:6f:b1:56:99:4d:00:eb:53:7b:f3:ce:72:96:ed:
a2:c4:f1:95:55:9c:9a:64:e8:17:e8:66:dc:3e:0f:
0f:e5:bf:66:37:a9:b4:e8:22:a2:3a:b8:2b:0b:c4:
0b:75:96:30:06:87:27:d4:83:1e:c8:b0:df:9f:bc:
8a:5b:a7:4e:4a:f4:38:4f:99:5e:15:5e:d6:78:6f:
94:6b:9a:ad:47:4e:32:19:f8:df:d5:21:3a:3d:01:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DA:78:28:9D:34:A0:EC:8A:7E:D0:AE:F5:46:25:68:66:96:70:A7
X509v3 Authority Key Identifier:
keyid:13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:65:23:01:7d:67:3a:26:7d:08:df:65:e8:e2:ea:57:50:74:
c3:8b:f4:58:e8:80:eb:29:dc:dd:c5:a2:73:46:6b:80:af:e6:
f7:3d:36:58:3b:41:3a:14:d4:7a:13:60:18:7b:48:6a:3e:02:
6a:f7:0f:88:1f:da:bf:85:6d:07:c8:9b:1d:29:3d:d6:4f:84:
ee:87:2a:1c:18:3a:b4:55:5e:a7:d5:78:d7:73:7f:2a:28:04:
46:37:b4:b1:58:ec:11:1c:b1:fb:c2:2e:02:33:af:8e:f6:55:
a8:9d:4c:7b:26:96:82:8e:9d:b4:37:2d:50:d0:76:5a:77:d7:
45:82:6a:9a:3c:26:96:75:39:23:87:14:2d:16:50:1a:bb:07:
04:43:50:a4:d6:06:c4:30:a1:ce:68:77:43:4f:58:4f:67:12:
57:3b:9e:32:bc:5f:70:aa:88:70:2e:b0:c4:27:13:9d:5d:a3:
89:77:68:0b:ac:2a:5c:1d:09:2f:7b:7d:f5:9e:64:52:14:f1:
1a:54:f2:77:41:60:25:05:50:b1:71:ce:45:d4:05:ba:26:58:
9c:8e:02:cb:be:eb:30:dd:36:e5:b0:39:29:98:8a:89:03:d3:
e4:91:4e:bb:b2:d1:a8:29:06:b8:07:df:af:20:19:4e:ae:b0:
cb:5a:5c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:51:49 2025 by rpki-client