Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
File: e_es5VMOXVCQfS3bQ1vym03x1uQ.mft (raw, json)
Hash identifier: DTOdT0lpmBAXK1MRGZi2OkUa+KecxlbC/hB7jMW5bic=
Subject key identifier: 9F:EC:D5:8D:44:FE:4E:51:AB:BD:4B:CE:77:C6:E0:1C:D8:18:77:B8
Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Certificate issuer: /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Certificate serial: 019A4F2B4F15D1C2FF41DD2D0FE1DF7CDE7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
Manifest number: 0506
Signing time: Tue 04 Nov 2025 14:00:29 +0000
Manifest this update: Tue 04 Nov 2025 14:00:29 +0000
Manifest next update: Wed 05 Nov 2025 14:00:29 +0000
Files and hashes: 1: 7ZUQ_v-BIT_KwAz6NDX0t_K7Y_o.roa (hash: W6gsf8oTn0VsRjkJRSnQZjA1UWhDIyT1LhfUV5ExzMo=)
2: e_es5VMOXVCQfS3bQ1vym03x1uQ.crl (hash: jCvFGXp7r5/DYSiUMAAZW8ONtQuszUa/0EkNNhu9AOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:4f:15:d1:c2:ff:41:dd:2d:0f:e1:df:7c:de:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Validity
Not Before: Nov 4 14:00:29 2025 GMT
Not After : Nov 5 14:00:29 2025 GMT
Subject: CN=9fecd58d44fe4e51abbd4bce77c6e01cd81877b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:0f:1c:4c:50:a1:ff:69:3a:b8:f5:0f:82:
32:1e:5d:2d:a7:84:4b:47:22:c5:bf:94:ed:a6:c0:
d1:13:9e:cd:9a:0b:5b:cb:36:a2:9f:a6:3f:14:89:
db:a3:9d:86:30:d8:f7:7f:23:46:dc:5d:9a:3c:7a:
81:5a:eb:68:12:12:c1:fa:c1:79:36:09:21:51:7c:
e1:dd:69:46:be:0d:c5:35:c3:87:f5:ed:4a:6d:0d:
88:d3:e6:19:b7:ee:b3:22:6b:f0:27:cb:3e:89:ff:
3a:21:10:b0:2e:36:68:a4:cf:dd:cf:43:ba:57:2a:
fa:a1:30:91:58:21:eb:ad:b8:0c:36:2d:83:b2:7e:
77:44:09:53:46:cf:bf:47:dc:4e:eb:50:99:7d:d0:
6a:5f:71:87:67:f6:0c:20:8e:75:72:39:26:25:44:
f2:be:03:bb:a2:ac:00:75:7b:b1:e0:8d:67:66:af:
16:67:f6:2c:d7:8d:83:ad:84:f7:bd:3c:38:39:d8:
1a:bd:5d:b3:b1:31:20:69:2b:0a:51:bb:57:95:6c:
fc:f8:1b:98:03:0c:61:e6:a3:12:25:56:6e:ab:8a:
ac:80:1c:3c:92:a1:f2:4a:cd:88:d1:83:85:f3:52:
6b:8f:b6:3d:56:3a:df:69:b5:c2:9f:6b:c7:82:3d:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EC:D5:8D:44:FE:4E:51:AB:BD:4B:CE:77:C6:E0:1C:D8:18:77:B8
X509v3 Authority Key Identifier:
keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e4:3f:dc:b4:25:34:ff:0f:df:0e:a7:7e:65:77:c1:85:6b:
8f:71:d3:7a:9b:4d:05:8a:bf:dd:2a:e4:25:48:eb:3a:30:6f:
63:3c:01:af:68:72:05:33:cf:25:49:e0:4f:09:35:fe:17:28:
bb:72:f2:4f:f3:82:bb:7e:65:cb:03:1b:fe:90:ff:66:62:85:
09:fe:2d:71:93:ed:c4:0b:a6:71:1e:58:15:9d:3a:55:05:7d:
04:14:d1:8b:21:a9:ea:98:22:ae:94:b5:bd:55:17:42:c1:95:
24:16:84:38:e1:a0:33:90:67:6d:74:66:25:64:76:74:b5:da:
1a:dd:50:03:6d:1c:b1:1b:9d:6a:16:8b:ee:5c:fc:ae:7a:41:
3b:35:ae:96:b2:29:31:41:6e:c5:4d:8e:98:6b:37:54:22:1f:
10:be:b3:9c:08:fb:0b:49:2d:09:1f:51:8b:95:d8:54:9a:fa:
92:c4:88:3f:81:ff:ce:48:8e:a5:0a:16:96:0f:cb:33:69:7f:
7d:10:4d:ae:ac:ef:7c:c3:4d:4a:40:df:35:9c:91:0a:b2:cd:
02:04:47:7f:de:33:8e:4a:b1:b5:7f:5c:59:32:0e:56:17:8e:
20:24:3f:17:da:c9:ff:9f:64:ef:d8:80:8c:e5:0e:41:7a:a5:
ad:b1:95:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:35 2025 by rpki-client