Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File: Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier: oVW7DZ31uMTOcXMk1Wz73BjEMStcOUmHvgU6KR0doks=
Subject key identifier: 9A:11:4B:73:9F:A9:3D:83:E7:1C:EC:87:98:CB:97:89:E2:8A:B7:D5
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 019A4FD0A458B01C3F7A8EDD4AA59AAEB38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number: 07BC
Signing time: Tue 04 Nov 2025 17:01:04 +0000
Manifest this update: Tue 04 Nov 2025 17:01:04 +0000
Manifest next update: Wed 05 Nov 2025 17:01:04 +0000
Files and hashes: 1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: dDy8X/3bLyMi0LkdXxIyLrogJL0JXTIyO8MRoKxjXq0=)
2: UDJ25qWD57Bw7FcU1JLbyObIuuo.roa (hash: DrbNben6Azyc3081NKjsbYp37NNjbptdcPBV8kesvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:a4:58:b0:1c:3f:7a:8e:dd:4a:a5:9a:ae:b3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Nov 4 17:01:04 2025 GMT
Not After : Nov 5 17:01:04 2025 GMT
Subject: CN=9a114b739fa93d83e71cec8798cb9789e28ab7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:fc:eb:b5:2b:06:15:c0:01:31:00:e0:3f:
1d:57:d8:e6:79:24:20:d9:70:ef:1b:76:bd:ae:d8:
8c:8e:a7:d8:91:78:e6:97:3f:74:d6:16:ea:2c:71:
8e:6b:35:6d:51:a9:5e:64:0f:f4:a6:2f:49:a0:8b:
f8:dd:62:6a:86:db:78:6b:d7:c5:33:ca:86:02:3a:
eb:56:24:e4:69:3a:cd:44:cf:a1:e2:ea:a9:18:e4:
11:79:06:b7:e8:20:66:97:d0:71:f2:7c:2b:74:57:
a3:a4:a2:9d:4b:d4:6d:7b:26:f5:18:0b:a7:6a:38:
20:1c:18:d4:78:f7:bd:e7:6e:ff:b3:ad:79:0d:f1:
40:70:21:2b:5f:4f:8f:5d:de:de:16:0d:d9:99:1e:
8f:23:5a:b7:a4:e1:30:37:f5:0d:1f:39:3d:46:b0:
0e:e9:d6:ae:d8:bc:ed:89:0e:de:17:ad:ad:2f:d3:
af:23:bb:df:81:f4:26:22:ae:c2:99:44:42:b7:95:
65:a3:9d:6b:92:f8:8d:e2:f9:56:af:9e:ab:f3:d8:
45:ed:57:f1:1a:17:43:d7:97:a8:2e:9d:4e:86:0e:
01:6d:1e:ad:65:2d:51:29:e1:f8:47:63:d1:f4:f4:
ee:4f:f4:85:fe:1b:37:2e:0f:9f:20:22:a8:91:36:
e3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:11:4B:73:9F:A9:3D:83:E7:1C:EC:87:98:CB:97:89:E2:8A:B7:D5
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b8:a4:38:78:e1:42:36:5f:93:57:90:23:8e:b9:4b:73:ec:
fa:df:26:57:87:75:6f:2c:3d:a5:0d:6e:83:b5:43:57:4f:b2:
59:ee:c6:75:67:7d:1f:b9:a4:b7:22:35:1f:07:7b:b8:d7:17:
46:1b:a5:6a:d9:37:c5:de:3e:18:3a:b5:00:17:ab:6c:1d:89:
79:b3:06:68:60:5b:17:77:33:d2:14:c0:a9:7f:4e:4b:0b:02:
d3:fd:e7:a9:3a:9f:ce:be:17:03:13:61:b5:2c:85:ba:6d:40:
f9:2a:86:e0:7b:ac:01:c8:2d:0b:d3:33:8a:46:3f:33:31:46:
e4:92:c6:4e:d2:2a:2f:5a:29:61:0a:8e:e0:ef:af:27:7d:99:
81:f3:14:63:45:1f:7a:ba:cf:25:f7:18:4b:7e:59:01:60:be:
b6:c3:9f:13:a1:7f:14:6c:96:f2:f4:d8:0e:70:ad:9c:47:74:
0d:ef:ce:c3:48:79:35:5d:e2:c1:dc:34:63:d4:5d:cc:78:5c:
7e:e1:65:8d:97:7f:0e:f1:9a:d0:2f:d7:27:9c:8a:cd:a8:9b:
61:c9:74:9b:d3:9d:9a:c2:8b:cb:5f:2e:86:08:b8:a7:71:26:
12:25:37:65:26:5d:92:95:dd:7f:01:c5:ff:8d:c7:c4:fd:b5:
9f:1a:4d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:42 2025 by rpki-client