Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
File: 65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json)
Hash identifier: Ur5KRnw/6NRacc80ESgZwLnD2rGt569RKx2+RhvU0Uo=
Subject key identifier: 5E:70:E6:12:76:38:62:25:36:1F:69:CD:86:9C:2C:CD:42:A0:68:91
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Certificate issuer: /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial: 019A4DE1E96374805AB08C7979F509044F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
Manifest number: 0598
Signing time: Tue 04 Nov 2025 08:00:42 +0000
Manifest this update: Tue 04 Nov 2025 08:00:42 +0000
Manifest next update: Wed 05 Nov 2025 08:00:42 +0000
Files and hashes: 1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: ahD8RXEvHTn+qUqLQmO3nHwhCE/GPwHWUIohboZxLZc=)
2: UQAL-JJc9xbj3dvWQx-rKxJywfk.roa (hash: arBBklCXAnQ+7dDU+siDZljmex4Eu/z9+wzjqqM7ap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e9:63:74:80:5a:b0:8c:79:79:f5:09:04:4f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Validity
Not Before: Nov 4 08:00:42 2025 GMT
Not After : Nov 5 08:00:42 2025 GMT
Subject: CN=5e70e61276386225361f69cd869c2ccd42a06891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:6d:1d:e4:ba:08:09:9f:0b:c6:26:f9:06:
dc:b8:41:9c:25:16:84:4b:6d:61:f4:89:54:5c:17:
bf:de:a1:e6:5a:57:a8:bb:1f:01:4e:81:ab:17:d8:
d4:a2:30:be:f3:4c:da:85:32:42:13:c8:de:3e:ae:
28:0f:31:23:53:2b:59:73:da:c0:e7:98:bb:de:53:
d7:cf:df:57:93:17:7d:79:15:80:70:75:e8:01:ce:
8c:30:b2:3b:2b:2f:42:ff:f0:11:8c:29:39:fa:bc:
b5:eb:b7:fe:27:46:61:3d:42:29:db:b2:a3:7b:fe:
ff:8d:de:50:1a:61:97:96:84:32:aa:c4:ed:56:e4:
a2:15:4b:29:bd:c4:9b:69:49:c5:95:89:94:d2:c8:
cf:a6:02:22:51:7b:3c:76:13:f6:16:95:70:2b:d8:
4c:6d:df:80:f4:12:f4:93:e2:48:8a:5f:9d:9d:cd:
34:b0:0e:4b:78:5f:a5:49:df:3a:d6:5e:6d:77:8d:
16:e0:2d:cb:67:60:5c:c9:fb:e3:f0:03:94:c4:e1:
3e:bd:c7:d3:49:5d:a2:6b:a5:58:5d:0c:98:d1:58:
56:f7:0e:54:e1:4b:a5:6d:2d:a0:63:78:3b:30:a5:
39:fb:22:7f:db:de:c9:58:e4:50:f4:14:a6:e1:48:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:70:E6:12:76:38:62:25:36:1F:69:CD:86:9C:2C:CD:42:A0:68:91
X509v3 Authority Key Identifier:
keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:cf:f4:03:f0:1c:4f:78:a0:04:5a:96:43:8c:a1:c1:32:83:
6e:31:c5:ee:0d:61:25:c4:02:36:6c:17:38:b9:f8:cb:28:cf:
0f:00:ad:81:96:9d:d4:b3:83:f5:59:1a:04:b8:d0:a5:e3:95:
46:bb:99:2a:62:83:ac:f3:17:33:0e:46:a7:a1:5a:74:2a:dc:
bf:a7:d2:bd:3e:1d:0c:f8:c5:38:43:12:94:14:39:98:df:20:
30:92:de:03:29:2a:98:c1:b6:c6:34:27:40:08:b9:be:50:56:
70:a8:5b:85:bf:8d:07:a4:aa:df:62:9f:43:dc:36:ae:df:3c:
e3:a5:23:9e:9e:54:ff:02:83:0d:26:56:16:0d:92:ac:f9:50:
df:bf:bf:a3:4c:b7:5d:01:31:dd:82:45:10:46:f4:26:50:35:
23:5a:6f:d5:53:90:33:ee:dd:52:dc:f6:4a:e6:75:1a:d0:14:
f1:89:33:85:c3:90:bc:25:74:1e:c7:bc:34:76:d5:2c:86:b3:
09:9d:ad:c1:d2:fe:d1:40:9d:53:b8:0d:52:ef:fc:bc:ad:b4:
d1:f2:7b:c4:9f:47:89:ca:78:3e:d4:2e:ca:97:b0:d4:48:52:
15:47:1b:c2:70:3c:bd:08:35:61:c6:c8:3d:17:5d:4f:62:6d:
d7:13:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:12 2025 by rpki-client