Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: OTQxESfnMfDdBhJZU3kkN5csiGYt/cS7LQZwrcP4siU=
Subject key identifier: 05:73:EA:9C:31:71:5D:91:B6:C8:8E:D6:D7:83:76:AC:4F:A6:93:D6
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 019A541AF87F23768C032D4D62E07B759E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 0266
Signing time: Wed 05 Nov 2025 13:00:44 +0000
Manifest this update: Wed 05 Nov 2025 13:00:44 +0000
Manifest next update: Thu 06 Nov 2025 13:00:44 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: 3SJtZbBwUTxcpckOUZsFpFzMcPCb3gi8EmqwAcvYc4k=)
2: ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa (hash: ESZ0DE4a4/PZ75FUD4JmTPdMx0gc6CuklYJy0AZ+qzM=)
3: p7CsWJqhWsLkHyYPLS-R_3le0hU.roa (hash: EeSP4Cc1NDkG1olZjQwIwFAUrprwIWgmtu0OwLvcM94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:f8:7f:23:76:8c:03:2d:4d:62:e0:7b:75:9e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Nov 5 13:00:44 2025 GMT
Not After : Nov 6 13:00:44 2025 GMT
Subject: CN=0573ea9c31715d91b6c88ed6d78376ac4fa693d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:b5:cc:d0:53:34:cb:b7:af:9d:7c:c5:58:
cf:68:06:71:d1:17:55:ad:0c:4b:59:2f:f3:07:d2:
68:aa:bd:24:80:9c:d8:11:8a:06:46:b9:ef:e0:4b:
78:4a:a3:6a:13:0d:94:e7:45:94:7c:a8:a4:78:b3:
cb:4a:8e:93:c4:7e:1b:22:3d:c8:0f:de:08:ff:c7:
18:ba:9b:db:be:c3:6c:67:c5:bb:ab:a7:f6:45:11:
76:49:b5:60:a3:7a:b7:4f:f7:54:da:4e:58:52:90:
25:de:7d:b2:bc:c2:44:2e:cc:c5:19:fc:d7:0d:c9:
8f:d4:92:59:ab:77:f1:0a:05:4b:16:f9:09:5c:d2:
36:2f:57:f1:86:87:57:33:e0:90:a3:1f:34:3d:f8:
fd:78:1b:cf:77:34:b2:48:90:d5:80:ea:58:a7:8b:
0e:04:d5:1e:c9:20:1d:a0:02:cb:d0:1f:5c:7c:8c:
44:d1:9e:be:a4:2a:aa:46:28:fe:9f:ed:be:1d:1b:
23:91:cb:e3:b0:9d:74:1d:fe:60:db:2d:f0:da:fb:
84:c5:06:f8:9c:9f:c8:38:87:ca:67:e6:35:db:bd:
1e:55:a2:72:70:e6:50:44:9f:f0:fa:66:c9:19:0a:
0e:3a:c8:e4:4f:77:cf:8b:45:42:20:ae:1a:80:71:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:73:EA:9C:31:71:5D:91:B6:C8:8E:D6:D7:83:76:AC:4F:A6:93:D6
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4e:7c:a4:8a:82:18:d4:5b:1d:1d:55:b0:4e:9a:fb:7a:be:
bc:06:89:6b:10:d6:e2:2d:27:4e:fb:03:bf:15:a8:43:cc:53:
43:45:52:c4:78:13:80:d4:78:63:87:e9:8d:4b:6e:1c:c6:41:
3d:3d:2f:a9:43:7e:88:01:60:c9:c2:6f:86:6d:22:c4:5f:31:
a4:5e:e9:b3:af:92:27:a3:e9:4e:22:c3:8b:81:c9:fa:35:ae:
27:00:80:0f:f6:3b:59:74:77:f9:9d:72:33:83:25:fb:18:b4:
61:27:67:63:4e:01:48:5c:a4:ad:2d:2d:68:56:45:b3:1d:f7:
95:15:a3:cb:1c:3f:7d:68:5d:1a:b8:b3:af:0a:f3:ad:4c:97:
ae:5a:2b:1c:0b:ff:3e:07:55:a5:f0:1c:53:b6:05:34:2b:d4:
e5:b6:0b:5e:91:25:4e:e8:4c:75:b8:f2:4b:12:80:01:2d:7f:
74:33:65:5c:62:27:1a:f7:b1:9f:db:09:98:64:d4:e6:86:29:
af:f3:f3:e4:e3:44:a3:6b:d1:34:12:10:5b:61:0e:52:85:9a:
1c:0a:6e:4c:21:8d:2c:2c:43:53:13:81:83:af:1b:eb:f9:9c:
f2:1b:c9:50:2f:18:d1:6d:62:ce:d6:f5:9d:aa:e4:9e:b1:f5:
27:18:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:45:14 2025 by rpki-client