Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: SX/aKUhD4U2XL/X9I//nm140ynVHPF7/+FrSENJCeIc=
Subject key identifier: 26:0A:48:EC:0C:7A:75:84:44:8E:00:F1:8B:8F:04:AE:27:B1:A9:26
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 019A4F628C53F6112FB12E7286A6D7F99BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 05C7
Signing time: Tue 04 Nov 2025 15:00:49 +0000
Manifest this update: Tue 04 Nov 2025 15:00:49 +0000
Manifest next update: Wed 05 Nov 2025 15:00:49 +0000
Files and hashes: 1: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: Mgx5/0Dmg5g0Pc67487aeKz+sZZuG9buYPOVS6TioEY=)
2: ovmdpHkmxMF66EEddKGFlc2H0gg.roa (hash: EUcHFqazaZZxE+4WNuY1RVtJshsow0Yiv/MTq1HtYWE=)
3: r-plRi1ZpgmWnu-urPIdYNrFFFU.roa (hash: DxecFcu5t+xZ0qqmbJOm2zril/rb62HI5wbo3Djm3yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:8c:53:f6:11:2f:b1:2e:72:86:a6:d7:f9:9b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Nov 4 15:00:49 2025 GMT
Not After : Nov 5 15:00:49 2025 GMT
Subject: CN=260a48ec0c7a7584448e00f18b8f04ae27b1a926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:3f:3d:b5:ee:a4:b7:c0:8f:20:76:52:ff:
e6:4b:8b:e2:c5:a8:a4:db:c1:a3:53:7a:35:39:39:
a0:82:81:c1:d9:ae:d8:70:dd:5d:3d:3f:0e:b3:0e:
ff:26:06:c7:c1:93:97:bc:96:86:3c:a1:d3:a9:d0:
b3:97:9e:2a:81:f7:16:8d:a7:c0:d3:62:f3:3d:ab:
f9:47:cb:39:59:7e:44:a1:88:34:14:60:b8:0e:9b:
9c:50:c6:dc:8a:94:3e:fa:d8:c2:0f:a6:48:22:00:
8a:0e:a4:dc:c5:c9:71:29:cc:21:60:d6:14:06:9f:
4c:d7:eb:e5:b4:9f:d5:a1:5f:c0:eb:be:62:4e:0a:
6c:b5:69:23:cb:9e:19:c8:ed:59:bd:ef:17:3c:8c:
b1:0c:a5:eb:85:b3:6d:33:24:70:b7:25:71:80:3e:
c1:f5:10:0f:ee:a1:34:15:39:cc:d5:c4:d9:5d:60:
f3:54:62:6d:ee:3c:1a:99:34:a0:a4:6f:bc:08:97:
ba:41:e0:22:83:29:a8:6a:f6:df:2d:e7:5d:62:72:
31:27:be:9f:b1:03:1d:c2:44:01:c7:70:e1:b8:1c:
fa:03:d6:38:23:4c:3c:a0:43:16:e7:89:ee:4a:77:
e3:36:20:1b:6e:46:f0:53:ff:62:ed:fa:f2:ac:27:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0A:48:EC:0C:7A:75:84:44:8E:00:F1:8B:8F:04:AE:27:B1:A9:26
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:88:82:37:48:dc:af:00:5a:4e:21:02:30:9a:b4:3a:ab:df:
ef:91:da:78:88:15:41:46:cc:6c:3b:df:ad:aa:f0:f4:b7:05:
f4:25:70:7d:bf:b9:5a:ad:c6:08:14:93:a1:56:45:b8:25:7e:
04:04:0c:b0:59:a9:aa:30:91:a1:d0:51:d9:32:17:f1:a4:65:
f3:66:3b:87:9b:df:47:56:91:4d:44:a9:ae:39:71:5b:6f:66:
8e:4a:cd:20:34:06:40:0a:38:a9:13:fa:62:39:b4:5b:82:21:
71:08:b6:e8:7d:46:0e:26:e5:77:10:63:60:fc:66:64:b6:8d:
c8:77:e3:e8:a7:d8:7a:76:23:c6:84:42:fa:94:f1:bb:a8:22:
8c:a8:5e:d8:da:98:0a:96:6f:21:46:83:d9:3f:12:0d:2a:0a:
bb:13:cd:dc:0d:4e:1e:51:5a:2f:bc:c8:e0:6d:b9:b9:45:0b:
3d:bc:e8:f8:31:fa:07:9c:04:80:77:ba:e6:76:da:a7:fb:db:
8b:a2:6b:99:b3:00:da:7d:ea:b1:5a:69:e4:f0:a4:57:c2:c9:
de:11:89:10:54:6a:74:d4:98:76:50:b1:7f:e8:da:27:3e:58:
14:e2:c9:a2:70:c8:50:ce:cf:4f:47:83:fc:cf:70:98:a7:4a:
90:40:8a:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYoxT9hEvsS5yhqbX+Zu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZDZjZGM2ZmQzMzJkODhiZTJhYjA5MWVjZTc0ZDc2MjRk
MzU5ZjEwHhcNMjUxMTA0MTUwMDQ5WhcNMjUxMTA1MTUwMDQ5WjAzMTEwLwYDVQQD
EygyNjBhNDhlYzBjN2E3NTg0NDQ4ZTAwZjE4YjhmMDRhZTI3YjFhOTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYQ/PbXupLfAjyB2Uv/mS4vixaik
28GjU3o1OTmggoHB2a7YcN1dPT8Osw7/JgbHwZOXvJaGPKHTqdCzl54qgfcWjafA
02LzPav5R8s5WX5EoYg0FGC4DpucUMbcipQ++tjCD6ZIIgCKDqTcxclxKcwhYNYU
Bp9M1+vltJ/VoV/A675iTgpstWkjy54ZyO1Zve8XPIyxDKXrhbNtMyRwtyVxgD7B
9RAP7qE0FTnM1cTZXWDzVGJt7jwamTSgpG+8CJe6QeAigymoavbfLeddYnIxJ76f
sQMdwkQBx3DhuBz6A9Y4I0w8oEMW54nuSnfjNiAbbkbwU/9i7fryrCcDHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYKSOwMenWERI4A8YuPBK4nsakmMB8GA1UdIwQY
MBaAFHvWzcb9My2IviqwkeznTXYk01nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTliTnh2MHpMWWktS3JDUjdPZE5kaVRUV2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8yOWYzODYtNDI0Ny00ZTZhLTliZjEt
NjFjNGEyNTZmOWFkLzEvZTliTnh2MHpMWWktS3JDUjdPZE5kaVRUV2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8yOWYzODYtNDI0Ny00ZTZhLTliZjEtNjFjNGEyNTZmOWFk
LzEvZTliTnh2MHpMWWktS3JDUjdPZE5kaVRUV2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIiCN0jc
rwBaTiECMJq0Oqvf75HaeIgVQUbMbDvfrarw9LcF9CVwfb+5Wq3GCBSToVZFuCV+
BAQMsFmpqjCRodBR2TIX8aRl82Y7h5vfR1aRTUSprjlxW29mjkrNIDQGQAo4qRP6
Yjm0W4IhcQi26H1GDibldxBjYPxmZLaNyHfj6KfYenYjxoRC+pTxu6gijKhe2NqY
CpZvIUaD2T8SDSoKuxPN3A1OHlFaL7zI4G25uUULPbzo+DH6B5wEgHe65nbap/vb
i6JrmbMA2n3qsVpp5PCkV8LJ3hGJEFRqdNSYdlCxf+jaJz5YFOLJonDIUM7PT0eD
/M9wmKdKkECKHQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:46:40 2025 by rpki-client