
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
File: ezF1mINz5Wtv_gsVofx11Gk64sA.mft (raw, json)
Hash identifier: v/pFEwfIStvW4pJhgmKaeQqeFqv+8q6q1uGD52ktops=
Subject key identifier: 43:18:41:72:7D:3F:72:4B:B3:30:70:C7:20:A4:E1:FE:D5:E5:36:C9
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Certificate issuer: /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial: 0199FC216667095C7C3B9B6A23D730353B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:11 +0000
Manifest this update: Sun 19 Oct 2025 11:01:11 +0000
Manifest next update: Mon 20 Oct 2025 11:01:11 +0000
Files and hashes: 1: ezF1mINz5Wtv_gsVofx11Gk64sA.crl (hash: hSQn3v6aKZoMamHGINx3J9T9bjGEzZIbKS1ByW6IQrc=)
2: lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa (hash: dET9fwU/izT2anivq0drVs4rmphGQ9LJ15mQDS+rUvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:66:67:09:5c:7c:3b:9b:6a:23:d7:30:35:3b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Validity
Not Before: Oct 19 11:01:11 2025 GMT
Not After : Oct 20 11:01:11 2025 GMT
Subject: CN=431841727d3f724bb33070c720a4e1fed5e536c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:a2:39:43:e3:b8:12:a8:b2:1c:da:d1:d3:
f5:7f:9c:61:0f:c7:3e:c3:e6:d6:ac:c1:11:1b:f8:
99:b4:d7:1a:39:03:b2:7b:15:03:86:fa:03:5d:a4:
c6:19:b6:1c:57:d7:84:4c:71:84:af:18:f9:ba:91:
32:21:90:64:68:b5:f4:d5:a1:4d:ac:1b:47:0b:38:
c5:0f:d8:b3:b1:95:4f:64:e8:7f:37:ff:f9:02:3a:
6c:88:b8:37:78:63:89:95:85:2d:e0:ea:0f:20:b6:
d4:40:35:08:52:18:70:2e:58:73:ff:25:1d:9f:54:
12:df:e0:5d:f7:6d:24:63:aa:bb:0e:91:0c:81:64:
df:41:86:c0:de:cf:35:84:5f:ce:5b:58:c7:87:45:
f6:b3:6c:8a:e4:6a:55:b8:1c:69:c5:e6:80:79:c2:
a8:08:27:b6:41:ef:0d:8f:27:1a:e0:3b:33:ea:19:
7f:44:af:d8:49:79:4a:bd:6c:ea:9a:5e:51:60:97:
7d:be:eb:c3:a4:a6:04:20:8d:52:2c:c4:aa:68:98:
da:86:86:18:93:03:7f:e1:f8:50:73:99:c9:08:ca:
6d:21:e2:17:b8:12:ef:8a:71:64:fd:2a:47:23:16:
97:7e:ba:bb:60:d5:d0:4d:f5:76:e6:d4:f2:e2:94:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:18:41:72:7D:3F:72:4B:B3:30:70:C7:20:A4:E1:FE:D5:E5:36:C9
X509v3 Authority Key Identifier:
keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6d:e9:1a:1a:a1:b2:7f:62:71:f7:d7:09:45:64:ce:8d:78:
4d:19:ec:12:fc:56:4a:8d:f8:7c:2d:2c:c1:dd:4c:d3:06:c9:
57:d4:f5:9e:da:63:c6:28:ba:ca:3a:64:09:0d:3f:e3:73:87:
4a:34:90:d4:27:56:62:ef:b8:18:98:2c:d3:11:e7:d6:cd:4f:
3a:2a:fe:e2:8b:87:78:1f:9f:e9:66:e1:2d:2e:1b:bd:51:00:
97:a0:f3:95:de:04:3d:68:71:56:35:9f:99:47:06:e4:99:46:
20:26:5d:91:d0:58:a8:1c:5c:a3:30:f4:8f:42:1e:ed:2d:8f:
5a:81:79:0a:4c:0c:cf:74:15:ea:2f:ba:78:b1:9b:a4:23:1d:
ac:ce:12:71:04:5b:21:12:c7:0e:40:59:90:09:b3:6d:76:17:
ab:98:46:cd:48:f8:f4:e3:08:13:59:eb:96:5a:5f:77:e4:a3:
e6:02:06:21:f6:89:0f:97:60:25:50:11:33:ff:cb:5b:cb:77:
c6:03:ee:d5:1c:03:c3:ce:95:48:3e:00:99:bb:09:58:d7:99:
3b:82:5d:05:d5:10:98:29:e2:e1:f3:80:ec:a8:3b:fc:84:51:
a7:c3:48:83:51:e1:04:a5:c7:8f:39:d9:78:85:2d:e8:c3:f1:
49:f5:3b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:20 2025 by rpki-client