
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: aepRuhQ8WUbjByhT/mfQ3ubrKhFfr7sD/U71dT9g6tI=
Subject key identifier: 03:0E:02:D5:C3:4E:6A:D9:85:80:B0:3B:C6:F4:E9:40:1B:7F:CD:22
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 0199FB45C1D2CE392A601A8C4CD55EC40538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 15A3
Signing time: Sun 19 Oct 2025 07:01:16 +0000
Manifest this update: Sun 19 Oct 2025 07:01:16 +0000
Manifest next update: Mon 20 Oct 2025 07:01:16 +0000
Files and hashes: 1: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: Fi9aP0mBlKM/h098txRFJuqeYRWU/UkjyVFg6/0Sz74=)
2: qPByKnpBcwc5PCFg3I5YVGxollc.roa (hash: VpVIKGAdMgvH4OCbsZNXF0xBFfIGSal78lndZpVlhBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c1:d2:ce:39:2a:60:1a:8c:4c:d5:5e:c4:05:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Oct 19 07:01:16 2025 GMT
Not After : Oct 20 07:01:16 2025 GMT
Subject: CN=030e02d5c34e6ad98580b03bc6f4e9401b7fcd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:f1:ad:6e:82:01:5f:a8:3f:44:c1:0d:36:
e7:a0:28:99:f5:38:b2:fd:c8:a7:58:cf:5a:0a:07:
ba:a1:b6:ae:07:a3:87:4c:c7:c9:f2:12:7d:f1:41:
67:de:27:72:ec:07:0e:32:1d:3c:99:d5:71:90:75:
b8:91:02:e6:69:54:78:12:43:5a:18:b2:7d:b6:c0:
38:d8:37:16:c0:07:d0:d1:a8:84:35:2c:31:40:27:
59:be:65:34:6c:b9:50:cc:fe:90:c3:0e:d0:b9:b8:
93:dc:a9:a5:71:29:21:be:3a:57:cc:ff:43:df:76:
f8:cc:e0:46:3d:60:5c:df:cb:cb:d2:0e:a7:c5:83:
9d:5e:24:ac:8b:d1:43:82:25:90:0d:df:92:65:29:
df:05:fb:e2:2b:72:cb:eb:17:ac:48:3c:c8:bf:a7:
ec:b2:14:69:03:44:79:f8:40:ab:f0:08:a7:98:01:
c4:9a:e8:17:50:04:01:6c:b9:f6:21:2d:40:16:48:
dd:b6:67:a3:bd:6f:f9:cd:95:07:91:d6:a5:1a:09:
29:87:3a:8a:2c:0f:f0:02:d5:2a:af:4d:2f:d1:67:
ea:6b:56:e5:68:89:08:f6:47:59:34:60:e1:4f:a6:
dc:a3:47:8b:78:42:89:de:06:98:46:29:5c:2b:60:
2c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0E:02:D5:C3:4E:6A:D9:85:80:B0:3B:C6:F4:E9:40:1B:7F:CD:22
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:60:53:a4:bf:94:60:3a:73:5f:2e:2f:20:8e:cc:3b:61:8b:
4c:06:07:f2:4a:8d:84:43:af:ac:c1:84:c2:cc:19:c4:c1:98:
11:95:3e:21:41:b6:5c:eb:ff:13:9e:c5:90:63:8e:2e:d9:4f:
a0:b7:eb:aa:95:8a:8c:ac:07:0e:e5:0c:07:f7:f7:cc:c2:4f:
a1:7a:74:cd:20:95:34:d5:d5:10:99:d1:69:cf:91:6d:65:bc:
b0:55:b3:73:fc:14:62:63:91:d8:19:a8:0b:ef:eb:ac:9c:ae:
bc:d9:80:32:b5:ff:d3:97:a9:16:dc:50:fd:9b:95:f0:3d:db:
1d:6f:9a:ed:25:a8:9d:8b:c4:99:14:e3:9f:37:00:42:23:32:
1c:6b:85:78:02:c7:f5:7a:52:78:e5:a5:c9:76:03:f3:00:45:
4b:fc:0a:e0:44:93:25:56:0c:d3:d3:e8:6b:48:b1:8b:19:c5:
d2:03:4b:bc:00:fc:b4:99:bb:2d:da:48:bd:d2:46:18:da:4c:
a6:11:cb:3d:b5:a7:2f:fc:02:ef:24:29:52:ca:26:a4:b4:2c:
0f:9c:83:8f:f3:72:ea:f8:bc:07:ed:d6:d5:11:d0:32:97:df:
19:2e:94:1a:ca:bd:d5:33:c1:0d:f2:b8:07:2d:c9:df:24:64:
8f:f0:7f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:31 2025 by rpki-client