Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: LIXcy8bjMR8l/HhGbRMGrIggZuNC487j0bHLaRHwGy8=
Subject key identifier: 89:4C:09:B2:7C:91:0D:29:EB:F0:07:76:08:6C:45:62:0D:3A:98:41
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 0199FC58CADB63B4F3BF4212515C886335C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 07CB
Signing time: Sun 19 Oct 2025 12:01:41 +0000
Manifest this update: Sun 19 Oct 2025 12:01:41 +0000
Manifest next update: Mon 20 Oct 2025 12:01:41 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: xjnkDro9fMuift3oufq/Qm6/TkdHTI24qzmIuu0r/Eo=)
2: 1-HePaXJiClEhHOw237Wa73vaFTc.roa (hash: 4PUKfjaEAzPB9R2XBWxJhNfJbqqZiV/WF7YuGVgHgMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ca:db:63:b4:f3:bf:42:12:51:5c:88:63:35:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: Oct 19 12:01:41 2025 GMT
Not After : Oct 20 12:01:41 2025 GMT
Subject: CN=894c09b27c910d29ebf00776086c45620d3a9841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:cc:1a:3a:17:8f:59:f4:64:32:a5:a3:21:
46:7d:73:af:a2:d3:cd:d3:74:48:99:b2:3e:dc:be:
d6:5b:1a:31:b5:8f:38:f0:05:5f:f2:56:59:c6:04:
9d:8e:3a:d2:60:09:cd:af:85:75:53:0b:ae:a1:c5:
29:c2:94:7f:f7:67:c5:e6:b6:1b:52:be:eb:24:e2:
93:a6:0b:ae:76:d0:95:b1:05:c4:19:d7:35:0f:f5:
94:39:e3:a0:75:f4:26:b2:51:a0:13:89:5f:ee:5e:
cf:a8:9f:f0:c7:77:f5:c4:18:0e:c6:7a:1e:48:38:
e7:bf:0a:ec:13:ac:b1:c4:2a:ba:cf:89:52:19:f8:
02:56:0b:ec:42:4c:9a:37:23:d2:e7:b8:4d:44:3b:
18:2e:e8:77:6f:6f:8f:a7:65:65:64:8c:4a:a4:6d:
d0:f8:36:48:d2:8e:91:e9:99:9b:bb:e4:f2:17:cc:
8a:7a:3e:82:a6:d5:30:94:e4:23:4a:87:33:85:d7:
88:ef:f1:fe:c9:4e:84:30:91:8a:54:ec:5a:93:1a:
e0:d6:0b:34:08:87:e8:4d:56:69:22:23:10:d6:5b:
ea:57:8b:83:3b:45:bc:e2:99:10:45:07:28:ab:61:
28:20:f7:5c:e8:03:fc:eb:c7:f6:87:70:24:5c:0c:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4C:09:B2:7C:91:0D:29:EB:F0:07:76:08:6C:45:62:0D:3A:98:41
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:71:6d:46:49:e7:96:1c:3e:fd:2c:cf:a0:9d:c1:93:07:09:
93:64:99:95:76:f4:6e:8f:93:e8:8e:a5:b7:fd:bf:4d:29:18:
94:72:6a:9e:0e:e3:ef:03:75:cc:8e:8e:d6:e0:e3:5f:c8:bd:
d3:2d:b4:b2:11:36:8e:da:32:36:9e:ed:55:da:3c:d0:2b:23:
60:d5:ed:9e:4c:d5:27:06:7e:f7:dd:74:48:30:aa:a4:74:d4:
01:df:fe:4e:19:ea:b7:00:37:d6:75:22:e3:54:bb:6d:c4:05:
c2:59:7b:25:dd:de:23:33:0d:aa:51:04:7f:83:17:12:88:a9:
d6:ca:8a:43:a6:c8:62:fc:0f:70:74:26:42:3e:12:62:8c:6b:
9c:f4:d5:b3:10:c7:d9:6e:e7:bf:e8:a4:81:e3:14:eb:f8:66:
3d:ba:61:0f:ee:6b:6b:e8:f5:35:6d:4c:4e:c8:67:ee:92:d0:
24:5e:2b:19:2b:e1:43:0e:e5:ec:f5:8d:35:62:86:23:52:21:
0f:0b:55:df:45:a7:bd:bd:e6:ac:4f:35:fb:51:8d:6f:e6:89:
ba:7a:c3:e8:d6:05:a0:d2:c4:ac:6f:66:32:51:0e:ef:77:ba:
a5:06:fb:e5:b1:1f:92:a5:07:1c:f1:47:c8:1b:9c:c3:50:22:
37:64:a1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:12 2025 by rpki-client