Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
File: ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft (raw, json)
Hash identifier: vIInLDmqjAD5UgF7S4e2SCs7tRbgRPAhxn5lUZMYl4M=
Subject key identifier: D4:D5:23:69:7E:15:45:D6:D1:36:10:07:29:3D:71:92:E1:19:33:EF
Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Certificate issuer: /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Certificate serial: 0199FFC7C338B48C7E721BDE74200910ACE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
Manifest number: 0C87
Signing time: Mon 20 Oct 2025 04:01:45 +0000
Manifest this update: Mon 20 Oct 2025 04:01:45 +0000
Manifest next update: Tue 21 Oct 2025 04:01:45 +0000
Files and hashes: 1: ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl (hash: KAeXoswuvjenG4OFSwkj85j1SHyR4i9BcLneQua+B0Y=)
2: qVppuHbTn9DMOoC7WIpn_md_R6o.roa (hash: gTYaxERGDbyCNzsbpsusObI12oPDpaR995HLMG2pUvc=)
3: zPHnCBVUs92hfFEc7nhs1RWC7pA.roa (hash: DNCZUIotstuuxpKQuNHdweWIP6EDyIOTVHCxU5Ttn/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:c3:38:b4:8c:7e:72:1b:de:74:20:09:10:ac:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Validity
Not Before: Oct 20 04:01:45 2025 GMT
Not After : Oct 21 04:01:45 2025 GMT
Subject: CN=d4d523697e1545d6d1361007293d7192e11933ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:61:e7:f4:73:9d:a2:c4:3b:13:0a:c3:8f:
c5:ad:7f:bd:9e:6b:c1:5c:5c:bd:5a:ab:67:27:8b:
5d:bf:6b:61:4e:8e:10:86:8c:20:9a:37:f9:57:f1:
a9:a0:64:49:33:b3:0c:9e:65:26:61:19:d5:28:3a:
74:9f:93:2a:c6:ac:24:7d:83:a1:99:60:0d:d6:9c:
ab:45:2d:ac:b3:92:c8:67:2f:c4:15:ac:7e:c4:b8:
13:ab:41:09:15:81:95:fd:8a:60:05:13:10:d9:3d:
58:b8:f6:2e:b6:f8:e4:53:a5:a6:16:21:99:40:ce:
cf:e4:5f:ec:fc:4e:64:b7:7b:eb:6e:b5:7a:a7:cd:
7b:6e:b9:9b:ce:da:db:b4:10:ff:0d:55:d8:b2:ef:
bc:51:34:66:40:f1:99:27:01:82:46:fa:c2:7a:4a:
47:9b:80:4d:bb:8c:fb:33:54:e9:d7:84:1f:87:f0:
7a:79:a9:78:af:44:42:36:0f:49:7c:70:48:7c:3d:
2b:be:57:82:db:4f:b0:ef:a2:cc:0e:56:07:1e:92:
af:30:b7:ba:4d:19:99:d9:ef:f9:f2:29:44:b8:37:
6b:3e:4f:bf:f5:12:9a:f6:5b:cc:4e:83:8b:10:aa:
59:21:34:57:74:db:66:81:8d:18:c0:d1:c4:41:7b:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D5:23:69:7E:15:45:D6:D1:36:10:07:29:3D:71:92:E1:19:33:EF
X509v3 Authority Key Identifier:
keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d8:e9:32:af:05:d0:ce:27:fc:92:e7:c9:27:ab:8f:63:fe:
e6:2d:f3:46:09:ae:92:ce:8c:63:ed:73:09:0d:ad:b5:f2:63:
4b:e1:4a:88:07:8b:63:b2:be:b5:e0:18:c0:28:93:e1:7f:d7:
a6:ad:62:c9:3b:a9:31:07:67:e0:85:7c:41:f6:6d:58:ac:66:
93:9f:e6:cf:66:b8:8b:dd:e7:e0:d9:b4:e2:67:d6:88:64:c0:
4b:66:ff:62:a0:7b:0c:a6:78:a0:af:19:87:f8:3a:bb:e2:32:
75:1d:fe:05:2a:20:d0:b1:14:ee:86:b6:82:4f:54:e6:3c:a6:
b5:ca:25:39:97:bb:72:f0:86:c5:fe:34:c0:f1:5c:9c:41:ca:
68:95:14:6d:d1:d6:79:e0:0d:8f:31:67:93:a0:41:d7:71:9d:
67:cc:45:2b:5e:9c:90:1b:56:0b:52:8d:7b:f9:e4:9b:91:bd:
d9:a5:90:01:e4:fd:b3:dd:52:b8:2f:02:67:0b:63:3b:57:d7:
f2:66:60:02:93:de:78:0a:b2:77:a7:cf:c3:55:03:6b:d7:39:
51:c6:5f:34:0b:c2:14:9b:2f:e2:ee:57:71:8a:8b:a1:36:77:
1e:d1:da:14:50:78:53:44:e2:98:c8:d3:93:06:40:f8:a4:4b:
fd:24:f3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:16 2025 by rpki-client