Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
File: _ejRxqr0qT_0G7-hvR2sYZfVlXU.mft (raw, json)
Hash identifier: hsDAPacJJUg+KaY2xLNTdT/4pCsIz+3jcKEsnpecgX8=
Subject key identifier: 57:5A:97:52:40:B3:41:8E:C0:24:47:9F:20:4A:E4:29:B8:15:63:91
Authority key identifier: FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
Certificate issuer: /CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Certificate serial: 019A017E94263B0E673BFED1EE4C5B4459E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 12:01:03 +0000
Manifest this update: Mon 20 Oct 2025 12:01:03 +0000
Manifest next update: Tue 21 Oct 2025 12:01:03 +0000
Files and hashes: 1: _ejRxqr0qT_0G7-hvR2sYZfVlXU.crl (hash: k/02hO6OMo8s1RCxQvVSB/WwIzAvEgHmnN8iZaPlIlY=)
2: f5Ifl1Qxitth-8Qh6ozPEIX26LE.roa (hash: wIswSAYWyn5DfKJXI+1/UX9k25/3bD/WegnGLFLzMg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:7e:94:26:3b:0e:67:3b:fe:d1:ee:4c:5b:44:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Validity
Not Before: Oct 20 12:01:03 2025 GMT
Not After : Oct 21 12:01:03 2025 GMT
Subject: CN=575a975240b3418ec024479f204ae429b8156391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:63:61:a9:4d:30:52:0e:6c:51:7d:2e:92:7f:
6f:0e:58:8c:e8:32:1a:89:d4:42:9c:71:b5:27:6a:
d3:98:72:77:e8:fb:26:04:85:4a:86:4b:62:ef:2b:
52:8b:f4:9a:ad:56:b1:08:18:bc:a1:62:a3:e4:9f:
3c:6f:08:6b:cf:94:a0:23:9d:ba:2f:c9:48:1e:c0:
07:e1:f0:ee:9a:c7:a3:54:e7:2f:0f:76:86:a0:ca:
cd:16:e8:e4:c5:54:64:4f:81:15:a1:0b:5e:73:83:
0a:e8:76:f3:47:49:fd:b9:35:06:95:eb:e8:79:bd:
3a:4b:26:4e:33:2c:93:28:ec:f8:3b:73:fa:8b:64:
0f:21:26:f4:c1:85:4d:99:64:ef:c9:37:5b:20:c6:
6f:6d:9a:ba:d2:c3:f1:af:56:1c:c3:f2:e6:b0:93:
0a:c1:08:a2:6b:00:b1:57:f3:5d:9f:b7:90:7e:2a:
78:fe:cc:ab:8f:20:05:cc:6a:72:0f:b0:5b:89:e6:
32:2b:c6:43:83:28:46:ad:cc:c8:da:9b:d3:56:85:
e1:07:05:b4:cc:d7:7f:89:d4:39:05:62:25:47:06:
a0:a6:a5:48:08:c8:08:16:ed:3e:8f:ac:5c:26:f8:
58:2d:d3:6e:b1:60:80:2f:e1:4b:06:8d:06:69:3a:
0c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5A:97:52:40:B3:41:8E:C0:24:47:9F:20:4A:E4:29:B8:15:63:91
X509v3 Authority Key Identifier:
keyid:FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2d:6a:bf:9f:89:48:a2:a6:65:d7:8d:c9:73:e4:63:01:49:
a9:34:4a:83:1a:56:1a:81:be:31:db:6c:e4:2e:f0:83:1d:8e:
88:4a:02:e5:ff:bf:ea:32:de:c9:35:58:5a:38:a8:b6:f4:e9:
a2:93:25:81:9e:c2:9d:5a:3c:38:e3:37:40:33:52:5a:be:da:
cc:3c:e5:87:14:8b:ad:ea:03:71:bb:5b:28:a0:df:11:64:15:
f7:d7:5f:a5:bf:56:36:27:44:39:ed:c8:65:71:98:2e:3a:e7:
76:3b:fd:8b:8a:85:29:fb:91:6a:0c:bd:0f:a3:2a:21:4b:a0:
6f:df:16:c9:07:f4:ea:12:b7:f0:09:e0:35:7e:b4:a3:9b:d8:
d9:ab:52:6b:56:c1:55:8f:ac:27:fd:7a:49:0a:a9:87:f8:76:
f3:ec:14:36:1c:f6:66:a7:c4:46:82:00:dd:eb:4d:b7:b2:a5:
ba:8d:c6:1e:91:23:8e:06:66:14:98:b5:71:94:48:ce:4a:0b:
4a:13:f8:62:0b:82:77:ee:b9:2b:75:ac:a9:e9:f0:15:2e:2f:
23:4d:8e:54:ed:43:db:c4:2d:21:1b:dd:ea:e9:2a:97:19:f7:
45:94:e7:22:81:f8:2e:57:c4:5b:f9:f2:ec:69:c5:2d:29:ff:
e5:81:75:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:28 2025 by rpki-client