Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
File: ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft (raw, json)
Hash identifier: ktxBDH6Jo1z4rcBM8EMfXLvQDuVK1gO0X75sj1z0Gp4=
Subject key identifier: 51:85:9A:52:BC:89:F1:9F:79:8B:40:40:C0:DA:E2:77:5A:3D:13:DB
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Certificate issuer: /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial: 0199FAD82803DA62672996464F91F336E55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
Manifest number: 07BA
Signing time: Sun 19 Oct 2025 05:01:33 +0000
Manifest this update: Sun 19 Oct 2025 05:01:33 +0000
Manifest next update: Mon 20 Oct 2025 05:01:33 +0000
Files and hashes: 1: ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl (hash: gGsOW06K5q6YVdbquFs4y6AVN+vn5eet0Yl0wOUo+9c=)
2: cOlZtxVwhbHabVyYeMsf0xgakZ0.roa (hash: uIR5H6BRh5Mk2t2T3SL+SrC3qaOMSafUrXEBQ3YOqwU=)
3: ypecd2LqkaW6e4qzf_tWhzdTc5E.roa (hash: nXcncmToHt1q5p3HUhxZY7Q0AWrPzAjjTbEkQu0P6Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:28:03:da:62:67:29:96:46:4f:91:f3:36:e5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Validity
Not Before: Oct 19 05:01:33 2025 GMT
Not After : Oct 20 05:01:33 2025 GMT
Subject: CN=51859a52bc89f19f798b4040c0dae2775a3d13db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:1e:34:03:71:f4:3b:a4:75:de:d7:e3:1e:
58:2f:1d:32:a6:22:c8:3f:cd:5a:2e:4e:79:62:8e:
e7:01:48:bb:a9:f3:80:25:91:58:37:b0:7b:e0:08:
9b:ff:5e:a7:c8:43:0e:f5:77:be:93:67:2f:b8:56:
8a:67:dd:83:b0:03:b7:5d:1c:96:64:ec:4d:91:db:
ef:e3:83:94:51:64:f1:26:5d:f0:0c:10:24:f2:db:
50:23:a0:6c:1e:1e:ca:68:6c:1c:89:f2:7c:46:00:
c6:56:5d:6f:8c:57:25:57:9d:d6:16:d6:4b:09:3a:
3d:24:99:b6:d3:50:2d:0f:23:d1:53:06:82:ff:47:
fd:48:2e:0d:8d:53:ae:65:c0:cc:92:9e:ec:ab:e5:
71:d5:0f:c8:1b:56:f2:c0:1e:5c:43:67:1a:4a:ce:
33:5e:b4:45:b9:3f:02:5b:86:f1:dd:4d:3b:bb:d8:
72:0c:85:6b:e1:c9:9d:ee:fc:9b:4b:c0:74:a4:b8:
82:81:f1:10:35:a0:15:10:f1:2f:1a:ef:44:9f:0a:
1e:9a:e1:9f:5b:1f:33:19:4b:52:72:8b:12:a7:95:
ac:c1:01:58:3f:2a:f9:60:f4:17:61:68:40:f5:af:
9e:0f:69:a1:a8:cd:23:0c:a0:81:62:17:47:e1:ae:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:85:9A:52:BC:89:F1:9F:79:8B:40:40:C0:DA:E2:77:5A:3D:13:DB
X509v3 Authority Key Identifier:
keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2e:87:37:8b:0f:3b:04:02:93:6a:90:fa:96:0e:dc:92:97:
d5:c5:95:3b:2b:d6:a9:e8:12:9e:93:3b:50:c3:6e:d5:a9:a6:
16:1c:42:cc:1a:1e:ed:46:d8:f4:f0:db:0c:00:9f:32:b7:d5:
79:5d:59:b2:dd:02:a6:75:be:f7:d9:5c:9e:aa:a1:b5:b0:22:
08:d7:5c:60:be:64:a7:db:bc:1a:3c:80:56:2a:4b:e4:f4:e2:
eb:c1:3c:44:12:6f:14:cf:d5:8a:3f:4c:4e:ed:6f:29:0d:27:
91:38:61:62:96:ea:1c:60:d7:13:89:b4:69:57:d5:7d:ec:62:
b2:42:4b:54:cb:45:50:a6:16:f1:f0:09:af:e1:01:56:38:bc:
8d:7f:e0:fd:01:fb:a0:57:a7:94:f9:78:eb:a2:6f:e7:75:4d:
47:99:90:2e:54:ce:c5:17:fa:6c:13:5d:a8:69:cf:fa:c5:3f:
95:15:87:82:2b:c1:ad:0f:51:7e:6b:98:4b:88:60:59:84:80:
9d:77:3b:d2:f8:1d:8a:74:a8:99:dd:67:2f:fb:8f:fe:b7:cd:
ac:35:4a:5f:77:ff:df:27:58:6a:00:84:11:69:6a:e6:6f:eb:
6d:77:1e:7d:26:68:ce:50:81:aa:e1:93:31:40:db:c3:ba:28:
5c:45:ac:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:12 2025 by rpki-client