Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
File: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft (raw, json)
Hash identifier: YCdCGABKoUSwwLemZZXPzqYFoPxWO7uIyrAlbnH3kXk=
Subject key identifier: E4:D4:C2:93:EE:6B:AE:33:5B:A2:4D:23:F7:3C:B9:E4:30:1F:74:17
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Certificate issuer: /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial: 0199FDDA455A1E40EE8355F45B45F2C49EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
Manifest number: 0DEE
Signing time: Sun 19 Oct 2025 19:02:44 +0000
Manifest this update: Sun 19 Oct 2025 19:02:44 +0000
Manifest next update: Mon 20 Oct 2025 19:02:44 +0000
Files and hashes: 1: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl (hash: 0CfR4QcjZBo8I3JomO6R7sSEwXrxCxA8PEm7dausq3k=)
2: Ts2grdh3WhIBgvviR4SebdJHIVA.roa (hash: gCLhNsBpATqkGaeD3Tm7dpZpLjmibJqVgNt4Igote+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:45:5a:1e:40:ee:83:55:f4:5b:45:f2:c4:9e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Validity
Not Before: Oct 19 19:02:44 2025 GMT
Not After : Oct 20 19:02:44 2025 GMT
Subject: CN=e4d4c293ee6bae335ba24d23f73cb9e4301f7417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1e:8c:45:30:9b:cf:01:d1:76:bf:48:2c:4d:
b0:b3:1f:7f:8e:d0:95:15:65:bf:4a:c9:8a:ac:2e:
8d:ce:be:ff:01:2a:f8:43:46:e6:e5:63:bb:37:68:
5a:73:5f:4d:0a:ba:67:b7:8a:41:31:b2:a2:17:33:
e0:19:43:bf:4c:fa:fd:32:ab:95:6e:63:7f:9b:cc:
3c:80:34:e9:5a:3c:b4:2b:82:aa:d4:45:9a:39:6b:
48:ee:44:7c:a6:71:53:fa:f2:a7:63:ee:9c:76:98:
b0:10:12:f4:b8:31:62:2f:dd:db:98:f7:f0:02:99:
5a:d1:75:1a:52:f8:47:45:22:ec:fb:b5:24:53:dd:
b9:bd:56:ef:e9:be:1f:5a:97:b5:1e:b5:fd:e4:90:
c0:f1:6e:4b:53:66:0c:90:17:85:83:06:12:b2:2f:
cd:a9:b3:60:34:12:9d:fe:91:2f:3d:44:d2:cd:29:
cf:f6:69:b1:59:25:1b:50:d6:0a:eb:4a:b8:e9:0b:
ab:63:27:a2:14:6e:4c:57:63:8f:13:63:fe:7c:88:
cb:74:c7:f0:f3:42:d6:ba:dc:f8:ad:cb:cc:65:ee:
ba:e8:6f:df:cd:01:c0:21:86:55:84:44:6a:ed:95:
f5:17:7d:34:d3:88:35:9d:d7:cf:9b:b2:c4:53:a8:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D4:C2:93:EE:6B:AE:33:5B:A2:4D:23:F7:3C:B9:E4:30:1F:74:17
X509v3 Authority Key Identifier:
keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:84:d3:50:c7:eb:2a:5d:86:3f:2b:2b:0f:da:94:55:35:e0:
e7:03:28:05:6a:3b:59:36:b0:51:20:61:0d:6a:87:fb:64:60:
45:bb:b1:19:83:21:88:26:ee:c2:ed:10:01:41:4c:3e:bc:0e:
cc:8a:2d:2c:bc:5b:b2:71:29:1a:51:aa:ff:bc:b8:d2:3e:a4:
35:91:17:e7:0f:52:c1:b6:d7:09:f9:6b:fe:79:f8:4b:a2:ec:
f1:31:44:e9:97:a0:04:ae:04:51:9e:e2:75:1c:f7:31:fc:4c:
78:74:40:0e:15:ad:9a:40:1e:cb:e7:3e:08:62:de:84:9b:b3:
fb:81:a0:78:80:19:0b:78:7e:51:1f:8e:6a:25:5a:15:c6:5c:
9f:b3:e8:ad:7e:0e:5b:59:0e:f0:36:27:73:6e:18:a3:93:cb:
74:7e:5a:ce:ba:1e:2e:80:fa:bf:19:a1:5c:e1:30:6d:38:e4:
bb:e6:c9:00:b4:15:a0:5c:10:82:3a:03:96:64:41:d2:46:d7:
6b:4e:28:10:57:e2:81:19:3b:c4:87:3a:27:6e:69:5c:58:28:
44:80:5e:6e:64:95:f4:49:eb:1a:2f:74:f0:26:ac:d9:d1:56:
51:78:a6:b9:bc:de:3e:1a:15:7e:c8:18:90:f8:db:b7:8c:5a:
62:9b:be:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:51 2025 by rpki-client