Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
File: Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft (raw, json)
Hash identifier: zOnB5/ZunBlwSyteecXLw2au4sFZrpMVfz4ihLVKCPI=
Subject key identifier: 27:67:77:8A:8D:C1:D8:63:F3:97:87:04:34:1B:90:EF:0B:D2:A5:9C
Authority key identifier: 13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60
Certificate issuer: /CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
Certificate serial: 0199FCC64B071E869503711A993EC0A6FFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
Manifest number: 0BAD
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: 2HCBJIX5AwlQw5itkpbxu-ijjmk.roa (hash: PvO3JA7EOrGZaCXFQBX1/p9bbO95IhgeMuSkTUD055k=)
2: Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl (hash: 8tKW7yR1WvWHSjte9y8r07+7uVI/U6pqJR9e0Gn/KVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4b:07:1e:86:95:03:71:1a:99:3e:c0:a6:ff:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=2767778a8dc1d863f3978704341b90ef0bd2a59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:3e:56:a0:e7:d5:0b:84:36:32:8d:fe:19:
a1:57:d5:d9:ed:d4:b4:7e:b7:c4:be:36:88:71:74:
66:e8:de:c9:49:8c:c8:94:16:d8:3d:bb:ba:ca:0e:
50:c0:55:3f:cb:6a:19:a1:94:51:a9:d5:7d:c0:4a:
47:3a:99:71:c8:47:06:04:31:de:a1:2c:43:c6:28:
d1:23:60:eb:90:08:af:76:5b:16:a6:14:b0:f6:9a:
11:60:51:3e:49:95:6e:28:83:c8:46:62:88:83:d9:
34:72:9e:8e:6e:9a:b7:a7:85:36:83:1f:14:c3:15:
14:75:05:a7:72:50:0c:77:47:48:d6:ce:c8:6a:3e:
a9:5f:5a:e8:04:63:b6:10:82:c9:d5:46:51:0a:7f:
14:b2:34:e7:34:1a:7a:7c:0c:a8:41:61:f8:3e:fb:
01:ef:d6:25:b8:da:4a:e6:73:49:be:64:38:a4:95:
54:5c:3e:60:c7:a0:b7:f2:a6:59:6e:00:26:ae:be:
87:77:ed:b7:26:1a:1c:27:53:95:74:1f:51:bb:1b:
bf:3d:4b:7c:1f:0a:26:e2:36:6f:1a:25:2a:90:86:
68:73:0f:3e:10:f5:65:8b:0b:49:ad:c4:66:c6:09:
16:a1:5b:1e:87:d1:64:a1:c0:62:27:55:84:f7:ae:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:67:77:8A:8D:C1:D8:63:F3:97:87:04:34:1B:90:EF:0B:D2:A5:9C
X509v3 Authority Key Identifier:
keyid:13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:55:35:23:bd:b9:11:c9:7d:2e:1a:97:8c:56:97:26:01:8a:
b5:87:30:34:40:89:95:01:27:89:f1:7c:0f:03:76:1f:40:db:
be:35:c8:93:b7:1b:78:eb:d8:c0:98:55:5b:83:bb:27:c7:67:
26:09:85:a6:b3:b4:e9:42:22:d5:de:95:90:70:f5:06:8e:a0:
f2:8e:ff:b1:25:32:05:c3:d5:cd:fd:af:78:d1:6d:49:f3:24:
1d:3a:09:fc:c8:75:59:7f:46:c8:82:96:b1:c9:92:29:82:5a:
6e:6e:b6:d1:85:9a:6d:d0:df:05:fc:91:1b:d6:9a:7f:5a:be:
ba:1a:20:70:f3:7c:3f:cd:5f:fd:f6:ed:3a:84:e3:13:31:0c:
2e:e0:33:fe:13:76:18:c4:41:e0:ec:c5:51:e1:c7:6f:b3:ac:
eb:47:8d:5e:5d:d8:64:65:75:4c:34:c3:81:03:db:ef:ca:20:
cc:05:e9:f4:57:70:a5:02:f3:09:c4:09:99:9c:bd:b6:5b:7c:
1f:d7:78:ac:74:ae:95:ef:ce:12:2f:8d:d8:2f:5e:6e:76:86:
d5:24:ff:42:d4:d0:93:a5:f3:0d:6a:14:d1:72:60:e4:7b:ff:
f6:f1:5c:61:0f:72:db:1e:b1:45:6f:65:56:48:00:f6:57:6b:
49:22:6b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:41 2025 by rpki-client