Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
File: e1dU5NIIxkNfGr7JN83iAAkgTcA.mft (raw, json)
Hash identifier: U9CJSNefjdDtHpu1lwKx6a8jc6Xhj4nZdH68nAmzWB0=
Subject key identifier: 0D:15:8C:1E:FC:D7:27:2D:A2:E9:89:D0:84:B2:0D:69:17:30:C7:93
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial: 0199FD3451060D9A01C97C5E48B9DC7A416A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
Manifest number: 0B3F
Signing time: Sun 19 Oct 2025 16:01:28 +0000
Manifest this update: Sun 19 Oct 2025 16:01:28 +0000
Manifest next update: Mon 20 Oct 2025 16:01:28 +0000
Files and hashes: 1: 67OzM8ECZbyoq_BnZX1dgSdsSqE.roa (hash: g9PYZvAqU4JsF+aihO2ckiHQRSBgUe4u8ImvTFXc4Uo=)
2: EsKSgJ8EQmtQ4eatv1jfClm65kw.roa (hash: KfQqwkTsCtwKGnXEQFbFhy/ovkmWCSEcDlc1yTA8r8k=)
3: e1dU5NIIxkNfGr7JN83iAAkgTcA.crl (hash: 2iDtRyFVhjo4PG+/GGwoSmOyxLc3TRh9HaVdxUSzeVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:51:06:0d:9a:01:c9:7c:5e:48:b9:dc:7a:41:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
Validity
Not Before: Oct 19 16:01:28 2025 GMT
Not After : Oct 20 16:01:28 2025 GMT
Subject: CN=0d158c1efcd7272da2e989d084b20d691730c793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:02:b3:59:89:00:bf:0b:f8:5a:a9:cf:32:
2c:76:9d:1c:38:d2:e4:3e:2f:75:7e:10:b4:5d:e1:
40:de:0b:62:75:a0:c1:9c:5d:a5:27:21:50:3b:4f:
0a:9f:d6:9d:68:12:d8:81:1a:09:4a:ed:ae:84:8d:
1a:d4:10:4e:72:77:50:3f:91:fd:18:2e:e3:cd:10:
bc:48:e8:11:51:68:27:bd:ed:8c:c6:22:91:c9:7c:
95:d8:d2:56:ba:b6:fc:e3:f8:72:73:c1:31:01:32:
d2:e9:a8:d3:7c:58:5b:52:ce:a6:d8:60:52:f2:73:
2e:89:37:2b:af:65:e9:56:fd:f7:89:83:10:c7:32:
fc:bc:55:fe:60:fc:1d:cd:0a:f2:44:07:47:04:53:
b5:20:b9:26:84:15:af:77:60:4f:60:9c:22:91:30:
b2:2c:81:cd:de:21:e9:32:15:07:58:97:0d:f8:d9:
46:72:7e:06:15:e3:a3:e7:44:99:d4:77:47:ac:24:
28:54:18:db:88:43:1c:80:99:ec:07:85:a5:0f:60:
91:b0:1c:94:26:a0:0b:87:46:68:27:6b:46:f9:60:
fb:4d:5a:c2:33:7a:30:b7:39:81:2b:b4:1c:b7:91:
65:c1:bf:00:07:76:d2:51:b6:b4:88:c2:7d:41:d3:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:15:8C:1E:FC:D7:27:2D:A2:E9:89:D0:84:B2:0D:69:17:30:C7:93
X509v3 Authority Key Identifier:
keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4d:0e:57:9d:69:16:2f:c9:2d:b1:63:35:43:a2:89:a6:71:
7e:67:8d:73:20:9a:d0:f5:4d:52:34:31:2b:75:58:72:49:ea:
99:cb:65:69:9b:eb:e0:f6:42:37:38:d1:54:f6:5b:99:38:9b:
35:94:a3:61:7e:f5:31:52:e1:8b:92:1b:aa:62:d5:5d:3a:6c:
41:51:25:3a:64:48:80:9a:7c:b1:4f:0e:da:37:e6:36:45:11:
25:a5:76:53:eb:16:a0:d0:85:4e:a4:a4:18:63:e9:27:20:7a:
ab:34:db:7e:b8:d4:2f:e7:ec:47:6a:d1:89:f5:0e:58:28:22:
c7:60:56:5f:49:e2:df:1a:8c:3a:0f:26:20:c9:7e:eb:40:49:
39:88:06:cc:9e:f0:af:ef:45:66:7a:0c:6b:67:d7:42:70:b6:
98:92:77:0a:38:88:da:7b:e9:c0:a0:ca:46:c2:15:e4:24:3e:
56:4d:48:eb:74:a0:56:59:88:08:49:bb:4c:24:48:79:7a:8b:
b6:af:54:37:2d:08:6c:ea:b9:40:25:1d:4d:ee:6b:b0:2d:5a:
21:75:09:59:99:19:cc:b7:be:93:88:13:31:a2:42:9d:a4:85:
69:4b:86:c0:4f:65:60:ba:1f:6b:e0:57:93:d6:06:ee:fa:76:
09:e6:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:20 2025 by rpki-client