Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
File: Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json)
Hash identifier: VpufQLXVV/tZBwhWpPSrVtcikZYdnV3Y1V8S3YXLcxQ=
Subject key identifier: 71:00:1A:C3:C6:1A:E5:AB:02:60:2C:CF:AA:10:20:54:20:4F:A7:78
Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
Certificate issuer: /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Certificate serial: 0199FBEB40D9DA29D3BEBEF85385A5B4AAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
Manifest number: 1432
Signing time: Sun 19 Oct 2025 10:02:02 +0000
Manifest this update: Sun 19 Oct 2025 10:02:02 +0000
Manifest next update: Mon 20 Oct 2025 10:02:02 +0000
Files and hashes: 1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: xaDc/WayajHLnudpMu8YYdbTL6gtLN7zNkxhPvJGkrY=)
2: T2nJ8YsYUulSZb9GUXFmz8VHViw.roa (hash: 5XjZ7sWfLWF9S9IVh/StOJhbx3B86TdyvGGrjN3b+RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:40:d9:da:29:d3:be:be:f8:53:85:a5:b4:aa:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Validity
Not Before: Oct 19 10:02:02 2025 GMT
Not After : Oct 20 10:02:02 2025 GMT
Subject: CN=71001ac3c61ae5ab02602ccfaa102054204fa778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:85:62:1f:ef:1f:ec:23:19:c1:95:3a:bb:
05:44:01:84:fd:9b:6f:33:64:8b:f5:aa:ee:23:4b:
f4:23:f6:82:a4:f5:61:4e:35:ce:d9:5b:56:b0:26:
5d:51:fc:c3:de:0b:a7:63:8b:5d:64:88:b1:80:73:
93:75:3d:9a:4a:e9:d7:b6:5e:64:b9:da:61:88:ab:
39:8a:f2:e4:fd:7e:20:d8:b9:96:e1:26:d5:bd:f4:
e5:95:fe:63:4d:71:79:a3:a2:c6:bc:72:50:00:ed:
da:3f:40:fb:8c:d3:dd:ae:31:b9:cc:7f:91:29:9c:
94:10:61:6b:e7:a8:3d:86:4d:3a:43:27:7c:18:72:
df:50:e6:de:38:c4:36:06:1e:c9:c6:6c:66:ec:35:
6c:d0:10:e0:30:e2:1b:e0:b0:2f:84:6d:2f:fa:2a:
ef:f2:48:af:af:07:74:c1:ed:e0:f4:56:03:22:ec:
0c:5d:17:ac:3b:1b:5c:d1:d6:9e:58:37:09:ab:00:
f7:7f:22:2f:f8:b1:cd:e2:53:13:6f:a8:70:a5:6d:
a8:f0:b9:4b:86:dc:6c:f2:bb:c2:6b:ac:a1:16:85:
0d:a3:53:0d:5b:6e:9b:c1:e6:e6:96:40:e6:4f:90:
9c:d8:fd:72:c4:d3:2b:fd:dc:1d:ce:24:e1:3b:75:
21:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:00:1A:C3:C6:1A:E5:AB:02:60:2C:CF:AA:10:20:54:20:4F:A7:78
X509v3 Authority Key Identifier:
keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:85:cd:ca:39:37:c4:52:e6:f6:12:45:65:0d:46:d9:9d:af:
ed:6d:b3:83:ea:98:18:9c:24:77:c1:ed:be:ae:3c:58:e2:e0:
a9:2d:2a:1e:37:38:dc:a7:88:8c:6a:b0:34:45:a5:02:58:3c:
34:26:64:20:9f:1b:5b:bf:04:41:e7:8f:4b:69:f3:5f:28:b2:
45:dd:2a:95:68:83:c4:b5:52:76:e4:ef:88:ff:27:4d:39:32:
47:e0:5e:7d:99:29:3a:6a:2c:4c:33:52:4c:f7:17:3e:5b:69:
77:f9:81:57:a6:56:86:ef:eb:5b:32:ed:dd:3b:dd:16:ac:c5:
ab:5a:73:6d:ea:83:e5:d3:db:b5:b9:57:9c:73:a3:27:c2:09:
77:eb:00:c5:1b:46:0e:0e:66:47:d9:54:64:d9:87:bb:3a:26:
65:2b:e7:3f:28:54:cc:b0:88:b3:c1:de:1a:db:a4:2b:00:cb:
36:15:27:e6:68:d4:fd:b2:5b:d9:eb:8c:16:54:e4:80:24:d0:
4e:f3:50:eb:2c:3c:c5:34:d2:05:fe:27:cd:99:0d:47:6a:0b:
fe:fc:ef:d4:25:32:03:73:23:84:26:b3:ab:0c:22:80:08:f5:
71:8c:91:33:70:a4:64:e3:16:2e:7c:e0:57:f5:47:0f:f6:6c:
18:c0:54:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:41 2025 by rpki-client