Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File: e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier: uGYH1L1r7RPdimY1w6NPEAFCCVFMtJFhBqDdItZqk0U=
Subject key identifier: E6:76:38:EF:5F:34:B4:28:8A:3A:99:13:3C:20:D2:15:FE:2D:47:91
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial: 019A00355EE766955A5DB845FBDA4630630F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number: 0C0B
Signing time: Mon 20 Oct 2025 06:01:28 +0000
Manifest this update: Mon 20 Oct 2025 06:01:28 +0000
Manifest next update: Tue 21 Oct 2025 06:01:28 +0000
Files and hashes: 1: X1TlKjqQxQOIUE9nmZNVP4vjBXo.roa (hash: YEcDQS5RtxJGLo4gojN6ANb19cB9cM3e9I1XVwuKzs8=)
2: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: ksU5M26tNxl3QS2mduSdHWdxshqCyFbK8xjQTISSp9I=)
3: pbPgbOFAYYSbv86NqTphvTqH-ss.roa (hash: 2bo0N8otfq6/P5RuOu/G2vL2kcq6chqi1fFShZ0tEtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:5e:e7:66:95:5a:5d:b8:45:fb:da:46:30:63:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Validity
Not Before: Oct 20 06:01:28 2025 GMT
Not After : Oct 21 06:01:28 2025 GMT
Subject: CN=e67638ef5f34b4288a3a99133c20d215fe2d4791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:4c:5f:fd:17:43:4b:76:73:83:23:84:75:
d7:19:b0:d8:a1:ed:23:7d:1b:f1:05:3c:c9:d8:a1:
5d:4e:09:51:89:d6:55:2d:97:00:3f:6a:2c:9b:a4:
b6:fa:8c:3d:56:bd:94:dd:b5:22:9d:86:99:a1:4e:
0d:fb:01:fd:b1:f2:28:70:67:10:44:82:e7:fd:66:
0e:cf:10:c9:77:1d:26:81:57:00:83:fb:71:1d:ad:
6f:b8:86:6d:e3:85:9d:8f:10:a1:52:eb:04:80:e9:
03:62:d9:b0:99:23:a2:ee:a2:a0:4c:b3:45:53:ab:
94:2b:84:22:57:3a:13:77:0c:0f:c2:46:18:d9:b1:
4d:76:6e:6d:1f:f2:09:52:26:eb:68:ee:ce:72:bb:
4f:30:61:84:b5:5d:ba:da:c2:27:3c:3e:ff:30:3f:
f3:e4:18:f8:0e:81:4b:27:99:d9:4a:0d:8b:a9:c5:
cc:04:57:43:8f:a1:04:6a:5d:03:ed:ff:a4:8c:2c:
9e:df:30:48:2e:2d:5b:f4:47:2b:74:29:3d:bf:62:
53:53:17:75:0a:1b:cf:89:fb:ff:ea:cc:5d:97:5c:
17:95:ed:98:fc:d2:a8:bf:41:09:d4:c3:3e:cf:9f:
aa:92:e4:70:0f:ba:8d:69:8a:ee:d5:69:33:2f:3a:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:76:38:EF:5F:34:B4:28:8A:3A:99:13:3C:20:D2:15:FE:2D:47:91
X509v3 Authority Key Identifier:
keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:82:d9:44:4d:68:c4:a1:b5:6a:56:2d:25:0d:e3:c6:ba:7d:
af:68:9c:52:ca:03:50:97:17:92:e5:a9:05:c5:b5:29:ef:85:
99:9f:7a:b1:79:8e:68:46:f3:32:d7:9e:e5:2f:e0:3d:b8:78:
ae:ff:7d:67:9e:76:a9:06:a0:db:30:9e:2e:c2:7f:e0:6d:8c:
a2:36:f2:49:19:71:4c:b4:7c:ec:71:98:a0:bb:6a:2c:e4:a4:
43:23:fe:71:16:74:ed:49:dc:25:0f:1d:43:a8:d1:61:84:44:
90:4a:be:bc:26:be:b3:c2:00:4f:f0:5e:7c:53:c5:a6:72:5b:
93:ec:58:ff:38:9d:51:ef:b9:ee:b1:96:8b:ef:08:b4:27:1e:
00:df:ee:3d:49:d3:8c:64:ba:24:4f:86:4e:d9:1f:4f:f2:22:
ea:07:bf:0f:9b:1b:13:e5:a3:b7:0c:ed:2b:17:6c:76:76:63:
96:3e:d6:5f:d4:18:76:ff:6c:a5:48:f6:47:3d:d0:1a:8d:40:
03:b1:54:ab:88:e9:02:2c:33:c2:d2:ed:96:93:4d:7f:bb:6e:
12:2d:1f:08:5f:01:36:d2:9a:1f:33:a0:cb:08:54:0d:ec:33:
44:b8:a1:ce:56:fb:8a:2f:a7:d6:81:ed:30:63:dd:81:b0:69:
38:72:6a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:16:20 2025 by rpki-client