
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File: e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier: A/mDpWYsS8ArCDz1t5fJCi4ig/PuO6RDAqs7UtpSVfo=
Subject key identifier: 7B:CA:59:E4:F2:88:8C:2B:F2:55:B4:A0:1F:08:F8:47:28:43:2D:58
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial: 019A0411C0C3BE083B7532747426A973C738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number: 0C0D
Signing time: Tue 21 Oct 2025 00:01:03 +0000
Manifest this update: Tue 21 Oct 2025 00:01:03 +0000
Manifest next update: Wed 22 Oct 2025 00:01:03 +0000
Files and hashes: 1: X1TlKjqQxQOIUE9nmZNVP4vjBXo.roa (hash: YEcDQS5RtxJGLo4gojN6ANb19cB9cM3e9I1XVwuKzs8=)
2: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: mmCRcs/iklvV86Qavt30Jd6Brq8UhU2oQpCzW7Q8Et0=)
3: pbPgbOFAYYSbv86NqTphvTqH-ss.roa (hash: 2bo0N8otfq6/P5RuOu/G2vL2kcq6chqi1fFShZ0tEtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:c0:c3:be:08:3b:75:32:74:74:26:a9:73:c7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Validity
Not Before: Oct 21 00:01:03 2025 GMT
Not After : Oct 22 00:01:03 2025 GMT
Subject: CN=7bca59e4f2888c2bf255b4a01f08f84728432d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6e:c2:30:03:f8:6f:9b:04:b8:a6:7f:0f:64:
10:c4:86:ca:6c:57:d9:4d:88:81:dc:c2:c5:41:9a:
fa:cb:04:66:8f:3d:b8:54:2b:1a:08:2b:43:6d:48:
60:ef:69:23:86:51:ce:c5:32:90:b5:97:df:81:58:
eb:f8:7d:f7:13:b7:86:f6:36:f0:12:44:b9:c2:e0:
05:82:e1:b6:e4:c0:36:db:9b:ad:c0:fd:9e:d9:a1:
91:05:ff:98:f1:3b:4d:c8:a3:74:17:6d:3a:3c:f4:
cd:25:ac:79:7a:7e:83:e4:31:84:16:d2:d7:f8:dd:
22:b3:26:b5:5f:2b:6d:b2:89:c1:43:f6:ed:2a:6d:
61:a2:18:4c:60:87:b5:62:9f:58:ac:b7:2c:1f:6d:
31:cf:98:d2:c1:5e:15:1f:66:45:74:98:25:5a:99:
86:5f:62:80:ec:dd:81:86:50:23:58:6c:10:e2:f0:
86:e7:80:de:79:df:65:15:b6:47:21:9e:5e:aa:b4:
de:2d:a0:bf:d3:bb:37:28:88:8b:57:c1:76:46:a2:
4b:c1:bc:48:cb:df:79:95:27:d8:4c:11:ac:38:8e:
6a:b4:29:92:8e:03:83:43:6c:52:8e:0a:40:1a:c4:
02:5d:1c:02:60:b0:19:64:33:25:a3:70:74:72:23:
61:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CA:59:E4:F2:88:8C:2B:F2:55:B4:A0:1F:08:F8:47:28:43:2D:58
X509v3 Authority Key Identifier:
keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:15:14:d2:51:ae:cf:e5:8d:ee:a2:2f:60:f7:a4:51:a5:43:
db:d7:ea:ce:9f:45:e4:27:3b:46:b1:94:6b:77:8f:b3:a7:88:
b7:9a:6c:45:7a:f7:0f:56:ed:bd:99:e8:1a:6c:11:8c:5e:69:
f6:3e:e2:f4:98:58:02:f7:be:14:bb:15:84:94:e3:59:5f:de:
8c:1c:dd:5e:81:d2:99:67:7e:ce:ea:26:46:e9:56:c2:2a:a6:
c1:1f:bf:3a:20:bd:8f:cb:84:b7:49:6c:22:9f:3b:de:fd:1b:
fa:c3:c2:0b:f0:46:2e:0b:96:63:4c:c4:dd:98:c4:0d:9c:5e:
04:82:bd:a4:66:42:56:65:55:3f:2c:dc:62:85:3c:81:a1:f2:
2f:dd:b0:fb:d5:30:b8:d8:6c:5f:62:fa:7f:eb:67:a3:32:c2:
9b:16:bb:cd:eb:f0:90:3f:b3:97:3e:9f:8c:91:72:4c:94:85:
f8:9b:6b:e4:23:5f:a2:40:eb:8b:1c:d4:05:1c:9d:b7:9d:2c:
33:e1:87:79:3e:e2:d8:76:75:07:a0:9b:93:ad:51:06:42:10:
f2:a5:58:a5:6a:03:b7:e9:71:fc:d7:ce:b6:8a:fe:a5:d8:4d:
0f:a5:d2:7e:aa:18:3f:d0:93:1e:aa:71:de:7a:28:29:f9:79:
95:6d:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:54 2025 by rpki-client