Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: pGY59Th3dHb0ZSvqTxq7kvb/vjy/fq5MFLy1lyeVKU4=
Subject key identifier: BB:9A:D1:C2:DD:3E:AC:7F:44:1F:44:4A:EF:50:49:63:18:DE:01:D6
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 0199D212DD4C8DB8B9147F4C3A081EB9A79D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 151C
Signing time: Sat 11 Oct 2025 07:01:15 +0000
Manifest this update: Sat 11 Oct 2025 07:01:15 +0000
Manifest next update: Sun 12 Oct 2025 07:01:15 +0000
Files and hashes: 1: 4GeQc9KQXXi6xI1vB_7_1xuddrA.roa (hash: EUSBq2g9uve+neWandDVOfufL8m9jgeOZuElm8BWqRs=)
2: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: FazK0ykohz50GBYiZ+qkYM6XdbDqoL1pheMAgmR8jZ8=)
3: mrO_skF5U6ZGJqbgAfNZfugggNM.roa (hash: yfwhNV2BqjohUdfQURFd8JsTx2XS1MSjZ6sAAemAuqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d2:12:dd:4c:8d:b8:b9:14:7f:4c:3a:08:1e:b9:a7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Oct 11 07:01:15 2025 GMT
Not After : Oct 12 07:01:15 2025 GMT
Subject: CN=bb9ad1c2dd3eac7f441f444aef50496318de01d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:8f:81:f4:38:48:af:aa:fd:bc:0c:93:04:
7f:e2:da:9b:21:d0:7b:2f:1a:5f:af:84:4b:bc:c0:
71:64:69:ef:e0:47:5d:fb:f3:bc:d7:3a:2c:e0:92:
c6:61:16:4b:54:76:21:37:73:e2:8b:ea:4f:47:88:
40:9f:b4:5f:a6:2a:8b:af:fd:c2:4c:8e:bf:b6:d2:
89:eb:25:26:1e:37:dd:f0:58:a8:b8:29:a4:04:8d:
98:90:eb:87:cc:9c:c6:0b:65:ce:9d:7b:ce:07:d0:
65:48:95:8a:66:b6:f8:d3:5d:ea:98:d2:89:72:eb:
a8:5f:a1:95:81:a7:75:05:11:a4:c1:c9:67:09:f8:
a3:24:ef:aa:cb:e6:f1:10:9a:49:96:d1:30:f2:57:
a9:e5:e3:0f:d8:db:ae:84:cf:f7:ab:bd:e9:df:76:
c9:59:9f:00:9f:7d:01:72:13:1e:29:3d:0f:a0:89:
2a:f2:0d:3b:da:06:a9:23:6b:5d:54:d4:3f:03:c7:
0a:c8:7a:20:10:0b:84:f0:80:6f:5a:42:75:23:0d:
4c:3c:db:aa:1c:0a:14:a8:14:6b:41:bc:d0:b3:6e:
75:a1:21:63:4b:72:f2:ee:aa:03:d4:80:bc:b6:47:
e8:1d:29:fe:dd:7e:7a:d8:7d:e8:fc:c6:5c:44:d2:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9A:D1:C2:DD:3E:AC:7F:44:1F:44:4A:EF:50:49:63:18:DE:01:D6
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6a:77:74:32:31:b5:0b:91:8c:43:fe:d9:ca:3a:4d:3a:37:
6d:1d:c1:e9:24:8c:ac:41:1d:00:34:0b:1e:60:5d:ee:51:ae:
32:f2:15:02:e8:9e:a5:c6:8a:a9:e8:49:e4:2e:5d:08:82:fd:
94:dc:ef:ca:32:8c:d2:9f:e8:07:ea:48:aa:b6:93:06:b7:21:
a9:73:90:19:21:60:3e:e5:2a:3c:a0:b3:30:89:87:2b:76:54:
ca:25:87:a5:ba:2c:41:8d:a4:03:8e:7f:58:a4:be:cc:5c:45:
74:b4:3f:e2:a6:3c:70:68:1b:bd:65:89:52:af:23:38:e9:41:
ae:67:25:ff:16:d1:c3:65:8f:49:b8:76:c2:0e:01:5b:5b:bc:
9d:0e:d7:1a:40:e4:e1:ae:65:41:8a:77:7b:58:b1:3c:e9:7c:
a4:4a:6c:af:c8:e1:ee:e6:10:4c:2d:44:cb:e9:ce:5a:2b:b8:
f6:4d:34:50:12:84:04:45:27:04:4b:f7:76:bc:f1:f0:a7:c6:
11:3b:60:30:fa:c4:ac:3d:eb:5f:e6:73:f0:6c:a3:f6:92:be:
82:9b:bc:02:74:36:4c:0f:04:28:88:9d:89:58:0e:56:6c:54:
09:f6:96:9d:44:ca:df:68:b1:37:3c:74:12:c7:6c:39:30:90:
54:91:77:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 10:00:19 2025 by rpki-client