Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
File: Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft (raw, json)
Hash identifier: 7PqSOv0W2qObA+dVl86hrOrqYNpsXUOwS8nGDwZLsU0=
Subject key identifier: 50:38:40:1D:80:15:55:4A:D1:44:8B:3E:B0:8D:1F:31:D1:2B:DD:A9
Authority key identifier: 13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
Certificate issuer: /CN=132e1e484fca8e9528df6ac1483056c88786771d
Certificate serial: 019A71B8024A2F4CC465B60F6B547574C55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
Manifest number: 0DE9
Signing time: Tue 11 Nov 2025 07:01:15 +0000
Manifest this update: Tue 11 Nov 2025 07:01:15 +0000
Manifest next update: Wed 12 Nov 2025 07:01:15 +0000
Files and hashes: 1: Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl (hash: JuItOQfhcKlP/aMhHtpZ0XG4qQePMmeuM5/+a0yIfYI=)
2: TEzCfvre_kNQlO-1mjIWxdip7ZI.roa (hash: EQul9dCLm5RmR5z5S2xFOcA4gCDhpuf1vUT9kUiOZuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:02:4a:2f:4c:c4:65:b6:0f:6b:54:75:74:c5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=132e1e484fca8e9528df6ac1483056c88786771d
Validity
Not Before: Nov 11 07:01:15 2025 GMT
Not After : Nov 12 07:01:15 2025 GMT
Subject: CN=5038401d8015554ad1448b3eb08d1f31d12bdda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:da:b2:98:ef:9b:43:b8:4e:a3:cd:c3:d9:
c4:2d:b1:69:3d:5c:a5:6e:ce:c4:46:92:d8:b1:0a:
54:fd:d2:22:35:42:69:1c:84:e9:0a:9d:8d:c5:b6:
76:7f:0a:d4:ca:86:a7:38:41:06:98:ea:6d:6f:5f:
ce:61:bf:1f:28:24:29:0e:85:f7:8a:d8:df:ba:a8:
85:6b:d4:ac:90:72:d6:bc:8d:ba:1c:27:2a:56:5a:
ce:b5:f3:af:8d:2f:02:db:bb:b6:3c:f0:6c:e5:4b:
df:2e:af:a7:67:45:3e:aa:28:4c:a2:30:74:66:97:
f2:f6:43:39:e8:33:8c:0c:d0:16:18:c2:c5:c9:31:
fd:e8:e6:f7:9a:26:c4:64:07:1d:e6:a6:28:9f:b6:
96:16:bc:27:8e:d8:5f:43:d1:0e:02:14:88:74:ca:
ba:94:a4:d0:7e:62:6e:8a:b3:f3:91:17:76:75:cb:
26:92:f9:54:ea:85:5a:89:5d:09:27:a7:e2:48:a3:
a4:7d:31:86:83:f6:ca:77:d4:e7:81:09:47:6e:cf:
b1:15:c4:ec:93:f5:9e:40:45:90:13:ae:82:ee:c3:
db:83:69:7a:f1:29:1e:b1:d9:3b:1e:58:14:09:c8:
6f:8d:42:19:6e:08:e0:85:8f:ac:bf:83:db:ed:6d:
6f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:38:40:1D:80:15:55:4A:D1:44:8B:3E:B0:8D:1F:31:D1:2B:DD:A9
X509v3 Authority Key Identifier:
keyid:13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:80:b3:d0:60:45:32:ae:a4:a9:2c:fa:4f:0b:c0:97:98:78:
8a:94:f3:f5:82:3e:08:ec:ef:fc:04:07:5c:2d:db:7c:6f:ef:
b3:c4:97:b7:f0:31:a7:7d:a4:01:44:fe:26:42:b5:55:8b:2b:
61:26:44:87:8b:c6:9b:09:79:e7:33:3f:4c:d5:06:a7:71:fe:
37:b3:5d:d9:4b:79:b3:99:28:d3:95:ed:01:59:9f:bd:6f:70:
2d:dd:9e:9f:25:6a:e1:c0:ff:6e:bb:d0:7a:fe:47:25:95:e6:
a7:d8:15:f7:9f:9f:32:32:7c:dc:77:89:ca:c7:13:bc:f3:83:
fa:d2:63:5f:19:9c:fa:7a:28:a4:29:5f:58:77:af:6c:12:e5:
51:55:60:14:a9:4e:01:51:8c:86:0b:86:c2:c3:f6:23:d6:9a:
9b:57:01:2f:00:63:6b:e6:55:f9:ca:b1:bf:d3:08:1f:23:19:
2a:0b:58:43:b5:73:b6:bd:e1:d5:b6:5a:0e:f0:bf:01:26:5f:
55:69:b6:a4:2a:b0:f2:cf:72:a1:d6:6b:a7:b8:d5:2d:04:fd:
41:9e:9f:d9:a6:70:9e:2a:0a:e3:66:82:61:38:60:cc:2e:0a:
25:d2:ed:e2:5a:cd:e9:f4:b1:00:57:c9:d7:26:16:30:80:0f:
ed:a0:7e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:14 2025 by rpki-client