Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
File: ezF1mINz5Wtv_gsVofx11Gk64sA.mft (raw, json)
Hash identifier: YvsVtY0CT5etzBmgkSHg2gI6w1ZB+JG9JyKEoOTRcMc=
Subject key identifier: E7:15:9F:14:54:B2:B1:5A:1A:E7:0D:9F:AC:42:61:AC:2A:02:77:EF
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Certificate issuer: /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial: 019A71EE6ED691D3CE221FC5C2166EFBA306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:00:42 +0000
Manifest this update: Tue 11 Nov 2025 08:00:42 +0000
Manifest next update: Wed 12 Nov 2025 08:00:42 +0000
Files and hashes: 1: ezF1mINz5Wtv_gsVofx11Gk64sA.crl (hash: jmtdkhXtJlPRW6SS9pSWzuTb/o1clTeKxSn1jSSmK9U=)
2: lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa (hash: dET9fwU/izT2anivq0drVs4rmphGQ9LJ15mQDS+rUvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6e:d6:91:d3:ce:22:1f:c5:c2:16:6e:fb:a3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Validity
Not Before: Nov 11 08:00:42 2025 GMT
Not After : Nov 12 08:00:42 2025 GMT
Subject: CN=e7159f1454b2b15a1ae70d9fac4261ac2a0277ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:ee:98:13:e5:d9:8d:07:bd:d9:cc:93:51:
47:12:bc:b7:33:25:bd:b7:0a:2a:71:59:25:00:5f:
c7:7a:06:30:cd:3e:58:f3:be:7b:b9:fa:c1:e1:be:
fe:80:37:44:cc:be:85:3f:f4:cc:44:b5:33:8c:2f:
cf:fa:62:7e:db:2d:b4:79:c7:16:21:3a:44:a8:e0:
3f:b2:40:31:12:57:9a:41:2b:4e:f8:f0:6c:e0:2d:
68:a4:96:b4:26:09:6e:e9:0e:22:6d:fc:83:49:30:
1b:07:5e:de:da:5d:10:1d:97:f4:c7:bb:85:2e:b2:
3d:20:c5:18:42:f3:4b:4f:b4:44:97:e2:42:a9:de:
a0:b6:6f:e4:0f:46:c4:e1:eb:b5:69:b0:18:93:d6:
f7:02:3d:ad:c4:b9:f6:b2:6e:fe:c8:d4:9c:b6:a9:
78:95:92:76:f7:c3:3a:be:72:fe:ab:af:d3:ac:dc:
95:82:cd:d8:bc:7f:eb:65:10:0d:0b:33:90:08:0e:
b7:20:05:13:4c:18:f4:22:89:b0:d6:81:c8:99:41:
6c:82:78:0c:75:fb:04:02:72:33:d8:c5:ec:7e:cc:
f5:98:f9:74:c7:8e:81:ad:1f:74:44:89:fe:a1:b8:
7f:19:64:79:2b:d9:2c:9d:a6:60:64:eb:18:b6:5d:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:15:9F:14:54:B2:B1:5A:1A:E7:0D:9F:AC:42:61:AC:2A:02:77:EF
X509v3 Authority Key Identifier:
keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:77:16:75:78:a0:e6:ac:c3:c1:68:e2:e5:7b:5a:7b:23:bc:
88:63:49:ab:15:27:f6:94:77:1a:c5:c2:06:5c:89:1a:9c:e5:
44:8e:c6:4b:35:ff:0d:21:54:65:74:2e:60:5b:6a:79:45:f5:
5d:19:dc:4a:92:9c:38:15:1f:ea:69:df:cb:09:ca:af:87:54:
a2:4f:27:ac:34:06:f0:5b:90:6c:8d:a8:81:0f:9e:03:1c:a6:
3e:83:47:c8:25:45:3f:3d:7d:dd:65:4b:a8:fb:30:e9:23:8f:
5b:fe:54:af:a0:27:81:8f:02:50:9b:21:c3:a4:2c:4c:85:a7:
71:3e:23:35:f4:09:a9:f3:4d:c1:a7:dc:36:49:f6:84:48:24:
44:34:f5:9e:79:15:8e:cc:78:01:d1:35:9e:95:98:68:ae:ba:
f5:b2:45:65:35:2c:42:c0:b6:cd:33:62:c7:05:76:14:1a:54:
e0:f5:80:4c:ed:08:b8:63:cf:09:b4:66:d3:af:e8:ae:1b:06:
7b:e2:66:97:a7:39:1b:d4:f3:71:be:62:6b:09:80:4d:63:a1:
ad:0e:77:b1:a2:16:06:5a:4f:27:84:95:e6:d5:13:03:ca:e1:
d0:84:96:20:ad:97:a8:7c:0d:58:4b:ed:0e:b8:5c:da:75:ae:
4c:e1:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:28 2025 by rpki-client