Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: bJPiR7gj3U28QQqNaWp6/hNZpDqI97HwxPtB6OAbI+Y=
Subject key identifier: 0F:32:B7:3D:F8:3C:BE:3B:89:D2:EC:E4:BA:43:CC:BA:8D:D3:92:C8
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 019A25C1719CD40AEACCECB7100AE57E44E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 15B9
Signing time: Mon 27 Oct 2025 13:00:25 +0000
Manifest this update: Mon 27 Oct 2025 13:00:25 +0000
Manifest next update: Tue 28 Oct 2025 13:00:25 +0000
Files and hashes: 1: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: d7vxnaUkC0dtTqY9sonEm7pcjeW1f0qlioy+6RxR2DM=)
2: qPByKnpBcwc5PCFg3I5YVGxollc.roa (hash: VpVIKGAdMgvH4OCbsZNXF0xBFfIGSal78lndZpVlhBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:71:9c:d4:0a:ea:cc:ec:b7:10:0a:e5:7e:44:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Oct 27 13:00:25 2025 GMT
Not After : Oct 28 13:00:25 2025 GMT
Subject: CN=0f32b73df83cbe3b89d2ece4ba43ccba8dd392c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:49:5c:4c:7c:6e:71:1e:73:f7:48:72:cb:
ac:c5:2a:de:fa:44:28:74:71:e7:c4:a7:8a:b6:7e:
ed:aa:e6:2a:28:46:96:af:8e:38:07:5b:80:7b:64:
2a:93:79:40:1e:20:e7:ae:d1:ed:93:56:43:7f:1a:
74:19:61:39:a9:14:9f:a4:ac:b5:9f:b0:d0:aa:9c:
af:24:69:11:a4:7a:cf:b5:f5:1b:2a:a3:bb:25:7f:
18:65:ca:fe:3e:dd:45:71:7e:fb:90:9f:21:b1:3f:
03:52:f5:ad:39:13:da:66:7c:18:cb:60:93:e5:3f:
87:55:a8:de:00:c3:44:18:00:94:05:4e:73:5c:2f:
8a:15:7e:b2:79:0b:b7:4c:11:c1:16:ab:a0:62:64:
67:b5:82:1d:66:61:2c:da:97:e9:76:90:9a:f5:39:
df:28:88:f1:40:9a:38:34:8c:fb:c9:ca:a7:42:aa:
5e:fb:05:04:3c:3b:71:91:7f:72:d1:6c:e9:b8:41:
ff:a2:af:ad:c8:45:1a:8d:07:16:b2:ac:2d:9f:bb:
0e:92:73:8e:5d:ec:69:e4:f1:5f:c9:1b:27:64:97:
5f:92:6f:08:d4:6e:b7:21:fe:de:41:38:75:92:bc:
f8:6b:e4:90:cc:8b:a1:28:67:6c:8b:aa:55:cf:80:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:32:B7:3D:F8:3C:BE:3B:89:D2:EC:E4:BA:43:CC:BA:8D:D3:92:C8
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:13:6b:9d:cb:b7:23:c0:3c:6d:7a:76:27:4b:a2:72:30:03:
56:78:5a:a1:01:36:08:a9:5b:11:e9:b5:18:ad:60:6d:6c:9a:
94:7a:39:b6:2e:80:7f:2d:5d:a8:18:44:f7:a9:88:62:6c:c7:
52:83:85:a5:e7:3c:8e:d2:ff:00:f2:c1:c8:f7:ff:f1:84:b6:
b6:bc:ab:59:c6:f9:4d:27:cf:73:73:6e:cc:0f:cd:37:72:0f:
35:6d:a2:97:c5:44:da:37:24:54:ef:84:c2:ba:ac:1f:69:93:
c3:07:9f:dd:f9:6c:82:06:b4:74:94:5f:59:b8:d7:d3:b7:c5:
c9:e5:c2:4b:96:5e:ec:de:c9:48:0b:67:c7:19:02:e3:31:8e:
41:d3:ca:a5:98:5d:96:35:d5:bd:e3:99:15:e3:35:b7:21:26:
1c:e1:f6:2d:3a:8b:0c:e9:eb:5e:e2:94:b2:68:10:75:c0:90:
17:44:d4:74:88:f5:ef:f1:19:f2:12:cc:d8:23:cb:dc:96:1a:
b9:c2:c3:d8:41:3c:13:99:11:ed:51:9b:8f:e7:37:43:77:0a:
bc:5a:fe:70:7b:41:e4:90:4e:42:31:f5:16:bc:15:ea:ef:4b:
10:ca:4c:de:35:97:51:30:dd:3a:27:5d:d1:b2:20:3c:4f:f7:
5c:cd:b5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:28:10 2025 by rpki-client