Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
File: e4J6zGgKop3ayCOInYeGPkFLJBE.mft (raw, json)
Hash identifier: OPA+v12PCLE6G+Ed6l0Jry3D5CSn3FLRCH2w0GlJ0Wo=
Subject key identifier: B1:96:72:E3:BF:C5:30:C2:A7:0C:41:E4:57:C7:75:84:A8:A4:6E:6F
Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
Certificate issuer: /CN=7b827acc680aa29ddac823889d87863e414b2411
Certificate serial: 019A72CA60894F4FD80B6A42D862665C1E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:00:56 +0000
Manifest this update: Tue 11 Nov 2025 12:00:56 +0000
Manifest next update: Wed 12 Nov 2025 12:00:56 +0000
Files and hashes: 1: e4J6zGgKop3ayCOInYeGPkFLJBE.crl (hash: NlMxz46qiyE5r6jYCR9JYSathXaGdHoQkIehjDG0KR0=)
2: vAUqTPB1ggTD55ydvicj8MOXqzU.roa (hash: ANS6SkWw8/TFy8xaxFG7MJ7RE0vAnysZgfuBquUIKSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:60:89:4f:4f:d8:0b:6a:42:d8:62:66:5c:1e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411
Validity
Not Before: Nov 11 12:00:56 2025 GMT
Not After : Nov 12 12:00:56 2025 GMT
Subject: CN=b19672e3bfc530c2a70c41e457c77584a8a46e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ae:56:84:13:e4:27:92:8a:06:ea:7c:90:28:
47:ff:1e:c5:02:13:ea:9d:eb:55:ff:71:02:eb:f1:
7a:64:6f:15:6c:63:38:ca:d5:1f:74:24:4d:6f:1d:
f4:4c:1d:c6:e0:73:16:74:46:25:cc:7b:7a:71:8e:
7b:fb:99:f2:c6:30:8f:cf:8b:ee:bf:a5:32:77:16:
7b:56:8a:8e:fa:bb:d7:73:93:c1:af:ee:32:71:4d:
55:f6:c9:7a:09:a6:0f:5b:f1:be:ea:66:ca:bb:1d:
9d:cb:58:5e:f6:89:8d:1b:82:74:64:03:3a:93:1a:
a9:b9:d8:e9:20:c2:26:54:9a:e0:b2:0a:9e:96:7a:
f0:7c:1f:55:05:c6:0b:c1:fa:70:38:eb:47:93:d1:
95:fd:df:a7:c0:e3:84:b0:26:0a:79:89:05:dd:f8:
67:e8:8f:46:81:06:d7:19:24:22:6c:14:a6:52:8d:
6c:aa:5a:75:23:3b:89:cc:a7:14:bf:05:9e:91:12:
79:74:ff:f7:d0:97:5d:db:b1:f6:4f:1e:41:04:ce:
65:c2:83:d8:05:82:c3:cc:bd:df:74:7c:95:47:8f:
47:36:e4:70:1b:e5:bc:6e:b7:9f:44:b2:fb:e7:47:
db:e7:a5:1c:0c:08:0a:b8:0a:f3:2b:90:47:58:6a:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:96:72:E3:BF:C5:30:C2:A7:0C:41:E4:57:C7:75:84:A8:A4:6E:6F
X509v3 Authority Key Identifier:
keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:13:b4:80:10:60:84:e9:7f:06:80:23:c6:16:4f:0d:08:f7:
ff:8a:9d:39:f9:69:06:20:d3:66:54:85:9f:46:2c:42:ed:33:
70:a0:ab:c9:47:12:19:53:d5:ee:a9:12:9e:60:5b:da:1f:a4:
42:7b:08:ec:04:e2:77:a0:66:73:8a:2e:b5:67:57:f8:00:1e:
24:0e:69:3d:fd:33:ad:f6:6e:ed:21:6e:a4:23:6c:95:f3:b6:
d8:32:bc:87:05:3f:7a:71:99:0f:51:7e:6a:13:8c:ad:33:70:
a2:5c:b4:a0:9a:e0:b5:1f:cb:71:e7:94:ce:14:78:cd:0c:ff:
0e:c3:b7:37:eb:dc:51:c4:f5:b0:b8:f1:9a:b3:77:a3:a5:00:
b5:1a:95:5b:c6:c0:7b:a9:9e:25:bf:18:a1:52:ee:66:e8:61:
16:9e:25:53:6e:59:34:32:e6:42:76:b5:40:87:0f:f4:63:32:
83:ba:95:26:b0:f7:ea:54:7f:ba:72:e7:7f:9b:e4:94:5e:c0:
2c:c6:ee:f0:86:06:c6:bf:2c:64:9a:c4:22:1a:fc:69:c0:06:
76:11:b4:1b:0a:4f:be:54:1c:b7:bb:c0:d2:cb:f7:50:8b:6e:
44:a8:ac:80:bf:36:7d:4a:1b:c1:4d:11:1b:3e:59:e9:c1:47:
56:25:07:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:37 2025 by rpki-client