Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: YLtS0rkMsudFc6mk7o2/I9fbNYO6nlMfqYEdmaK5bFw=
Subject key identifier: 15:69:33:F2:51:E9:EF:C7:E8:D4:82:3A:87:28:E0:33:F3:7C:E2:24
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 019A725C4AEEDD8D0D78EA7298BC9473216B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 080A
Signing time: Tue 11 Nov 2025 10:00:42 +0000
Manifest this update: Tue 11 Nov 2025 10:00:42 +0000
Manifest next update: Wed 12 Nov 2025 10:00:42 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: ybkco7bSlCQafTH7BdWnY0pad0eYziGEM0natJ0L3UA=)
2: 16oTEEIl27CKEl8kDFBVV2e74TM.roa (hash: GFSywM1HF3ONg0Q2eIpgomzVpl6N7IMaPhzlqTk/u0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4a:ee:dd:8d:0d:78:ea:72:98:bc:94:73:21:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: Nov 11 10:00:42 2025 GMT
Not After : Nov 12 10:00:42 2025 GMT
Subject: CN=156933f251e9efc7e8d4823a8728e033f37ce224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:8b:58:00:c9:f1:7f:b0:74:10:a0:06:cb:
98:67:df:d7:d0:bf:16:8b:af:7a:3a:c6:e1:56:88:
bd:a8:1c:07:a2:a1:b3:db:b3:c1:ab:dd:fb:51:b4:
62:53:2f:30:a2:b4:87:f6:38:11:42:b8:b2:d8:07:
5d:7a:73:37:63:62:e1:fe:c7:3a:da:6f:ec:63:08:
ea:d7:d9:ca:a3:d0:df:ca:a7:a5:a8:5f:28:17:2c:
51:72:a2:32:38:1d:fd:ff:23:77:43:4e:4a:69:ae:
5e:a0:8e:87:8a:24:26:2e:f1:6a:f5:d5:e6:30:92:
f4:87:81:85:70:6c:49:f7:fb:ab:1d:ba:07:1f:ff:
c0:58:ad:37:5b:7d:ff:00:70:18:17:76:ee:bd:2f:
fd:26:68:76:de:4a:77:82:22:a8:7d:e9:50:bb:96:
f0:55:8e:f4:57:a5:2b:cb:d4:2e:31:0c:6a:b6:16:
91:26:33:e1:21:cf:db:58:a7:72:eb:d8:57:8b:8b:
d8:4f:c2:0f:c6:89:54:b6:8b:12:23:f6:42:d6:42:
6c:4e:45:a5:be:fe:8f:41:db:10:37:fe:d6:3a:4b:
54:57:86:8c:dd:97:53:9d:42:53:16:aa:fa:ef:c3:
08:08:0e:ca:59:02:cc:a9:18:3d:52:31:e8:e8:2c:
c3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:69:33:F2:51:E9:EF:C7:E8:D4:82:3A:87:28:E0:33:F3:7C:E2:24
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:84:41:c2:db:29:0e:79:70:04:34:17:62:5e:2d:89:3d:cb:
e6:8f:7c:3f:7d:b9:3e:a5:61:d3:02:61:df:cf:fb:bf:ae:15:
2c:39:e7:b2:a2:da:2c:4a:9a:d6:72:cd:8c:86:a2:fc:cb:fa:
61:bb:fb:82:8e:b6:3c:97:7c:08:29:cb:f8:ae:0a:20:6c:e9:
93:ec:1f:f6:f3:48:f1:f1:86:4e:32:04:7a:e7:bd:ac:47:c3:
66:76:bc:80:ad:f8:f6:6d:19:5b:bf:06:da:b0:20:14:54:ff:
46:5e:4c:c9:58:34:83:a0:cf:ee:c5:17:7b:45:36:73:98:85:
8b:89:17:3e:bb:de:84:6c:3f:08:42:e5:cb:3b:d6:0f:6b:d0:
19:e3:19:58:49:10:6b:88:02:1d:3e:a2:b5:ab:d5:a8:8c:27:
34:4c:23:20:72:55:c7:ab:83:09:4f:34:0c:e7:bc:52:12:d1:
ac:87:25:43:30:cc:4d:4b:f7:e0:2d:7e:ba:6d:e7:82:27:8b:
49:91:b1:cf:b9:d7:a2:d7:d2:42:f0:d9:ee:65:6c:b2:d0:a1:
8c:d3:b0:08:ae:04:60:bd:f5:0e:4b:22:a0:36:b3:65:53:1d:
26:a4:34:76:9a:ce:60:3c:0c:78:7a:85:35:5d:9a:cf:7c:6d:
41:3a:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:11 2025 by rpki-client