Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier: /S7DdHZ/1fxdmXYQU9bJ+fq6tHo/5yx+6Oq7U1ws/is=
Subject key identifier: 41:11:1D:C7:21:35:8E:04:C3:8E:5D:A7:E7:CA:BB:C5:13:C7:09:53
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 019A71B81B7399A19BCB9AD24869A4AE7D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number: 144E
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: CELUTpBmSuqhjwRRI1l2uOlW34U.roa (hash: uUfGyY6bU1KfNs8RkdPxHIiu6rkpi1xDzqQB1urLRGQ=)
2: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: eyfr9aBiaeC6BZLdnHlOdBn5esPM9ntvPw4WE+uD1nc=)
3: IeYSfMoEUOpL9zvYa7nI3z9IUtk.roa (hash: Jx4O2YZjJ11KtiwcsJQSqlxvszabRiJ7Q1v0Y4B3N6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1b:73:99:a1:9b:cb:9a:d2:48:69:a4:ae:7d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=41111dc721358e04c38e5da7e7cabbc513c70953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:ce:b8:32:32:8d:87:9f:1c:59:af:b8:4a:
46:c6:b4:d6:57:6b:4a:f7:77:03:3d:65:ee:fb:e4:
0a:5f:fa:7d:69:df:d5:49:7c:2f:ea:9d:69:de:db:
0a:eb:46:f0:a3:5a:44:34:dd:75:14:84:28:aa:4f:
c3:ed:ab:d2:03:e3:73:40:46:e5:7b:5c:28:15:b9:
43:97:12:ee:70:02:e2:f5:c3:37:90:84:9e:08:bf:
32:80:7e:94:7d:6b:c1:b1:14:8a:b6:32:98:b9:b5:
0d:99:e3:c5:8c:fd:cf:44:23:e4:c8:5f:f5:98:88:
7d:bc:b1:f5:57:01:0b:95:12:d9:1e:fe:c4:80:4e:
dc:68:99:64:58:ed:c9:56:ee:ff:f8:b2:21:cf:0b:
ba:df:44:e0:df:54:6f:4c:10:b3:44:cf:0a:03:23:
b1:fe:a7:38:c8:cd:39:c0:8c:fe:5b:c8:05:ff:e8:
40:cd:a4:3a:fb:fa:95:45:7b:8a:11:27:60:72:96:
ba:a2:17:dc:7e:72:2d:aa:63:d0:b2:4c:88:c8:a5:
b4:ed:81:54:0f:55:90:05:00:20:0a:b1:40:15:c8:
6b:f2:9b:68:5d:57:38:5d:cc:47:c0:15:7f:cd:8c:
5c:a2:d8:fd:46:14:c0:d5:e4:19:df:a4:27:c9:d4:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:11:1D:C7:21:35:8E:04:C3:8E:5D:A7:E7:CA:BB:C5:13:C7:09:53
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:05:d5:3e:b9:41:63:d1:07:97:19:23:b6:bd:e7:62:57:27:
10:ce:4c:b2:45:cf:3c:86:1c:b9:ad:b9:b6:66:10:79:b9:f2:
da:f6:ac:d3:fe:a9:2f:23:28:af:b9:f2:37:8e:d5:b8:1e:1a:
20:88:5b:b7:5b:99:41:f7:9c:08:3b:62:78:05:f5:69:8a:83:
5a:ea:bb:24:db:e9:1e:2d:bb:b4:71:71:4b:0c:3e:93:0c:37:
93:7f:1e:0c:85:b7:42:2a:03:2e:e1:a8:66:4e:63:33:bc:56:
4f:ee:1d:f7:05:54:16:a5:5d:fb:c7:83:0f:e3:cc:22:47:68:
d2:84:a7:24:6d:00:9e:47:88:71:14:5c:23:86:a6:aa:e9:88:
45:aa:b0:75:ce:00:d6:e0:aa:a2:43:d6:d2:b6:1c:26:8a:2b:
4c:67:61:93:f3:a3:3d:89:62:ce:25:2b:ae:5b:46:0f:ed:ee:
ba:53:da:7e:80:31:b2:14:c8:15:0a:05:aa:9d:40:4f:de:bc:
0f:c4:cd:fb:38:17:99:3b:7b:3c:7b:ba:e9:35:ff:de:cf:93:
b6:98:2f:43:88:9c:3c:f9:9c:e4:c5:4d:cd:4b:b5:3a:af:21:
0a:1a:13:89:2b:9d:88:ea:e0:00:3e:f2:f4:f9:aa:52:8d:31:
13:53:b2:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuBtzmaGby5rSSGmkrn2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYjQzZGFjZTg2NjM0NDdlZTQ3MjU1MjBkNzhjNTRhYjdi
OTlhZDQwHhcNMjUxMTExMDcwMTIyWhcNMjUxMTEyMDcwMTIyWjAzMTEwLwYDVQQD
Eyg0MTExMWRjNzIxMzU4ZTA0YzM4ZTVkYTdlN2NhYmJjNTEzYzcwOTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMfOuDIyjYefHFmvuEpGxrTWV2tK
93cDPWXu++QKX/p9ad/VSXwv6p1p3tsK60bwo1pENN11FIQoqk/D7avSA+NzQEbl
e1woFblDlxLucALi9cM3kISeCL8ygH6UfWvBsRSKtjKYubUNmePFjP3PRCPkyF/1
mIh9vLH1VwELlRLZHv7EgE7caJlkWO3JVu7/+LIhzwu630Tg31RvTBCzRM8KAyOx
/qc4yM05wIz+W8gF/+hAzaQ6+/qVRXuKESdgcpa6ohfcfnItqmPQskyIyKW07YFU
D1WQBQAgCrFAFchr8ptoXVc4XcxHwBV/zYxcotj9RhTA1eQZ36QnydSJwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEERHcchNY4Ew45dp+fKu8UTxwlTMB8GA1UdIwQY
MBaAFBO0PazoZjRH7kclUg14xUq3uZrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTdROXJPaG1ORWZ1UnlWU0RYakZTcmU1bXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82NTY5MGEtMGFjZi00ZjM2LWE4OWMt
MmI0YTI3MTQyMTRhLzEvRTdROXJPaG1ORWZ1UnlWU0RYakZTcmU1bXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82NTY5MGEtMGFjZi00ZjM2LWE4OWMtMmI0YTI3MTQyMTRh
LzEvRTdROXJPaG1ORWZ1UnlWU0RYakZTcmU1bXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQXVPrlB
Y9EHlxkjtr3nYlcnEM5MskXPPIYcua25tmYQebny2vas0/6pLyMor7nyN47VuB4a
IIhbt1uZQfecCDtieAX1aYqDWuq7JNvpHi27tHFxSww+kww3k38eDIW3QioDLuGo
Zk5jM7xWT+4d9wVUFqVd+8eDD+PMIkdo0oSnJG0AnkeIcRRcI4amqumIRaqwdc4A
1uCqokPW0rYcJoorTGdhk/OjPYliziUrrltGD+3uulPafoAxshTIFQoFqp1AT968
D8TN+zgXmTt7PHu66TX/3s+TtpgvQ4icPPmc5MVNzUu1Oq8hChoTiSudiOrgAD7y
9PmqUo0xE1Oy1w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:36 2025 by rpki-client