Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
File: 2enzHGJtN3F1eG4UnTJmx1PQBk4.mft (raw, json)
Hash identifier: BMwU6LsiJQ6qQbR/+2NCr19lqK76QwwbJLiR8SrWUFY=
Subject key identifier: 55:4C:D8:29:6A:95:F8:CA:87:92:B5:50:8E:80:26:7D:1A:E4:94:FB
Authority key identifier: D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
Certificate issuer: /CN=d9e9f31c626d377175786e149d3266c753d0064e
Certificate serial: 019922C35F12B9BA73D82D60AFB430A41A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
Manifest number: E5
Signing time: Sun 07 Sep 2025 06:00:52 +0000
Manifest this update: Sun 07 Sep 2025 06:00:52 +0000
Manifest next update: Mon 08 Sep 2025 06:00:52 +0000
Files and hashes: 1: 2enzHGJtN3F1eG4UnTJmx1PQBk4.crl (hash: ljwhwzPZcdCxfO61K8BPM1AE/bRPlw183itNMm7NNF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:5f:12:b9:ba:73:d8:2d:60:af:b4:30:a4:1a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e9f31c626d377175786e149d3266c753d0064e
Validity
Not Before: Sep 7 06:00:52 2025 GMT
Not After : Sep 8 06:00:52 2025 GMT
Subject: CN=554cd8296a95f8ca8792b5508e80267d1ae494fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:5f:dd:47:d7:1e:7d:2b:bd:c3:85:7e:6b:
d7:ad:54:b1:e8:8a:ae:19:d1:08:a7:7b:e9:2a:e0:
02:bc:94:78:f5:87:ca:6f:2e:1a:cb:82:e1:24:f7:
96:d9:e3:fb:36:bb:54:bf:cc:ee:c7:63:01:9c:dc:
c1:1b:c3:e9:34:bf:9f:e3:77:93:25:bf:ba:26:77:
49:4d:1d:ed:dd:bb:ee:cf:48:4b:26:81:42:09:8c:
91:5c:ef:80:f9:85:7a:be:c9:c1:14:e4:8e:af:35:
b0:3f:e2:49:57:27:e6:98:7e:08:b7:92:8a:ed:1e:
b3:40:0d:d1:bb:7a:55:e9:7a:d8:41:ea:f6:63:0f:
02:4a:31:68:3f:4f:84:c6:2b:79:08:48:fb:c3:45:
b5:c8:d0:e9:59:2a:ee:25:84:7e:40:22:b9:d4:8d:
09:06:b7:ef:c8:2c:3a:24:7f:49:1c:cc:f6:a2:d5:
6b:83:80:3b:e3:33:0f:1e:d1:cc:cc:58:35:46:4f:
42:1d:8d:55:2a:a4:72:86:97:06:34:3a:52:ed:32:
d0:d5:f4:57:45:8a:a9:5e:4f:ea:24:35:65:13:0e:
d5:00:a8:be:2f:cb:0c:7b:f4:95:b8:5a:64:47:ca:
02:72:92:ee:a6:06:d1:fa:b5:d0:46:40:78:5e:b3:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4C:D8:29:6A:95:F8:CA:87:92:B5:50:8E:80:26:7D:1A:E4:94:FB
X509v3 Authority Key Identifier:
keyid:D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:05:62:bc:66:2e:53:ab:9d:f5:f0:7e:cc:f8:08:7d:d3:f3:
09:cd:f9:c9:7f:24:71:da:33:58:1d:4b:cc:d1:ae:f9:84:6b:
97:52:d5:a6:dc:75:de:61:47:8b:31:4e:5e:b1:23:5d:b3:0e:
db:69:a3:d1:1c:0d:66:b8:f6:f2:b5:86:45:0f:b5:a2:3f:1d:
21:7e:64:35:2e:8b:0f:d8:62:9a:1e:50:3a:54:fa:44:d7:22:
c2:99:e0:76:2a:66:2c:42:7e:e8:07:87:de:11:69:29:01:5a:
08:3d:ee:14:04:d4:1b:db:b5:8c:05:10:49:10:1d:da:17:61:
a2:04:25:b0:a4:5d:cd:17:32:d4:d2:76:7d:95:1c:6c:8d:06:
67:44:bb:c1:8a:a1:ab:98:61:8b:37:47:81:95:80:be:86:0e:
b0:58:3b:65:d3:b3:c9:80:65:a6:0a:82:39:b4:aa:64:d4:63:
e7:d4:09:4c:9d:db:c4:44:c6:c4:37:85:d2:43:6a:93:4d:45:
6a:1c:48:0c:73:52:24:31:de:48:36:9d:52:e1:36:93:93:41:
50:12:37:5e:27:9d:9f:92:99:ac:91:be:f8:c5:93:0f:b9:73:
8d:68:47:62:4b:da:a8:8f:e7:45:93:63:d3:6a:9e:77:8f:58:
e1:56:c1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:31 2025 by rpki-client