Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json)
Hash identifier: 685amURcXGfhcd6w3kkHTqXt2svUbaZdxvi1DhNMGUU=
Subject key identifier: B9:F0:E6:C4:C6:E4:B3:A8:C6:92:18:45:FE:DE:8B:52:1A:FD:FE:6D
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Certificate issuer: /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial: 019A725CC20539E365F4C88C42C42138107E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
Manifest number: 16B3
Signing time: Tue 11 Nov 2025 10:01:12 +0000
Manifest this update: Tue 11 Nov 2025 10:01:12 +0000
Manifest next update: Wed 12 Nov 2025 10:01:12 +0000
Files and hashes: 1: LnuT6eEdb88-TghvQ_FZnRefVyk.roa (hash: XQk1e8dAGrgYT1azOGp5hpmR57maWf6UhLO79IbQj1k=)
2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: LhcNjrm5peZxKTH+ntFIR6PyTyDnFjYquSUkzWHYNNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c2:05:39:e3:65:f4:c8:8c:42:c4:21:38:10:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Validity
Not Before: Nov 11 10:01:12 2025 GMT
Not After : Nov 12 10:01:12 2025 GMT
Subject: CN=b9f0e6c4c6e4b3a8c6921845fede8b521afdfe6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:f3:ad:d7:97:de:9f:c9:3c:cd:28:f5:5b:
de:5d:79:92:c5:de:a5:f2:1c:86:a8:eb:b3:d5:5b:
19:f9:fe:89:c2:ff:c8:5b:3f:86:d2:c4:f6:3c:05:
51:c1:e0:87:bf:d6:84:dd:15:44:39:b1:65:55:2a:
5c:3a:e6:17:19:8a:e9:63:cb:d2:7a:1a:20:f6:94:
09:fd:37:1d:7c:94:e3:33:93:c3:63:67:01:82:c5:
16:65:51:f6:ed:69:1b:9f:09:69:41:99:a2:2a:30:
8a:74:9f:db:b1:2d:da:f2:86:06:5f:ac:b4:9a:43:
96:26:ba:77:a7:ca:8e:63:3c:6a:0e:0a:35:47:32:
e4:da:eb:04:47:e6:d5:8c:ea:de:08:7d:e8:dc:d0:
71:dc:82:a2:7f:a7:1c:d8:f6:8a:8b:11:1f:3c:f6:
db:19:2b:22:5b:8c:4b:fe:4d:b1:f6:80:9e:74:58:
c8:9b:78:78:d1:46:08:c7:a3:b6:e8:2f:45:81:65:
1f:1e:43:a0:4a:94:e0:9f:4a:84:b4:9b:5f:55:83:
0a:c9:40:a9:97:1d:4e:c4:97:69:e5:cf:c9:dc:04:
57:9f:3d:9b:c8:e3:28:35:24:a3:4b:42:79:05:e2:
76:2d:75:fc:62:fd:b9:38:63:0e:bb:ff:8a:a8:39:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F0:E6:C4:C6:E4:B3:A8:C6:92:18:45:FE:DE:8B:52:1A:FD:FE:6D
X509v3 Authority Key Identifier:
keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ef:47:50:a9:bf:43:84:fe:9c:53:c6:28:49:e3:5f:57:59:
79:c3:a8:73:97:6d:ab:bc:39:e2:79:62:1e:76:2b:87:44:9f:
5f:29:d3:9a:93:c4:78:27:67:a8:a7:68:09:b9:4b:13:6f:11:
2e:e0:bd:41:99:d6:d1:3d:f0:32:c7:0f:fe:f1:84:81:88:5b:
6f:cf:3b:63:ba:6e:a1:29:9d:ba:51:a1:85:8a:a5:c5:41:a1:
1f:c2:47:7d:5d:b6:7e:90:26:61:d5:10:b4:9c:76:78:02:eb:
b3:58:50:32:07:a1:1c:59:4f:25:5f:ee:00:d8:b7:1d:40:21:
7e:97:7a:b2:8f:2f:29:ba:5e:b5:60:8c:3f:2b:7d:e4:04:83:
db:6c:2a:73:8b:55:6a:8f:c9:10:24:8a:f2:cf:b1:82:09:91:
85:70:91:32:37:f3:c4:80:fd:19:9e:42:5c:67:45:f7:89:1d:
41:3f:ba:6f:fa:03:9c:ac:3d:91:91:3d:88:b4:c0:f4:b2:78:
0a:63:40:e6:5e:bb:15:d7:62:83:97:55:86:83:c3:26:4f:88:
a3:75:aa:df:01:c5:4b:e8:d5:4c:5f:c7:65:7d:9d:59:ce:38:
95:5b:10:9d:b1:f2:8c:aa:77:9c:84:e3:91:09:50:50:e8:79:
05:8f:33:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:54 2025 by rpki-client