Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
File: e2YUJAvA92sC-eOj9AYKtJNv9GY.mft (raw, json)
Hash identifier: JfxIkL73oKEdoBtYb8SEH5CnJYEmLY4BGUu/C62qDgQ=
Subject key identifier: C0:56:03:02:DE:3B:EB:E5:03:DC:4D:38:A5:89:D4:71:DC:CC:EE:31
Authority key identifier: 7B:66:14:24:0B:C0:F7:6B:02:F9:E3:A3:F4:06:0A:B4:93:6F:F4:66
Certificate issuer: /CN=7b6614240bc0f76b02f9e3a3f4060ab4936ff466
Certificate serial: 019A7112BFF72941CECCD22B30006FBDB1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
Manifest number: 0321
Signing time: Tue 11 Nov 2025 04:00:45 +0000
Manifest this update: Tue 11 Nov 2025 04:00:45 +0000
Manifest next update: Wed 12 Nov 2025 04:00:45 +0000
Files and hashes: 1: e2YUJAvA92sC-eOj9AYKtJNv9GY.crl (hash: AfFFKu4vDrBvi3NbcwlNkvh1G4nb7LAQm5qsnKzRPqI=)
2: ywZPNdm-QKZpeMwj8NoEFpCbBVU.roa (hash: P+ldS5mV1bes3QVxJQ8BBR4t28oMMRfexpRbrRRe40E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bf:f7:29:41:ce:cc:d2:2b:30:00:6f:bd:b1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6614240bc0f76b02f9e3a3f4060ab4936ff466
Validity
Not Before: Nov 11 04:00:45 2025 GMT
Not After : Nov 12 04:00:45 2025 GMT
Subject: CN=c0560302de3bebe503dc4d38a589d471dcccee31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:38:ba:79:f4:c2:a8:e4:ac:c4:c5:13:ca:
c8:17:9e:7f:7a:eb:a4:fd:bd:37:3d:43:6e:d1:ec:
2f:53:b6:62:2c:b4:50:94:98:92:6a:da:01:cd:c1:
51:ee:52:d4:37:ef:e4:1c:c4:cf:87:93:94:26:90:
18:9d:71:2b:77:bd:ad:33:39:f2:68:c5:0a:4f:71:
74:b7:4d:19:98:11:c5:63:bb:2f:36:72:cf:af:23:
38:2e:2e:55:5a:27:c5:16:12:f2:8b:f7:2d:f5:60:
7a:2d:09:97:1a:dd:d4:42:f2:19:d4:4c:ca:af:1d:
c5:61:c1:03:19:47:06:57:e7:a4:ec:a9:f3:51:a3:
a6:75:ba:38:cf:0a:74:d3:0b:94:34:3c:f5:9c:a5:
d8:39:5e:e1:0d:26:f8:5e:7b:cb:7c:82:53:73:f1:
6c:e2:04:c3:16:ee:f1:03:ee:9b:e4:3c:94:0d:9b:
dd:8b:47:c9:d9:cb:e9:45:8e:8e:c3:c2:1c:a9:3a:
b1:ac:3c:fa:fe:3f:da:14:9d:5a:92:93:82:37:55:
72:51:a3:0c:f7:87:0a:a2:30:57:b5:78:f0:de:a8:
e3:91:96:df:ae:c7:7f:f2:08:5a:cc:c6:12:0f:b4:
d4:06:8f:5d:f3:57:31:15:69:be:7f:24:53:c9:d3:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:56:03:02:DE:3B:EB:E5:03:DC:4D:38:A5:89:D4:71:DC:CC:EE:31
X509v3 Authority Key Identifier:
keyid:7B:66:14:24:0B:C0:F7:6B:02:F9:E3:A3:F4:06:0A:B4:93:6F:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2YUJAvA92sC-eOj9AYKtJNv9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/79b3db-22cd-45f0-ad0f-80c7af87cc85/1/e2YUJAvA92sC-eOj9AYKtJNv9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1e:48:10:ed:8c:96:fd:4c:7d:1c:4c:ca:a6:0a:31:c1:58:
5c:f2:59:96:4d:ae:07:91:bc:00:f6:ff:ca:ef:51:48:01:5e:
73:7d:c2:a1:41:be:be:df:59:b1:3e:a2:35:db:16:ec:18:f8:
ce:c7:7d:a6:47:f6:e9:4c:ff:e2:49:d0:50:7f:a1:00:46:77:
56:6a:53:33:b7:2b:37:e3:6e:0a:3a:f4:d3:32:6f:32:53:91:
3e:60:4c:0c:a1:ff:d9:ae:0b:bf:31:a9:0c:8c:6e:0e:17:50:
07:7a:a3:59:41:fc:07:16:81:d9:3a:38:a9:28:76:1e:99:88:
07:1b:40:18:75:d1:98:3a:9e:7a:8f:c9:87:1e:7e:18:69:60:
ae:c5:2c:70:da:40:8f:c8:a5:dc:c7:cb:47:ca:0f:3c:7c:49:
9c:ad:1d:a5:fd:db:f7:72:62:e8:de:aa:d3:db:c3:ae:18:92:
32:04:f0:c4:2f:68:d3:22:6a:d5:35:96:3b:ed:40:ff:40:67:
6d:ab:a1:ef:bb:7f:50:39:cf:41:70:fa:db:ab:8e:41:d9:73:
72:3a:37:6c:a0:28:10:ae:9a:65:33:69:c0:0a:f0:19:a4:93:
4c:de:b8:b4:9e:61:d5:e2:17:ed:fd:68:74:7d:90:fd:c1:b5:
b8:73:aa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:41 2025 by rpki-client