Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
File: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft (raw, json)
Hash identifier: G07TwZhE6+iSTj6V6AtrfYuTRlV7p9KWaEx8DvMqpug=
Subject key identifier: AF:D4:B9:CF:E5:DB:6F:7E:8D:AF:13:BC:90:60:42:5E:3E:91:34:3C
Authority key identifier: 10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
Certificate issuer: /CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Certificate serial: 019A7149C550CDD3C3979BEC6AFC31CB91E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
Manifest number: 153B
Signing time: Tue 11 Nov 2025 05:00:51 +0000
Manifest this update: Tue 11 Nov 2025 05:00:51 +0000
Manifest next update: Wed 12 Nov 2025 05:00:51 +0000
Files and hashes: 1: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl (hash: tyn1YRGeWQNl2rpkzahAET8+dWkc01cPqntdMEIgt3U=)
2: Mlu5_dJNN_0613h2Y5SWGYo2plc.roa (hash: CAvVd5I+5Zi7+C5cOmRMcgsTbGExGWGR0EvjDIL6HmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c5:50:cd:d3:c3:97:9b:ec:6a:fc:31:cb:91:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Validity
Not Before: Nov 11 05:00:51 2025 GMT
Not After : Nov 12 05:00:51 2025 GMT
Subject: CN=afd4b9cfe5db6f7e8daf13bc9060425e3e91343c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:99:5b:7e:e6:aa:98:0e:21:2a:65:36:9b:
fa:07:da:dd:e7:c4:8a:56:d3:6b:ac:29:ca:41:d0:
e0:57:39:7f:d3:8a:69:7b:3e:87:12:ec:d1:8d:1d:
44:97:a4:fe:b3:35:f9:72:84:73:33:8c:b4:e0:c3:
0e:96:6d:37:4d:0c:b5:fc:b6:49:7e:e3:b9:1d:9c:
37:12:67:2f:d7:32:16:9c:48:fb:2c:57:51:6c:9c:
52:99:bd:7a:d6:1b:55:bc:24:a8:8e:91:4c:ba:01:
60:64:e6:17:5d:04:e4:2b:6d:4d:7b:c7:07:98:11:
71:df:94:9c:2b:74:32:e4:87:d7:15:d0:6c:2d:f2:
f3:03:7f:24:32:1a:cf:70:0f:61:ce:a5:e7:f1:60:
a0:83:8f:6b:f2:5e:23:51:05:ea:ec:c2:5c:fb:7f:
b5:b0:fc:e1:8f:29:71:37:16:18:2b:96:97:96:cd:
7d:30:09:59:b7:32:92:1a:8f:5d:d3:23:9e:0f:2b:
55:38:3d:7e:8a:8c:f2:bf:db:08:13:a1:34:86:49:
a8:98:81:df:8e:0b:92:96:d7:71:e0:7e:78:a2:24:
5f:cf:dd:5d:db:ef:43:42:84:26:67:c9:c3:bf:c2:
c0:5d:7a:b2:a5:84:f6:97:d2:a7:e9:1d:18:28:06:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D4:B9:CF:E5:DB:6F:7E:8D:AF:13:BC:90:60:42:5E:3E:91:34:3C
X509v3 Authority Key Identifier:
keyid:10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0d:b1:05:e7:e8:8e:a5:02:5e:c5:38:e6:5b:cf:12:93:df:
9c:bb:44:ad:1a:32:28:90:1b:e6:68:98:5b:67:b8:21:39:38:
0b:0a:9f:ab:8c:69:be:82:3b:a6:35:c1:a9:98:72:c1:1f:68:
d7:46:ed:c0:5d:fc:2e:64:3d:8b:04:f3:9c:d1:4d:cb:c9:73:
c1:af:06:6d:a7:7c:8f:70:8c:54:eb:d1:2a:9b:80:93:ef:54:
77:16:cf:63:df:28:a8:af:6c:3e:cf:1c:5c:ec:0c:36:b1:23:
a5:77:c1:4d:82:1a:31:56:f3:cd:d8:7c:37:e8:89:61:c5:b8:
0c:6e:ec:6c:e1:7b:a7:44:d5:85:82:e9:b5:23:c5:2d:72:81:
29:2d:c7:93:3b:dc:98:72:b0:4d:46:e0:da:14:53:6e:e5:9b:
f4:cc:ff:13:2d:50:db:1b:97:81:4f:c2:da:bf:9b:51:79:24:
e9:b8:74:a5:7b:a8:d9:03:33:34:03:88:f2:f5:2f:f3:f7:39:
7d:94:8e:b0:1d:81:92:19:32:75:3a:18:05:7a:5e:92:cb:5c:
75:0f:fb:b4:13:0c:0f:df:ca:97:45:8e:d4:ce:33:5d:45:4c:
bf:e1:1a:25:2b:06:51:f8:a0:aa:9c:7e:0e:3c:5e:da:75:3b:
bc:b9:41:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:15 2025 by rpki-client