Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
File: ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft (raw, json)
Hash identifier: u6B3da57SExaT5tPbMqdF7sOsPycEO0w6S+uSczOAGk=
Subject key identifier: 28:7F:A4:AD:3F:B7:6D:52:70:43:32:53:24:AF:F2:91:AD:58:8B:68
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Certificate issuer: /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial: 019A2176821DE9AA469BD9D86A3557E21DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
Manifest number: 07CE
Signing time: Sun 26 Oct 2025 17:00:05 +0000
Manifest this update: Sun 26 Oct 2025 17:00:05 +0000
Manifest next update: Mon 27 Oct 2025 17:00:05 +0000
Files and hashes: 1: ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl (hash: dv4NasARLnfaSKlHbv4ni0o9z04dcgutWm8MSEyWLvM=)
2: cOlZtxVwhbHabVyYeMsf0xgakZ0.roa (hash: uIR5H6BRh5Mk2t2T3SL+SrC3qaOMSafUrXEBQ3YOqwU=)
3: ypecd2LqkaW6e4qzf_tWhzdTc5E.roa (hash: nXcncmToHt1q5p3HUhxZY7Q0AWrPzAjjTbEkQu0P6Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:76:82:1d:e9:aa:46:9b:d9:d8:6a:35:57:e2:1d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Validity
Not Before: Oct 26 17:00:05 2025 GMT
Not After : Oct 27 17:00:05 2025 GMT
Subject: CN=287fa4ad3fb76d527043325324aff291ad588b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:83:39:df:bc:1b:0b:f3:84:2f:85:0d:2f:
c6:f0:1e:13:1f:88:07:8c:b1:2a:a7:31:9c:b5:33:
04:0f:e1:b7:b4:2b:f6:16:a0:85:c6:94:b2:41:50:
23:3e:98:ae:10:1b:eb:d1:aa:c7:f7:b9:bf:83:c4:
0e:3c:42:eb:24:bf:66:35:59:bc:3c:30:8f:d6:4e:
78:e0:40:0c:bf:27:bc:83:5e:2b:1c:eb:5e:6d:ca:
43:63:26:ad:e0:98:d7:b0:a8:21:ce:45:6a:04:1f:
03:06:58:9e:a9:ba:35:ae:7c:91:ab:4d:a1:61:8b:
10:2a:42:91:48:d5:cc:a1:a4:57:47:9b:66:d7:23:
2f:61:51:e8:77:36:23:25:48:50:d1:fc:43:71:fa:
65:b0:b2:64:87:e6:02:35:fe:3d:c8:ce:74:3f:e6:
bb:df:65:de:61:e8:12:4f:2b:5d:67:d6:45:1e:a1:
d3:31:38:c5:7f:98:1d:eb:bc:58:30:3b:87:20:f1:
92:23:1a:9d:41:aa:a3:34:b4:b8:2b:8b:3d:4b:fe:
fa:c1:28:79:04:43:6a:82:0b:e7:35:a9:7e:db:b8:
49:bf:31:d7:8e:ed:aa:34:83:a2:d0:e5:bd:e1:66:
95:30:68:63:cb:4b:54:35:0d:41:60:c1:ef:3f:20:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7F:A4:AD:3F:B7:6D:52:70:43:32:53:24:AF:F2:91:AD:58:8B:68
X509v3 Authority Key Identifier:
keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:59:2b:84:96:ad:74:8e:87:8f:92:bb:56:fe:b0:99:d8:eb:
0f:aa:87:3f:92:65:b5:c9:97:6f:61:6f:f1:a8:cd:bd:8c:47:
9a:f9:b9:97:f2:d7:4c:dd:ef:ab:be:96:73:b8:75:28:d1:84:
07:68:0d:07:0a:62:bd:28:a4:8d:d2:3a:3b:82:69:ea:ef:0c:
50:ec:8f:7d:97:2e:cb:94:4a:80:5b:61:39:0b:ad:69:10:64:
81:43:82:ce:e1:39:d9:2d:f6:d7:e1:3b:ff:a6:61:ff:8c:88:
9c:cb:9b:43:72:e4:a7:89:50:cc:7f:55:f8:b9:8c:c0:53:7c:
f8:c1:c8:91:7f:9a:2f:6a:88:6d:90:60:73:4a:3e:a3:e0:74:
e6:b9:05:b2:b2:28:86:4e:c2:49:79:7f:b9:15:3b:48:23:4e:
46:ce:cf:79:a1:6f:39:dd:92:27:23:6b:2b:e0:4b:93:e4:5c:
2f:3e:eb:80:db:52:95:59:25:34:83:94:69:b0:5f:f1:4d:38:
9a:68:2a:dc:c1:e9:64:71:ea:89:c5:d7:5a:77:30:c3:d4:be:
9f:b1:b0:c2:04:3a:de:6c:65:2b:e1:4c:29:1b:11:d1:5f:84:
fd:9e:ae:4e:58:df:ad:11:91:dd:81:7c:48:3a:3a:9a:c5:26:
f5:0d:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:53:40 2025 by rpki-client