
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: ZX4DUaDNJZwfcXyzsKAMV+FJjrkHPQkByr7m+fYxkzQ=
Subject key identifier: 5E:84:5A:E5:C1:F3:AD:12:97:3F:DF:1E:88:DC:FB:41:ED:3E:5E:43
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 019A90D499F404DB3068007B31614B82AAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 086C
Signing time: Mon 17 Nov 2025 08:00:43 +0000
Manifest this update: Mon 17 Nov 2025 08:00:43 +0000
Manifest next update: Tue 18 Nov 2025 08:00:43 +0000
Files and hashes: 1: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: 3x+jLIg02pv8puA6o2FEHF4bGkN2YzssMPJSMT4ST1o=)
2: n2ywdwAxh_5A6fhmbinLsjV_74w.roa (hash: KHmvQ0UKMcNm8rNxLKWRsULyUAvt5HBPZFXUNE/Pe7Y=)
3: vtVkCOLjDQSopCb33az0PmasrbI.roa (hash: B009Zu/GX84ZHQpoNwwgFUagmlB5jbZv6Rp29RHPykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:90:d4:99:f4:04:db:30:68:00:7b:31:61:4b:82:aa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Nov 17 08:00:43 2025 GMT
Not After : Nov 18 08:00:43 2025 GMT
Subject: CN=5e845ae5c1f3ad12973fdf1e88dcfb41ed3e5e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:55:54:4a:8e:bc:07:22:10:32:dc:31:cb:
bb:96:48:93:3a:6a:5e:94:e9:60:c5:aa:98:41:49:
77:9d:b7:79:30:6f:1a:76:20:58:5a:dd:e0:80:bf:
a6:c4:c6:41:89:d1:9a:b5:ee:8c:94:07:af:e2:0f:
f6:c5:63:08:1c:2d:b1:75:86:32:45:cd:6c:99:71:
b5:fd:69:b3:2a:85:56:0a:a3:db:24:0c:0e:3a:90:
4a:2e:b2:27:79:94:c6:a0:90:c9:5a:88:3b:6e:2d:
af:77:ec:11:7b:f3:6b:e5:9a:63:2f:a8:d7:96:90:
c0:f1:1d:11:a5:cc:71:87:d6:6c:d2:3b:0a:01:20:
f8:d6:eb:0b:41:ef:83:6a:11:d8:38:f5:02:00:24:
b8:44:9f:0e:b7:e5:20:e9:89:36:e9:0e:d1:bd:86:
8f:35:f5:5d:73:6e:b3:91:7e:bc:00:27:8d:a4:de:
80:cf:83:c8:b7:ef:69:a3:be:8f:8d:aa:5d:b3:27:
90:82:c0:57:d9:e8:03:ae:6c:5d:3d:db:ed:3a:95:
32:3a:77:21:69:85:86:27:26:08:c2:b7:b9:db:14:
12:08:e6:23:1b:21:d1:24:df:60:f5:dc:fa:2d:93:
1d:0a:79:df:e3:7c:55:53:12:e4:97:9a:f9:19:a4:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:84:5A:E5:C1:F3:AD:12:97:3F:DF:1E:88:DC:FB:41:ED:3E:5E:43
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f5:65:02:8a:4a:a7:f5:d4:6e:d0:39:32:51:b1:62:96:4b:
26:5e:fe:8e:0b:33:ac:8c:c4:a2:13:e3:e3:ad:f2:40:76:20:
3a:03:a7:c0:04:b0:8e:cf:12:2f:34:80:99:d1:ee:93:94:cf:
f4:67:e5:15:52:65:96:21:70:a0:fd:c7:47:62:d2:f7:60:1d:
31:d1:86:94:3e:65:64:8a:6d:e0:37:2c:b7:b6:f4:22:5f:d8:
8a:09:33:5f:f6:32:a2:8b:0f:cd:cc:23:63:cf:da:f9:df:3b:
5d:23:b3:b0:94:25:43:3d:d7:6a:ce:d9:86:31:80:c8:8c:5f:
31:f5:24:c6:f4:5f:aa:b9:a7:d4:1e:09:a2:59:16:79:16:0a:
0e:f3:8f:7d:04:a4:5e:6c:20:a7:48:61:7d:6e:16:88:b6:97:
c5:38:13:ca:7e:0f:35:0c:44:21:5b:9a:1d:44:9a:75:50:78:
5b:6c:6d:4c:86:c5:c1:47:89:48:1b:4a:b6:72:76:8e:a2:a5:
14:b5:89:32:2b:7f:e6:fe:5c:28:02:39:09:d0:b8:81:32:f5:
02:64:aa:f2:24:1b:41:52:d4:81:05:1e:38:a5:80:89:94:60:
98:65:3e:aa:a3:b9:ea:d5:83:b6:2c:0f:39:d4:be:4c:6a:07:
d8:0b:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 15:02:44 2025 by rpki-client