Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: lgvJb35ftylOWemf8rRmMKznendOFEVQ0jhMq72Pt58=
Subject key identifier: D7:7D:42:D4:80:7E:FA:B0:C5:20:7B:42:C3:3F:A3:45:F7:A5:F9:AC
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 019A269D0B6BC056BF02E01211182CD05201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 131E
Signing time: Mon 27 Oct 2025 17:00:17 +0000
Manifest this update: Mon 27 Oct 2025 17:00:17 +0000
Manifest next update: Tue 28 Oct 2025 17:00:17 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: pKYI0dxw02ct9X14L2n0S1aNg1TIqoOOGTO7gnwqj0o=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:0b:6b:c0:56:bf:02:e0:12:11:18:2c:d0:52:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Oct 27 17:00:17 2025 GMT
Not After : Oct 28 17:00:17 2025 GMT
Subject: CN=d77d42d4807efab0c5207b42c33fa345f7a5f9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:fd:46:83:2b:4e:ac:67:2e:dc:d6:ae:5a:
ec:5a:1d:e0:3b:6f:87:8f:02:75:3e:47:c3:0d:eb:
8b:cc:41:6c:78:80:f2:e1:9d:02:75:c6:f0:78:9e:
7c:f4:f2:d7:6d:e7:c0:ee:17:26:28:f3:1c:58:db:
9d:b0:06:9d:49:5c:a5:a4:56:d4:3a:80:bf:77:63:
ff:31:d3:06:f3:02:2f:05:8a:73:bb:3c:9f:19:46:
44:7c:4b:f7:06:63:44:b2:f4:19:0b:0b:4e:45:7b:
1a:3f:1a:1b:01:1e:45:6b:58:03:9d:d0:f6:64:96:
99:83:2d:13:c1:e0:62:20:d7:dd:93:c7:0a:dc:b1:
58:cf:d4:3f:35:86:71:3d:b9:e7:3c:78:69:de:ca:
62:5b:70:fb:9e:74:55:9e:8b:54:27:15:ca:29:15:
e7:c9:ed:7f:25:8b:20:75:16:dc:ae:87:b4:02:9a:
dd:b9:f1:66:a8:c8:f2:c6:bd:90:44:a6:19:47:7f:
87:da:50:ba:8d:c1:9b:8a:fb:47:a9:e0:cc:5b:89:
68:55:58:e7:ff:b6:d0:73:ff:94:b7:18:f7:f3:d2:
ba:d2:d8:71:01:13:d3:ce:ce:08:18:7e:48:38:a7:
ee:35:6c:4d:cb:df:96:97:84:7b:9c:d6:94:b9:1c:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7D:42:D4:80:7E:FA:B0:C5:20:7B:42:C3:3F:A3:45:F7:A5:F9:AC
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a1:de:d6:61:46:f2:46:38:80:84:18:14:c6:8c:8e:6d:b7:
11:3e:5e:9f:0e:41:2e:59:0f:9e:bd:22:b4:67:32:62:4c:3b:
c1:43:1c:3e:2f:f7:cf:89:0d:4c:05:0e:5a:d7:94:6d:b8:da:
26:62:20:10:82:5a:31:1b:00:12:c3:4b:25:64:91:84:80:a3:
e4:c3:ae:fd:20:8a:4d:d6:a1:f4:46:b2:c5:c4:ef:9f:1d:bb:
2b:ae:34:ca:04:74:bd:45:e9:a5:38:84:8d:24:64:b5:08:eb:
cd:2f:0b:68:3f:6e:96:cc:01:14:77:31:25:51:20:3a:30:a1:
cd:bb:06:f3:29:81:f0:72:c2:97:07:52:a5:dc:b9:93:ed:f8:
56:69:b4:12:42:46:25:d1:81:cd:a3:83:7b:a2:de:a1:41:95:
f3:3c:8d:2d:09:11:60:2a:0c:35:b1:e3:ef:16:5e:84:84:e0:
c3:42:67:ea:e4:e4:de:99:8a:82:58:bd:67:2e:75:4e:16:01:
54:36:6e:ef:9b:c5:06:2d:64:da:cf:32:b8:6a:1a:91:d8:7e:
28:b2:76:36:f4:fd:54:d9:7a:3d:77:33:86:e4:33:cf:9d:1b:
50:b0:a7:69:b9:a4:e1:e8:7b:6c:a1:21:d4:2e:09:81:df:fd:
2c:6b:59:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:59:53 2025 by rpki-client