Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
File: ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json)
Hash identifier: 0VYKuN93p8kQg4HB0iED+b6cW9U0hrm3ABjqsDYia8w=
Subject key identifier: CE:6F:DC:1C:BF:F5:50:F9:12:3D:E2:D1:C4:D6:97:92:39:93:A8:36
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Certificate issuer: /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial: 019A7225F033F660BB7DEA65420A2B986A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: AexWQU1BK+OFA20txECkxsaNlcUTRkr++VmddglIEdY=)
2: LbvGosx0sr1hJwd78ZXVswGnqXM.roa (hash: zrhSsms7Xu5tLT+xCwRwdoOuFODUIch3dzNZbH3HeT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f0:33:f6:60:bb:7d:ea:65:42:0a:2b:98:6a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=ce6fdc1cbff550f9123de2d1c4d697923993a836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:bf:a9:aa:27:ac:a5:a3:10:86:da:5d:41:
0f:cf:02:b3:8a:58:bb:21:54:0b:64:22:d9:0d:db:
76:79:67:32:03:88:fa:c5:80:09:54:47:ba:47:ec:
37:d3:f3:85:7d:72:85:c0:80:7f:b4:e2:90:e5:73:
95:28:17:b4:81:6a:c8:2b:f0:0e:22:72:ea:2f:a0:
02:73:f3:21:45:59:5e:b1:e0:93:db:07:87:36:05:
de:b4:0c:35:5d:80:c8:fa:eb:f0:98:49:c3:bf:b4:
03:b1:05:00:0f:25:27:cb:1a:d4:0d:5a:d5:72:2e:
9e:07:20:6e:94:53:5d:1f:0b:bc:b0:90:18:83:56:
25:c2:9c:40:da:2b:d6:5e:b0:c1:f1:8a:dd:33:7e:
cc:8c:eb:ab:60:28:7d:4a:a1:50:1c:4a:01:e5:03:
dc:c2:75:8f:a9:0c:20:7d:ee:c2:31:ce:86:5c:0d:
fe:6f:42:5d:c1:e1:9f:62:24:ea:c0:6f:c7:5e:9c:
88:2f:95:d3:ba:c5:2a:02:3a:fb:0b:89:26:93:84:
bb:de:c4:ba:30:03:6b:11:42:ab:0d:03:68:1b:bc:
f5:1d:5b:17:0c:d2:b0:bf:de:f2:19:a4:04:21:17:
a7:e1:0c:84:b7:e7:93:d7:7b:bb:b6:e6:63:ce:f1:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6F:DC:1C:BF:F5:50:F9:12:3D:E2:D1:C4:D6:97:92:39:93:A8:36
X509v3 Authority Key Identifier:
keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b3:c4:75:ef:b4:ed:b1:f3:1d:cb:44:f4:ff:e8:03:8a:78:
8e:0d:76:f0:bf:ca:8f:60:73:3a:b8:73:00:56:1a:31:f3:5a:
e0:62:5d:5a:ca:c9:be:2a:fb:ac:e9:34:98:ee:36:e3:ea:7d:
03:91:a7:bb:56:33:e9:8a:f9:e7:a5:c7:7b:79:e6:e1:c1:5a:
39:1f:6b:8f:c6:c6:6f:c4:4a:2b:b3:76:a9:da:a4:9a:77:2c:
b9:7f:25:91:c2:93:27:ed:fa:78:ba:3a:d0:5d:a0:fd:a0:0d:
2a:00:fc:59:00:64:7b:ee:b2:dd:69:79:a2:42:9c:38:18:3d:
66:64:8c:be:d9:eb:06:09:b3:e9:b9:04:4f:58:3d:5d:ec:56:
73:5a:3c:c3:41:52:29:7c:e4:8d:38:b8:e5:f5:cb:5d:20:76:
58:a1:b9:33:47:93:37:ce:2f:9d:39:f8:57:9f:ca:32:61:23:
8b:ba:bf:06:89:3a:76:40:dc:cf:64:b8:26:f2:3d:e1:f7:9d:
f2:5b:c9:6e:6a:88:c6:a5:82:3a:c2:3e:37:7e:dc:6c:b2:78:
5a:fa:ab:ad:47:83:2f:b1:89:0d:c7:f3:7c:d7:a3:77:5c:40:
2c:ac:f6:2a:29:62:44:22:10:7f:8d:da:fc:25:a9:dd:50:fc:
3c:3b:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:17 2025 by rpki-client