Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: NZtoOnmFaJpWB7hVrG0M5Hr/L933sRBAgwClxPiavTg=
Subject key identifier: 2E:95:09:A2:14:D4:77:C9:E4:27:E2:A8:87:59:8A:BC:89:7A:BA:19
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 019A22F7325440E06FB2DBD7B58C1A8518A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 0DD7
Signing time: Mon 27 Oct 2025 00:00:16 +0000
Manifest this update: Mon 27 Oct 2025 00:00:16 +0000
Manifest next update: Tue 28 Oct 2025 00:00:16 +0000
Files and hashes: 1: NdVYKLIGP2QzOZX__MqzIgHzXXA.roa (hash: JpTAajbqtuyws0Zyn29UdijI9/GnNDr8LpptWtQUD6A=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: 4RcLDGG4bRoR1ZZsdvkchFh7HTLfd1ABgdeyNz2CNok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:32:54:40:e0:6f:b2:db:d7:b5:8c:1a:85:18:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Oct 27 00:00:16 2025 GMT
Not After : Oct 28 00:00:16 2025 GMT
Subject: CN=2e9509a214d477c9e427e2a887598abc897aba19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:9e:59:2d:a3:87:1a:33:af:3d:9c:09:74:
eb:2b:6e:84:27:64:82:73:47:38:a2:19:d8:03:46:
69:6d:9f:15:a3:5b:d1:f5:8e:14:87:4d:33:bb:93:
5c:e9:c8:47:a6:fe:30:6c:8f:29:0e:26:ad:1f:44:
df:b1:70:54:f6:f6:95:e1:bb:92:d5:56:c6:ce:98:
ea:8e:11:1e:26:8b:a4:c9:c6:af:9c:3a:01:24:3c:
93:75:4c:4a:7d:e2:16:11:d1:c4:21:b6:f7:43:35:
8a:56:47:14:b6:f6:00:56:fa:c8:0e:7b:3a:c4:e4:
f7:44:86:88:f5:f5:05:e6:a5:66:8f:19:cf:4c:d0:
ab:0a:a4:28:c0:3f:89:5b:0f:2c:ec:be:60:a0:13:
31:e5:74:cf:b9:67:c7:fc:13:83:93:ed:d7:98:69:
f8:94:5d:67:fc:d6:a2:c8:58:f3:36:79:1b:78:a9:
10:b4:a5:a1:88:27:7d:f4:5b:6c:eb:1c:a3:23:af:
b9:73:6a:35:0c:c2:6c:47:4e:88:24:18:9c:b5:1b:
27:9b:94:ae:1a:0b:7a:cf:51:ea:2f:56:94:16:3a:
c2:06:e0:b0:80:42:48:0d:43:71:eb:87:dd:09:cf:
77:c7:d1:45:89:3f:2d:5f:e4:16:03:da:14:1c:61:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:95:09:A2:14:D4:77:C9:E4:27:E2:A8:87:59:8A:BC:89:7A:BA:19
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:d2:07:5f:28:a2:f7:c1:07:fb:ac:4f:28:5e:11:ce:23:05:
fb:92:5b:aa:62:42:d4:8c:09:f0:47:7a:33:97:7e:c3:c5:8f:
1e:02:03:58:94:13:90:7a:6d:b0:a3:27:df:0c:cc:12:63:5a:
c7:f8:ee:ed:7c:10:e8:77:5b:c7:47:49:a9:b1:36:aa:fe:19:
9f:70:4c:d7:8b:b2:48:63:e0:74:6b:6c:8f:cf:e1:06:36:ec:
b6:12:e3:72:3a:67:14:19:15:78:96:91:37:cc:80:29:10:27:
29:59:a3:28:34:03:c1:e9:ba:ed:6c:20:15:98:4b:b9:a7:b1:
9b:d9:41:39:5e:9b:1f:fe:1b:44:ad:3b:cc:8c:c8:47:63:7d:
a8:5c:98:d0:9c:e9:70:63:9d:43:07:fe:89:50:03:a3:31:9a:
0c:5a:45:42:4c:ec:f2:d4:94:48:35:79:ef:e8:3e:fb:87:54:
92:f2:d1:ac:81:d9:aa:44:01:0d:fe:5c:37:87:19:e2:24:df:
0a:7e:b2:66:22:3c:f5:66:ae:f2:45:79:c4:0d:e2:51:b1:39:
ce:01:19:89:13:be:17:34:cb:8d:e4:0a:a8:73:41:ed:62:07:
6a:dc:ea:af:83:c3:22:63:cd:aa:fb:ec:ac:f1:d0:22:aa:6a:
aa:9a:a3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:42:10 2025 by rpki-client