Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
File: ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft (raw, json)
Hash identifier: 1+v9UXXzIpoKjiSbYmoZjjbK4c7Dd98Vm0ZQ/x9NkG4=
Subject key identifier: BF:6E:3A:A3:F6:F4:4A:4F:6C:27:9E:77:6C:63:8C:6F:F2:CB:BE:92
Authority key identifier: 7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06
Certificate issuer: /CN=7a3f897117599fe839a9940e81a1788244caad06
Certificate serial: 019A7149FCBB1551E084E9AF44C221833B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 05:01:05 +0000
Manifest this update: Tue 11 Nov 2025 05:01:05 +0000
Manifest next update: Wed 12 Nov 2025 05:01:05 +0000
Files and hashes: 1: ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl (hash: 55GKwcdHMzanfkSl972EZD16WoO9KBP7DXsURfdgiT8=)
2: ml7ptFelR5O2ljd6S7JCFvTls6E.roa (hash: cO+LDJdHBbZdrBcqhhT12vaNmyrU4QVcTJjXWjJFtzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:fc:bb:15:51:e0:84:e9:af:44:c2:21:83:3b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3f897117599fe839a9940e81a1788244caad06
Validity
Not Before: Nov 11 05:01:05 2025 GMT
Not After : Nov 12 05:01:05 2025 GMT
Subject: CN=bf6e3aa3f6f44a4f6c279e776c638c6ff2cbbe92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:b0:72:af:3b:5f:a4:27:01:8e:04:f3:be:
b5:f3:54:ea:01:d4:75:2f:85:15:e8:0c:70:67:b8:
39:14:ce:52:66:1e:a1:32:c0:fc:98:44:82:af:e5:
85:fd:cf:de:ad:bc:7c:f7:f2:60:f1:b3:3e:c0:db:
32:63:f2:e4:f7:49:8b:37:17:a4:e6:1a:ed:73:8d:
f4:a8:ca:fa:bc:8e:58:5d:89:8f:ff:60:98:87:24:
5b:b9:20:5c:92:73:d1:7e:de:78:34:59:9e:8f:e6:
0c:df:de:f0:e1:4b:66:7d:9c:2f:b3:96:36:8c:0c:
2b:b6:ae:7d:af:5f:76:e8:5b:ec:16:6a:05:58:40:
01:32:96:f6:06:7f:cf:3c:29:4b:ef:37:19:fe:1e:
b5:41:3b:5e:89:5a:80:9b:e1:b2:b8:1c:53:9a:39:
04:60:e3:cf:49:02:36:0a:83:5b:b2:6b:e7:1b:ac:
f6:3c:ad:53:17:9c:4c:25:a5:bb:7f:8b:ed:cd:0b:
19:fd:d1:b8:1e:91:99:56:45:7c:2e:be:8c:59:b2:
ff:2c:9d:62:7b:57:c1:e9:6c:f2:59:04:2f:0b:c4:
39:95:15:ed:e3:c0:97:c0:cb:30:19:fe:fd:01:19:
6c:b1:82:c4:34:f0:ab:cd:16:96:10:21:9b:c2:38:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6E:3A:A3:F6:F4:4A:4F:6C:27:9E:77:6C:63:8C:6F:F2:CB:BE:92
X509v3 Authority Key Identifier:
keyid:7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e1:89:bc:71:2c:7e:be:1b:19:3e:ce:94:1f:3a:c2:3b:29:
71:68:a2:f4:c8:5c:a1:4f:1e:a8:0f:aa:a9:e5:4b:98:be:61:
47:a7:8b:b8:c0:65:8f:5f:23:72:3b:d3:af:c6:43:de:c9:a4:
4a:e6:8d:9b:fb:af:fe:21:d4:88:d9:ad:e1:cf:3a:78:9a:58:
ec:19:24:7d:1d:ea:60:46:ad:5c:02:22:e5:c6:b8:c0:0d:c2:
12:f9:bc:1f:27:e6:2e:28:95:3e:81:13:33:6c:2a:e3:22:dc:
13:18:2d:a8:6d:88:37:05:60:8e:e2:89:e5:3e:53:c9:05:9e:
87:3a:bc:ee:de:17:f5:bf:a7:4f:72:93:04:dd:35:eb:36:f5:
7f:4c:9e:16:53:4e:cb:52:07:b7:da:f9:56:1a:df:72:ce:58:
c6:ba:25:8a:e7:b4:83:73:81:0a:11:68:7f:3c:b4:5f:a4:14:
43:04:0d:09:90:7d:88:02:9b:46:83:df:dd:94:b3:c1:0a:25:
68:3b:29:83:6d:a7:8c:10:3e:78:80:16:39:c0:3e:2d:0e:39:
38:c9:e7:6c:f8:01:d8:74:24:2f:6a:48:dd:82:e1:47:df:16:
8e:81:7b:c7:ab:93:1e:e8:ff:a5:a1:f8:c6:aa:c8:46:4b:9d:
42:37:d2:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSfy7FVHghOmvRMIhgzuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhM2Y4OTcxMTc1OTlmZTgzOWE5OTQwZTgxYTE3ODgyNDRj
YWFkMDYwHhcNMjUxMTExMDUwMTA1WhcNMjUxMTEyMDUwMTA1WjAzMTEwLwYDVQQD
EyhiZjZlM2FhM2Y2ZjQ0YTRmNmMyNzllNzc2YzYzOGM2ZmYyY2JiZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZOwcq87X6QnAY4E876181TqAdR1
L4UV6AxwZ7g5FM5SZh6hMsD8mESCr+WF/c/erbx89/Jg8bM+wNsyY/Lk90mLNxek
5hrtc430qMr6vI5YXYmP/2CYhyRbuSBcknPRft54NFmej+YM397w4UtmfZwvs5Y2
jAwrtq59r1926FvsFmoFWEABMpb2Bn/PPClL7zcZ/h61QTteiVqAm+GyuBxTmjkE
YOPPSQI2CoNbsmvnG6z2PK1TF5xMJaW7f4vtzQsZ/dG4HpGZVkV8Lr6MWbL/LJ1i
e1fB6WzyWQQvC8Q5lRXt48CXwMswGf79ARlssYLENPCrzRaWECGbwjjoywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9uOqP29EpPbCeed2xjjG/yy76SMB8GA1UdIwQY
MBaAFHo/iXEXWZ/oOamUDoGheIJEyq0GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWotSmNSZFpuLWc1cVpRT2dhRjRna1RLclFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wNzg5NjAtM2MzYS00MGU0LTkzNDIt
YjJhZmVhNmQwNmFiLzEvZWotSmNSZFpuLWc1cVpRT2dhRjRna1RLclFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8wNzg5NjAtM2MzYS00MGU0LTkzNDItYjJhZmVhNmQwNmFi
LzEvZWotSmNSZFpuLWc1cVpRT2dhRjRna1RLclFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeGJvHEs
fr4bGT7OlB86wjspcWii9MhcoU8eqA+qqeVLmL5hR6eLuMBlj18jcjvTr8ZD3smk
SuaNm/uv/iHUiNmt4c86eJpY7BkkfR3qYEatXAIi5ca4wA3CEvm8HyfmLiiVPoET
M2wq4yLcExgtqG2INwVgjuKJ5T5TyQWehzq87t4X9b+nT3KTBN016zb1f0yeFlNO
y1IHt9r5Vhrfcs5Yxroliue0g3OBChFofzy0X6QUQwQNCZB9iAKbRoPf3ZSzwQol
aDspg22njBA+eIAWOcA+LQ45OMnnbPgB2HQkL2pI3YLhR98WjoF7x6uTHuj/paH4
xqrIRkudQjfSLw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:57 2025 by rpki-client