Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
File: ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft (raw, json)
Hash identifier: aOMyKzkgOcm25fvBW8GHkU2ViOy1lGYV+WvsP2kKHC8=
Subject key identifier: E4:DB:B6:4E:E8:98:FF:06:2C:31:CE:B1:FE:30:EB:96:AD:AD:BC:96
Authority key identifier: 10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3
Certificate issuer: /CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
Certificate serial: 019A71B8F340899BFD8CAEBB0D34632791B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
Manifest number: 0647
Signing time: Tue 11 Nov 2025 07:02:17 +0000
Manifest this update: Tue 11 Nov 2025 07:02:17 +0000
Manifest next update: Wed 12 Nov 2025 07:02:17 +0000
Files and hashes: 1: ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl (hash: B5MPOGjPQiYgs/RuFe9ndRnHOa671Fdzh01Xx4p4dus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f3:40:89:9b:fd:8c:ae:bb:0d:34:63:27:91:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
Validity
Not Before: Nov 11 07:02:17 2025 GMT
Not After : Nov 12 07:02:17 2025 GMT
Subject: CN=e4dbb64ee898ff062c31ceb1fe30eb96adadbc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:99:1d:ed:b5:bf:d7:4b:44:14:55:35:c7:
f7:ba:89:33:d7:ac:a1:be:6c:ad:2b:e2:e4:08:2e:
a4:ec:ae:f5:71:89:3f:37:24:3a:f7:7c:7d:7b:9e:
15:6b:5d:66:ba:d7:7f:7a:c2:f7:e6:16:58:60:26:
2c:91:36:c6:a5:95:20:78:6d:df:dc:75:13:3b:85:
00:11:1e:09:8e:da:b0:e7:f4:4b:91:25:ce:5e:87:
1a:c0:df:15:a0:07:1c:b1:13:83:cd:ff:5f:8e:4b:
b5:83:7a:a4:d4:20:e4:d1:89:39:fd:85:eb:4e:be:
db:6d:2f:1a:44:25:d0:3f:65:1d:e3:df:11:af:b5:
82:1c:99:6d:97:b1:6f:9a:03:fd:38:3f:60:bd:27:
ab:f1:d6:86:91:ad:cd:23:fa:9f:c8:57:cf:47:3e:
c8:fb:18:22:65:59:76:01:fb:60:f0:7d:69:ca:76:
68:13:a5:4d:b6:db:5e:45:a0:3e:05:2e:53:84:a8:
83:31:f9:68:81:23:73:6b:af:e9:ec:3a:c0:48:2d:
45:71:9f:56:b9:5b:39:88:19:51:cf:af:4f:a8:a3:
91:29:75:47:bc:67:c6:53:f8:16:af:95:24:9c:06:
5b:ac:27:25:f1:ea:2e:eb:df:da:37:de:d0:70:f8:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DB:B6:4E:E8:98:FF:06:2C:31:CE:B1:FE:30:EB:96:AD:AD:BC:96
X509v3 Authority Key Identifier:
keyid:10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f7:84:60:b8:2e:e1:dc:c6:f1:57:38:88:50:e5:76:4e:06:
a7:af:9d:3c:a7:86:b3:fe:d4:6a:72:b3:ce:b5:1e:b9:00:63:
fb:2e:81:d8:a4:7e:cf:57:d3:47:39:37:40:37:9e:1a:3d:33:
9a:1d:c7:9a:71:2b:c3:32:d7:c8:a9:d4:84:3c:42:ea:0c:91:
0b:63:9e:f1:0e:2f:30:4e:ee:8b:47:ac:14:71:c2:8e:14:a9:
f3:a5:54:5c:74:95:d0:67:ee:98:b0:78:aa:39:5e:a6:6e:78:
1a:87:59:b6:16:ed:10:f4:79:17:9c:6b:47:71:f6:33:f3:09:
dd:20:f2:96:3e:e0:a7:85:04:77:d0:ce:d4:14:06:b2:98:4d:
d9:c7:19:87:1e:31:8c:7f:96:64:7b:a1:2a:c6:5d:22:cb:e7:
13:f8:2d:07:23:34:0e:e5:72:a4:c7:10:33:05:e1:91:a7:fc:
f8:47:50:61:2e:3a:36:22:83:a7:fc:41:32:04:ea:c9:7e:3c:
df:20:c1:24:54:4a:dd:22:bb:dd:35:c7:62:ec:b8:38:1d:a5:
18:e8:9d:ee:c2:ea:ba:ae:b4:69:21:d0:2c:d6:5d:ad:fc:8a:
07:29:19:cb:20:ef:74:20:a5:48:db:48:03:b9:7c:14:88:4e:
e2:db:d1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:14 2025 by rpki-client