Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
File: E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft (raw, json)
Hash identifier: HhCC0qS/u9zamCwsUwVrUJ02MZ1WH8BPDlO8+1PGPH4=
Subject key identifier: 0E:04:51:60:43:4E:FB:C9:C3:2C:1F:E7:5F:82:61:DE:91:36:97:EE
Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
Certificate issuer: /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Certificate serial: 019A71EEF1B9C109AC1B12ACF153C70A0A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl (hash: OcvvYYwNI4oJblgUhDrAO/fbC8V6Ws0XNkETrexcRp0=)
2: Lwv2z50TacEXDfAgt2QQ5TnpkCs.roa (hash: tYAhzY7EkxkcdKAd1e+CEruoxf+PG643EXDIhg1GnKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f1:b9:c1:09:ac:1b:12:ac:f1:53:c7:0a:0a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=0e045160434efbc9c32c1fe75f8261de913697ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:d8:07:e0:e2:2b:5b:bc:82:18:4d:27:be:
4c:ae:d1:bf:6a:70:a6:76:ad:cf:56:43:d7:8e:fb:
84:6a:8c:83:5e:30:3b:a0:6e:8a:84:a4:71:93:28:
55:80:ce:da:a4:2d:6e:53:e7:24:73:50:39:71:96:
a7:6e:db:6d:7f:1e:7f:af:fa:7d:4f:11:7f:f7:8f:
6f:3c:69:20:98:e0:aa:ce:89:1b:a4:5b:aa:85:5e:
59:9c:45:a1:f7:06:70:a3:b0:46:05:d7:e6:61:b9:
31:6e:e6:05:0d:81:61:dc:ac:a4:cd:44:91:d8:da:
cf:f0:bf:8f:d1:30:72:9d:cd:58:58:80:1b:b6:3b:
c8:c6:e6:9b:70:14:4d:81:b7:a6:07:c4:2e:db:a9:
83:69:18:83:60:94:b2:c1:12:5c:a5:28:9f:7c:3f:
02:b3:21:5c:9c:07:a2:b1:c5:0e:2b:90:28:e5:89:
61:6c:aa:7a:db:f3:cf:ee:f7:28:dc:9f:00:d9:3a:
b7:b4:09:3d:9a:99:06:08:97:ee:e6:78:c6:7f:aa:
e1:fb:02:68:a0:b5:7e:29:41:40:9d:bb:55:72:35:
32:37:28:d2:f4:d4:64:1c:06:96:ef:d1:8a:f7:46:
3e:b2:29:f5:c8:70:73:b9:53:5e:81:d5:51:ba:86:
74:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:04:51:60:43:4E:FB:C9:C3:2C:1F:E7:5F:82:61:DE:91:36:97:EE
X509v3 Authority Key Identifier:
keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a9:68:eb:5a:91:54:93:22:88:d8:4a:d9:95:73:f1:ea:58:
11:5c:87:26:06:5b:34:6b:f9:ac:2e:2f:58:42:21:8f:47:bb:
bb:f9:f0:a5:50:66:f5:5f:01:f1:fe:9f:43:c4:03:f4:7e:49:
74:8d:8b:c2:3f:a0:4e:9a:65:d3:ff:be:58:fb:4a:5d:ae:57:
5c:71:e0:1f:77:05:1e:c0:1a:98:48:e9:6f:a1:3a:de:fc:c5:
6e:74:b1:46:f7:d5:4b:f5:62:2e:3f:b0:71:4c:e7:c0:8d:5f:
89:99:b6:78:63:37:4c:3d:74:34:75:22:2f:58:c8:2b:1c:3a:
76:ca:46:51:c6:db:1a:8c:19:da:fe:bd:13:c6:ac:79:17:91:
c4:fd:43:8d:47:97:74:b2:56:9e:44:61:76:64:c8:7a:6c:a9:
fe:08:ba:b2:7e:2c:75:db:44:c4:e1:88:aa:59:88:4c:b5:66:
d6:54:b5:4d:21:0a:cf:ec:1a:aa:67:4d:be:15:d4:b8:5a:8e:
6b:bf:48:1a:ce:12:73:5d:d8:92:ba:11:16:be:58:46:e3:f8:
e5:f7:8a:fb:97:1e:0b:75:ac:5a:3b:2d:a3:9b:21:c4:84:8e:
96:dd:6c:3d:5a:76:d9:2a:04:f8:c0:3b:d1:30:3a:63:6c:99:
4d:79:32:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:54 2025 by rpki-client