Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: 7A+zHtxQNtXRuH/AeifUW/0nhaOHCNEMHQAh6MpcWr0=
Subject key identifier: E0:5C:E5:C0:C3:2B:50:D1:E3:3B:A0:19:BD:87:80:BA:3B:C4:B3:B7
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 019A25C122BD10759ECC0065511F7ECB6C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 1410
Signing time: Mon 27 Oct 2025 13:00:05 +0000
Manifest this update: Mon 27 Oct 2025 13:00:05 +0000
Manifest next update: Tue 28 Oct 2025 13:00:05 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: EVbLWyMZR3VQugQu24j66MUKaTTKsk/VOLwUO+6hk0E=)
2: s3MszUL2Sssrqjezj_btDkPTmQg.roa (hash: rgkSdfEiUESbKFQA8EcHOyD2UnXv2kAlPQ3EqnLhSNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:22:bd:10:75:9e:cc:00:65:51:1f:7e:cb:6c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Oct 27 13:00:05 2025 GMT
Not After : Oct 28 13:00:05 2025 GMT
Subject: CN=e05ce5c0c32b50d1e33ba019bd8780ba3bc4b3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:20:c8:df:38:8c:80:27:e7:48:04:a0:83:
1f:ca:b7:12:7f:37:8b:55:0d:d8:f0:bb:c7:68:ef:
3a:2d:fa:c4:c9:cf:ae:5a:74:14:cb:c4:b2:6a:dd:
3a:d8:36:82:42:01:7d:05:44:76:52:20:8f:b4:a2:
fb:5a:eb:bb:fb:30:91:2c:02:20:72:92:62:c4:96:
53:c7:fa:c2:ab:3a:5e:ea:37:07:08:6d:dc:03:a3:
dd:32:c4:18:20:8d:7a:67:9c:99:e9:e4:0e:90:2a:
12:32:47:c3:df:c0:fc:02:09:ef:14:73:f2:fe:09:
ad:d5:f7:18:9c:47:c0:ab:0a:d7:2d:28:a7:ea:7c:
c2:4b:07:bd:76:f7:f6:06:35:8f:e1:7f:22:04:c7:
a2:fd:ec:a2:43:47:9e:74:0f:6a:d2:b0:07:77:38:
5d:19:ca:2e:a8:f1:19:23:0f:eb:7d:ee:61:a8:26:
c2:42:da:cc:18:24:0b:7b:95:d4:69:06:a8:08:25:
f5:63:c4:6e:be:d8:16:f3:2b:31:0a:e8:c1:cd:00:
29:33:3e:cc:09:8a:62:f3:ba:0e:77:19:2f:9b:f8:
fc:fe:3e:aa:74:ff:0b:0c:2f:6d:d2:21:f6:6b:4a:
9d:58:8f:7b:d5:7a:98:2f:26:c9:42:0d:69:39:48:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5C:E5:C0:C3:2B:50:D1:E3:3B:A0:19:BD:87:80:BA:3B:C4:B3:B7
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:20:af:88:bb:78:12:b7:17:0d:5c:b3:84:f9:04:67:fa:93:
dd:0d:9b:21:a9:8a:2a:f0:e5:e3:ec:7d:1a:36:36:1d:3b:4d:
fe:90:3e:e7:76:d4:b6:d8:cb:35:f5:bf:2e:6b:a2:2a:75:bd:
98:b4:ff:cc:8e:33:65:95:2c:63:e7:bc:8a:be:9c:ba:ef:a7:
45:40:4e:80:7c:b7:bb:8d:d7:93:e3:32:dd:18:56:b1:56:45:
3b:cd:be:a0:83:38:7d:4d:9e:6a:ba:8d:22:43:e4:10:a1:0d:
ef:72:1c:ed:13:59:85:13:8a:d3:28:fd:d7:51:83:52:81:21:
e9:55:98:7b:72:cd:05:02:da:eb:d3:0c:e9:06:df:e5:97:70:
62:64:8e:1b:c6:98:4b:3c:0d:56:e6:4e:38:f6:c0:82:81:33:
12:e7:aa:29:36:8d:fd:3d:96:1d:eb:01:9f:42:e9:c0:c6:18:
26:fa:f4:47:c2:bc:26:57:ab:60:df:7c:ac:de:3b:eb:7f:e3:
ea:4e:68:96:1e:95:35:6a:d1:81:f3:37:66:06:13:35:4e:0a:
b7:2f:cd:ff:0d:80:0e:dc:7a:9a:27:d1:4b:2a:75:59:0f:46:
2e:a7:2e:00:19:d7:01:85:3b:d0:3b:d6:05:e1:84:1c:e1:e0:
b2:64:04:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolwSK9EHWezABlUR9+y2xDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDY1YjljZmIzNjhjNjllY2IwZTNmZWEzYjU0MmJhOWM3
MzAxZjQwHhcNMjUxMDI3MTMwMDA1WhcNMjUxMDI4MTMwMDA1WjAzMTEwLwYDVQQD
EyhlMDVjZTVjMGMzMmI1MGQxZTMzYmEwMTliZDg3ODBiYTNiYzRiM2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvwgyN84jIAn50gEoIMfyrcSfzeL
VQ3Y8LvHaO86LfrEyc+uWnQUy8Syat062DaCQgF9BUR2UiCPtKL7Wuu7+zCRLAIg
cpJixJZTx/rCqzpe6jcHCG3cA6PdMsQYII16Z5yZ6eQOkCoSMkfD38D8AgnvFHPy
/gmt1fcYnEfAqwrXLSin6nzCSwe9dvf2BjWP4X8iBMei/eyiQ0eedA9q0rAHdzhd
GcouqPEZIw/rfe5hqCbCQtrMGCQLe5XUaQaoCCX1Y8RuvtgW8ysxCujBzQApMz7M
CYpi87oOdxkvm/j8/j6qdP8LDC9t0iH2a0qdWI971XqYLybJQg1pOUissQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBc5cDDK1DR4zugGb2HgLo7xLO3MB8GA1UdIwQY
MBaAFGhGW5z7Noxp7LDj/qO1QrqccwH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVaYm5QczJqR25zc09QLW83VkN1cHh6QWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yNjdmOWUtY2NjYy00NDNmLWJlYWMt
MWFlYTViZTE1MGZhLzEvYUVaYm5QczJqR25zc09QLW83VkN1cHh6QWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yNjdmOWUtY2NjYy00NDNmLWJlYWMtMWFlYTViZTE1MGZh
LzEvYUVaYm5QczJqR25zc09QLW83VkN1cHh6QWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSCviLt4
ErcXDVyzhPkEZ/qT3Q2bIamKKvDl4+x9GjY2HTtN/pA+53bUttjLNfW/LmuiKnW9
mLT/zI4zZZUsY+e8ir6cuu+nRUBOgHy3u43Xk+My3RhWsVZFO82+oIM4fU2earqN
IkPkEKEN73Ic7RNZhROK0yj911GDUoEh6VWYe3LNBQLa69MM6Qbf5ZdwYmSOG8aY
SzwNVuZOOPbAgoEzEueqKTaN/T2WHesBn0LpwMYYJvr0R8K8JlerYN98rN4763/j
6k5olh6VNWrRgfM3ZgYTNU4Kty/N/w2ADtx6mifRSyp1WQ9GLqcuABnXAYU70DvW
BeGEHOHgsmQEEw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 20:28:00 2025 by rpki-client