Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
File: e00xqxjkH42VmgnVVmDdMqqcRfc.mft (raw, json)
Hash identifier: NVfEL5HF3NzHaBl6tiR94OswlM62+01aS/rFL9rB6J0=
Subject key identifier: BA:21:76:F3:4E:1F:C4:DE:BD:54:93:33:3E:C8:D6:80:F9:E1:CC:C0
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial: 019A1383FAA5FD623A377D184B1CD1D29640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
Manifest number: 0448
Signing time: Fri 24 Oct 2025 00:00:07 +0000
Manifest this update: Fri 24 Oct 2025 00:00:07 +0000
Manifest next update: Sat 25 Oct 2025 00:00:07 +0000
Files and hashes: 1: 5Ks6R6ANPOuqDi6voNhJGuCZMW8.roa (hash: rJBWopYkkYdyW3mSVPW+i2geLeI7RuDFMOG3B57hJQA=)
2: DkUOS-7Geo49d0Nh-2-IQuK04LY.roa (hash: U+IaFC9jrzPW5vZBo+Ho3GIYBe2Y+qIpZI+pYfAAT+8=)
3: e00xqxjkH42VmgnVVmDdMqqcRfc.crl (hash: Ycr6erLOERAhAPd+mP3FZEI9iWf10VXyluMq43VEE30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:83:fa:a5:fd:62:3a:37:7d:18:4b:1c:d1:d2:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Validity
Not Before: Oct 24 00:00:07 2025 GMT
Not After : Oct 25 00:00:07 2025 GMT
Subject: CN=ba2176f34e1fc4debd5493333ec8d680f9e1ccc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:aa:98:a6:55:25:43:a3:9f:6f:d4:91:21:
61:68:f1:93:76:be:78:fb:da:cf:73:0c:af:a2:f1:
f4:4e:e2:b3:8d:02:45:ea:56:34:03:dc:25:54:34:
24:ec:3a:b4:ad:87:56:c6:6e:34:a0:66:ad:79:80:
dd:f1:87:17:87:31:cf:e1:1c:8a:0e:0a:04:d2:e5:
42:c9:0f:66:cc:c2:40:85:7d:7a:f3:d9:16:1c:4e:
36:81:c9:e9:c9:90:84:53:37:0d:8a:c1:9b:0b:70:
0e:55:87:93:9a:ef:9a:63:70:4a:19:90:cc:41:9b:
56:24:91:14:55:24:4e:f0:8b:9d:58:e6:5e:9c:eb:
ec:9e:8a:52:c1:35:2c:a1:75:7a:13:e0:a7:c8:e8:
16:f4:83:87:e5:88:7f:52:9d:0b:42:13:08:42:a2:
9c:3d:7b:e6:51:5f:96:f7:ae:5b:20:21:24:6c:8c:
20:ff:96:91:6a:3e:77:09:2b:e8:14:43:0f:3f:d2:
db:cb:0e:a7:61:65:b9:bb:47:b2:b5:02:4e:34:3a:
02:a6:de:99:af:ff:7f:b8:9e:20:b0:4e:56:65:b7:
bb:bf:af:6b:bc:5c:92:a0:89:4f:75:13:93:87:59:
71:b3:d1:bf:f3:7a:5c:f1:c6:6e:73:03:9d:2b:01:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:21:76:F3:4E:1F:C4:DE:BD:54:93:33:3E:C8:D6:80:F9:E1:CC:C0
X509v3 Authority Key Identifier:
keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:64:ab:ca:08:72:c6:c8:c3:b4:59:1a:59:ed:29:43:7d:d9:
62:9a:62:b1:e7:30:22:7b:27:3d:2f:e1:aa:f7:e9:b4:fd:e2:
ab:1a:3a:81:d8:7b:0f:ce:30:15:26:4c:00:10:2e:ec:9a:80:
e4:85:ed:2f:76:93:8c:a1:15:86:7c:f1:ab:e7:77:f6:28:7f:
c8:50:76:95:90:24:d6:90:44:d8:c4:26:a9:d2:32:49:9f:26:
77:ec:bc:25:e2:28:11:97:43:66:51:1a:3c:ec:74:3e:87:4a:
85:7c:81:5e:a1:9c:ab:df:19:14:68:11:e3:48:94:3f:78:8b:
a7:93:49:69:a6:6c:3d:d1:6b:84:4c:3e:7b:62:65:2c:9a:43:
b1:1a:21:66:26:b0:72:9d:78:df:39:64:e8:f7:7f:db:d9:47:
0f:a7:4b:17:03:be:b4:c2:53:b6:c6:b7:7f:b9:1f:93:02:5c:
06:80:bf:75:97:57:3a:47:db:1d:26:62:c2:eb:d5:30:11:0e:
7b:48:47:16:f6:3c:15:0e:7d:5d:13:98:3b:47:2a:5b:5b:3b:
54:71:b7:9f:3d:1c:88:77:7f:da:c4:aa:25:49:d1:9a:4c:2d:
ef:cd:f7:bb:c5:90:6e:ee:fd:27:e9:73:6f:0c:db:a4:33:a2:
0c:cc:42:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 03:37:41 2025 by rpki-client