Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
File: Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json)
Hash identifier: P3ZPfwl5TpROVhmoxgyTxaCG04+b0zqCvtuEN5ev7Qk=
Subject key identifier: 20:01:84:87:8F:CC:2D:76:ED:D9:4F:4D:0D:EE:67:0D:07:D4:71:43
Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
Certificate issuer: /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Certificate serial: 019A71B91AEF4B2B0109DCB120D68EB784A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
Manifest number: 146F
Signing time: Tue 11 Nov 2025 07:02:27 +0000
Manifest this update: Tue 11 Nov 2025 07:02:27 +0000
Manifest next update: Wed 12 Nov 2025 07:02:27 +0000
Files and hashes: 1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: rC7GWV4u2PjtYygcyup2/R1GPjfWckQsnJfasWl1BVo=)
2: T2nJ8YsYUulSZb9GUXFmz8VHViw.roa (hash: 5XjZ7sWfLWF9S9IVh/StOJhbx3B86TdyvGGrjN3b+RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1a:ef:4b:2b:01:09:dc:b1:20:d6:8e:b7:84:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Validity
Not Before: Nov 11 07:02:27 2025 GMT
Not After : Nov 12 07:02:27 2025 GMT
Subject: CN=200184878fcc2d76edd94f4d0dee670d07d47143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:2f:bf:53:d2:79:07:72:72:43:f9:cb:e3:
5b:6c:2a:ea:5a:a7:cf:46:b4:27:51:59:e6:1d:e5:
e7:fb:f4:51:06:cb:33:bd:c4:2c:bf:b2:8c:10:e1:
bc:97:1a:f2:dd:23:d7:33:9a:62:9e:c2:18:ff:75:
cf:a8:ff:3c:6f:ee:22:14:0e:0a:70:f8:a8:12:b1:
8f:3c:ea:d6:b8:1b:09:ab:e8:a4:18:30:e6:2d:ae:
ce:cf:d1:37:3d:56:e9:94:49:a3:ef:8c:de:1a:2a:
a9:2c:07:b4:7f:33:51:0d:81:1e:94:61:f6:54:d5:
35:52:8e:b6:63:a0:6e:69:ea:4d:42:a8:14:9f:99:
5b:f5:c6:25:72:08:3e:d2:51:c5:a5:ad:f1:33:d8:
c5:4c:d9:aa:35:6c:9f:fa:29:2f:02:bd:2c:9c:af:
8a:06:69:3a:e9:8b:9a:99:e6:2f:23:80:6f:85:21:
90:df:74:b7:31:78:e9:56:5a:b5:6e:d6:29:d9:da:
9a:58:b2:50:d1:52:5c:0e:8f:47:e5:b8:52:6c:85:
4e:30:9b:5a:46:f8:02:bf:31:29:71:c8:d1:2e:a3:
38:50:f5:a8:ab:40:74:20:e1:63:a2:b0:99:e5:09:
e4:98:24:49:99:c2:70:d7:b8:e6:66:44:33:3b:f1:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:01:84:87:8F:CC:2D:76:ED:D9:4F:4D:0D:EE:67:0D:07:D4:71:43
X509v3 Authority Key Identifier:
keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:32:90:19:92:17:b5:e9:a6:81:5f:37:55:a0:52:2f:60:9d:
bb:c6:6b:4c:df:dc:ff:e9:14:b9:3f:59:6a:34:b8:18:fb:0b:
8d:81:21:94:d5:6e:3f:c1:35:cd:a3:95:cc:ed:52:3e:0c:b9:
b6:27:02:d0:59:91:d8:df:3f:e1:57:81:c2:a9:09:26:26:95:
bd:1f:20:11:d6:54:23:6e:3b:16:8b:f4:41:72:ba:ae:4c:fe:
d2:53:6a:55:9e:39:c0:e2:8b:70:c5:e5:6f:8c:de:05:93:32:
86:f3:9a:31:d6:1f:65:7b:b8:5d:da:11:86:b0:73:27:d7:1f:
08:7d:a9:b0:b1:ac:d9:f8:e6:7f:be:a7:94:4f:5d:17:79:78:
8b:37:72:2e:46:52:c5:7f:3b:27:6c:fd:ba:bc:59:10:d5:9a:
54:bd:22:6b:5c:41:ea:47:a2:54:0d:f3:dc:6c:8e:9e:3a:85:
43:2f:fc:73:c1:aa:c2:23:af:31:9a:ed:bd:39:f7:97:ba:41:
f4:3d:69:eb:42:9e:80:26:3f:fa:ef:c2:85:da:94:56:fe:86:
8c:6a:b1:a3:15:cc:62:66:fb:35:26:a1:6e:0e:c3:c3:28:55:
e4:cd:98:26:58:24:be:e7:9a:ce:ff:44:36:7d:e2:3f:97:34:
7e:25:41:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuRrvSysBCdyxINaOt4ShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzM2VlYjlmN2FiYTE5ZTAzYjEzNjZkYWIwODgzZjM2NTNm
YzAzYmUwHhcNMjUxMTExMDcwMjI3WhcNMjUxMTEyMDcwMjI3WjAzMTEwLwYDVQQD
EygyMDAxODQ4NzhmY2MyZDc2ZWRkOTRmNGQwZGVlNjcwZDA3ZDQ3MTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWMvv1PSeQdyckP5y+NbbCrqWqfP
RrQnUVnmHeXn+/RRBsszvcQsv7KMEOG8lxry3SPXM5pinsIY/3XPqP88b+4iFA4K
cPioErGPPOrWuBsJq+ikGDDmLa7Oz9E3PVbplEmj74zeGiqpLAe0fzNRDYEelGH2
VNU1Uo62Y6BuaepNQqgUn5lb9cYlcgg+0lHFpa3xM9jFTNmqNWyf+ikvAr0snK+K
Bmk66YuameYvI4BvhSGQ33S3MXjpVlq1btYp2dqaWLJQ0VJcDo9H5bhSbIVOMJta
RvgCvzEpccjRLqM4UPWoq0B0IOFjorCZ5QnkmCRJmcJw17jmZkQzO/HInwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCABhIePzC127dlPTQ3uZw0H1HFDMB8GA1UdIwQY
MBaAFBM+6596uhngOxNm2rCIPzZT/AO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEt
NjZiNjI0ZWFlNzhjLzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEtNjZiNjI0ZWFlNzhj
LzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDKQGZIX
temmgV83VaBSL2Cdu8ZrTN/c/+kUuT9ZajS4GPsLjYEhlNVuP8E1zaOVzO1SPgy5
ticC0FmR2N8/4VeBwqkJJiaVvR8gEdZUI247Fov0QXK6rkz+0lNqVZ45wOKLcMXl
b4zeBZMyhvOaMdYfZXu4XdoRhrBzJ9cfCH2psLGs2fjmf76nlE9dF3l4izdyLkZS
xX87J2z9urxZENWaVL0ia1xB6keiVA3z3GyOnjqFQy/8c8GqwiOvMZrtvTn3l7pB
9D1p60KegCY/+u/ChdqUVv6GjGqxoxXMYmb7NSahbg7DwyhV5M2YJlgkvueazv9E
Nn3iP5c0fiVB4g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:28 2025 by rpki-client