Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File: e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier: uiHWcnevHaNednKbqOuEP64OF3RVwdGc701sdDYAv/Y=
Subject key identifier: 47:8F:9E:A3:5A:C9:0C:6E:5C:AD:BC:9E:D9:17:F1:1B:CE:93:F4:40
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial: 019A06000795A39FF3E42FBFFA0E01C85267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number: 0C0E
Signing time: Tue 21 Oct 2025 09:00:56 +0000
Manifest this update: Tue 21 Oct 2025 09:00:56 +0000
Manifest next update: Wed 22 Oct 2025 09:00:56 +0000
Files and hashes: 1: X1TlKjqQxQOIUE9nmZNVP4vjBXo.roa (hash: YEcDQS5RtxJGLo4gojN6ANb19cB9cM3e9I1XVwuKzs8=)
2: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: ruZNzZO2OMqD5DjzfnggJGbZ3rAsqKAzmljpeQUZCcc=)
3: pbPgbOFAYYSbv86NqTphvTqH-ss.roa (hash: 2bo0N8otfq6/P5RuOu/G2vL2kcq6chqi1fFShZ0tEtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:00:07:95:a3:9f:f3:e4:2f:bf:fa:0e:01:c8:52:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Validity
Not Before: Oct 21 09:00:56 2025 GMT
Not After : Oct 22 09:00:56 2025 GMT
Subject: CN=478f9ea35ac90c6e5cadbc9ed917f11bce93f440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0e:e0:ed:89:e9:e6:bf:06:5f:18:20:0e:5a:
69:9c:fa:40:a7:e9:dc:4b:dc:1e:f9:05:7a:1e:43:
2e:a1:49:19:14:a5:4f:a5:d5:3e:64:98:bf:e7:a5:
5e:90:38:1a:3f:47:91:1e:01:de:49:1f:56:d9:96:
ae:92:71:12:4d:87:15:2e:20:94:d5:7a:46:fc:0f:
08:6c:02:98:38:d7:60:74:43:c8:ba:d1:6b:e8:0c:
94:47:b5:6a:9c:db:88:a6:de:85:45:ef:4a:6c:20:
37:b2:06:73:d6:a0:da:fd:37:8c:a3:69:69:fd:e7:
aa:d5:f1:dc:a6:f0:ad:76:5e:8e:41:8d:f3:69:8c:
75:67:3d:53:89:01:d5:74:1e:51:fb:05:73:7e:4f:
ce:a5:f4:b2:c9:54:41:cb:93:dd:17:eb:16:f3:a3:
d8:67:2c:9b:67:38:56:97:3f:80:c1:38:70:58:7b:
44:2d:00:59:9c:ea:66:bf:84:f1:cf:c2:b1:52:52:
eb:fe:26:7a:a2:b8:ee:19:3c:f7:0d:31:dd:86:eb:
62:ae:e3:e7:b1:c2:cf:0d:a8:4a:5d:a8:87:18:ac:
a4:95:6b:3f:e4:4d:96:ba:99:44:0a:09:38:f1:49:
f8:6c:76:cd:39:16:6d:ad:eb:6a:15:0c:e5:94:70:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:9E:A3:5A:C9:0C:6E:5C:AD:BC:9E:D9:17:F1:1B:CE:93:F4:40
X509v3 Authority Key Identifier:
keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ae:c5:7b:fa:a5:04:2d:66:d8:68:3a:55:a7:b5:79:44:2b:
1d:90:e9:55:4b:1a:5c:2f:9f:3d:a0:a7:7f:35:52:0d:b6:cf:
9f:cc:74:44:be:13:a9:17:5f:ff:70:87:b7:f7:65:7a:12:0e:
57:79:5f:96:ec:dc:f7:54:5b:93:2b:7d:93:6d:e1:6f:d8:32:
05:93:76:43:7d:14:1d:9c:d4:e6:d3:64:66:28:20:3f:71:d1:
cc:87:9c:dc:91:57:d3:af:5c:51:7f:9f:2a:a8:09:d6:81:c9:
18:1f:a2:2a:8c:70:7f:7d:19:b5:24:54:fd:8a:c8:6c:79:c6:
36:3e:91:66:28:37:4b:c9:31:01:2e:53:92:85:4d:26:a8:6c:
39:dc:1d:00:06:85:b9:8d:a3:ab:3a:f7:e5:73:89:af:c3:42:
24:33:88:18:68:14:51:a4:1d:94:0c:f0:8e:a8:c4:43:78:d7:
bb:65:6b:07:fc:05:95:07:e8:83:dd:19:41:db:83:d5:16:76:
2f:4f:8e:94:32:98:4d:fd:56:e5:70:39:53:b1:d8:c5:18:c7:
73:6a:89:3a:2b:45:32:24:f4:1e:d1:92:0b:7b:4c:16:2c:66:
a9:33:fa:05:b0:48:98:35:a6:0d:8b:eb:af:a8:0c:4d:89:d7:
f4:26:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:10:33 2025 by rpki-client