Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
File: cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json)
Hash identifier: T+Q4ID/4WVwVjBB2gTq6j8MtnSQz3TGe94ozwp11KCk=
Subject key identifier: EF:2C:23:C6:B7:B5:A5:EB:39:EB:73:FB:10:C2:5D:E6:4D:68:F8:9D
Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
Certificate issuer: /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Certificate serial: 019A1E07C69F563B4EAD5E397414E1A69D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
Manifest number: 1663
Signing time: Sun 26 Oct 2025 01:00:17 +0000
Manifest this update: Sun 26 Oct 2025 01:00:17 +0000
Manifest next update: Mon 27 Oct 2025 01:00:17 +0000
Files and hashes: 1: YXf-UI6sodjRtp6HqVvWtQPvYyw.roa (hash: Jo6+/rWF7ZwPltXrVquS1cq9nd5I9gl4VOXFVkjNYeU=)
2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: 9lBU/Vj6Y5eXoiin9zbuoidWtbgmh5yL8YOv5zPbBvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:07:c6:9f:56:3b:4e:ad:5e:39:74:14:e1:a6:9d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Validity
Not Before: Oct 26 01:00:17 2025 GMT
Not After : Oct 27 01:00:17 2025 GMT
Subject: CN=ef2c23c6b7b5a5eb39eb73fb10c25de64d68f89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:5a:97:96:6e:99:29:6a:e7:2e:c8:7f:a6:
19:51:bf:f3:36:36:4d:24:65:d6:54:8b:2b:cf:ac:
2d:c4:00:1f:36:66:d2:31:67:bc:cf:5c:9e:95:52:
a5:f9:84:34:a0:c4:e4:5a:09:48:cd:4e:0b:d4:0b:
af:2e:97:65:2d:d2:0c:40:90:17:7f:d8:fa:ea:e3:
f0:4f:82:b7:a1:7f:e5:3c:5d:46:16:70:21:86:94:
eb:78:24:75:31:55:cc:f5:fc:87:07:9f:93:57:28:
20:11:34:68:95:f7:9f:4f:43:bc:bb:51:74:7f:8a:
23:b7:eb:6d:96:e9:9d:46:d9:0a:d7:1c:1a:f2:dc:
13:10:a8:0e:99:1b:c8:1e:ea:58:7c:16:00:4d:b6:
bc:77:1f:f3:78:73:9e:d6:4b:39:5a:01:ea:d0:95:
e7:7f:16:fe:0f:cf:e6:03:b0:d0:d9:3f:44:cd:ea:
53:9f:e0:4f:a9:02:a3:00:92:c0:b3:2b:96:e2:dd:
73:09:c8:00:86:c4:c5:4e:f3:31:a6:a1:24:9d:a3:
9d:17:63:35:62:5a:e1:c5:38:94:c0:e0:33:35:16:
be:a3:be:80:3a:19:1d:f2:cf:a1:de:d7:39:14:5c:
c4:d5:dc:25:2c:7b:7e:2e:66:fa:52:dc:ae:59:5c:
e9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2C:23:C6:B7:B5:A5:EB:39:EB:73:FB:10:C2:5D:E6:4D:68:F8:9D
X509v3 Authority Key Identifier:
keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:42:ad:b7:8a:a9:bc:af:89:ce:05:98:c2:01:ee:98:93:7e:
d7:c8:31:dd:b1:7e:0d:b4:60:3b:f8:e7:3f:98:a2:62:2f:61:
0c:87:d4:6d:18:2a:93:7e:9b:d5:dd:fb:35:0f:af:a1:7f:69:
8f:30:6d:fe:2e:82:78:3f:41:b8:a9:3e:5e:48:ca:b4:b8:3c:
58:4f:e2:08:92:e3:32:fd:54:0a:ec:4a:b5:12:86:a4:b1:35:
49:ee:e5:4a:e2:53:ad:d9:6e:48:33:b9:9f:fb:b5:d3:7e:57:
49:7d:61:ec:ab:a6:d8:c6:21:e3:a6:4a:3d:10:e0:db:7d:c8:
12:3e:85:71:87:12:5c:8b:2a:cb:df:a7:5c:8d:34:9a:7f:93:
e9:f7:02:f1:22:5a:0a:8d:1e:e6:76:a2:2e:26:f0:93:5a:2e:
62:85:d1:23:66:05:6f:c5:c3:4b:0c:09:a1:02:e8:0b:10:0e:
a3:21:d1:51:4c:c2:d3:de:c0:3c:8e:27:5e:e7:05:ab:32:13:
96:9b:0d:50:86:61:95:df:ff:3d:c4:48:68:70:4f:3f:fb:b7:
04:40:8c:38:b5:6e:ec:01:0a:2e:7b:b4:c0:2d:79:80:f7:51:
08:46:ba:f6:48:36:b0:05:76:31:a3:a3:85:d7:0d:78:36:2a:
78:0c:95:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:07:31 2025 by rpki-client