Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: ZQMIAlrLs4KMpoQQ0GzjevPaTJAqLOBgJF0NyBuF7tQ=
Subject key identifier: ED:B6:66:E0:BB:27:5D:C4:4B:53:DB:2F:A1:1C:9B:11:4B:76:49:0D
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 019A108315BEBEA3DB62FD2D54D91F3A0E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 14C7
Signing time: Thu 23 Oct 2025 10:00:17 +0000
Manifest this update: Thu 23 Oct 2025 10:00:17 +0000
Manifest next update: Fri 24 Oct 2025 10:00:17 +0000
Files and hashes: 1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: ux439bmzZH4seXmmeRU0cyYQyMahTBZC2IKqD813ZQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:83:15:be:be:a3:db:62:fd:2d:54:d9:1f:3a:0e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Oct 23 10:00:17 2025 GMT
Not After : Oct 24 10:00:17 2025 GMT
Subject: CN=edb666e0bb275dc44b53db2fa11c9b114b76490d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:2d:55:c0:fb:29:7d:7b:ad:99:e4:b8:9f:
61:ca:b3:aa:1d:e7:df:9a:96:dc:80:77:16:5a:34:
d6:e4:c1:68:3e:ab:c3:61:53:c8:f3:65:26:91:79:
34:9e:11:e3:fb:45:ea:9c:25:46:d3:a1:d5:38:ac:
a3:e0:36:c9:64:1f:3f:5e:d4:0c:72:dd:44:a6:05:
be:0d:d7:be:40:f9:25:3a:1e:3a:ae:b0:91:38:cd:
ec:31:a5:4a:ad:73:ac:84:dc:e7:74:e7:d4:34:77:
c8:96:24:5e:97:57:e9:f5:12:e9:d7:fa:98:ea:08:
c3:fb:63:83:9a:0a:f9:50:be:05:1a:8a:a3:9b:58:
fb:83:c7:ed:42:93:17:76:3e:9d:1a:d5:f8:76:7a:
3e:67:50:9d:ba:1f:62:ee:c8:5e:b7:12:cb:44:16:
e4:2a:f1:4f:9d:12:a0:f4:5e:5f:e0:bc:09:8a:7b:
b9:e1:af:1c:7a:9a:6f:48:21:8e:66:d1:d6:1f:21:
3c:11:3a:ad:06:6c:75:74:b4:e9:3a:0d:d8:37:68:
f1:1a:e9:fa:07:3d:0c:3c:b6:3d:82:ad:24:92:f4:
8b:6a:16:93:a2:7c:eb:5d:60:f4:fd:2b:78:cd:54:
e9:27:74:a1:86:be:f9:fc:84:8a:66:16:2d:ab:9f:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B6:66:E0:BB:27:5D:C4:4B:53:DB:2F:A1:1C:9B:11:4B:76:49:0D
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:eb:23:06:35:5b:14:2b:09:6f:8e:73:55:73:55:7b:83:49:
df:08:3b:01:a0:14:df:63:f4:04:d7:dc:0d:3b:41:3a:33:de:
13:30:eb:34:36:6c:f5:21:d0:a0:c2:19:c7:5e:93:24:29:7b:
f6:5f:79:be:a8:76:a2:57:03:5a:71:ab:d9:2d:19:d9:8f:a9:
46:1e:01:b3:42:48:ee:9c:c9:24:bb:44:b5:6f:cd:0f:f5:20:
a9:68:ca:61:09:e7:ef:da:ea:a7:d5:f4:59:61:ed:ac:fc:69:
2b:10:ef:0a:df:14:8d:b5:ce:ae:c1:b6:62:77:e4:b5:0b:f2:
39:62:5d:e0:ba:74:84:77:47:12:98:36:87:fc:c0:02:15:42:
06:a5:17:33:db:97:8a:79:7c:43:81:a6:cf:43:82:72:fe:90:
c8:47:85:70:c9:e7:5b:86:66:b3:1e:b9:99:1d:e0:6a:98:e1:
0b:c8:69:6c:c5:a9:aa:bc:a8:87:cb:75:8d:4b:ff:1b:f2:0f:
74:c1:bc:d5:cf:7b:db:bc:1f:32:93:64:f9:f8:c0:98:72:17:
45:cd:e9:f6:15:40:6a:8d:f4:a9:85:85:09:e0:44:fe:e1:58:
b9:c5:f1:3b:bf:ff:16:13:96:8f:f5:2b:91:78:7a:8f:26:54:
e7:a4:25:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 19:21:38 2025 by rpki-client