Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File: 9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier: MjnKpz3y6mNzUgDBIPQbcOBB9AtQCig4jTkSW/IzBhg=
Subject key identifier: EC:E0:81:57:13:04:1B:29:35:36:24:7A:E0:8F:BF:B8:28:B5:52:DE
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer: /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial: 019A72939724700F6F37CE13D1ADAF9AFE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number: 0F24
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: jHl7SDa9pDgtaDd+m3zqEZ8UgYMTD8jT7rkPFv7lcok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:97:24:70:0f:6f:37:ce:13:d1:ad:af:9a:fe:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=ece0815713041b293536247ae08fbfb828b552de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:1f:3e:f5:1a:ba:19:8e:e6:10:c0:8c:2b:
61:26:90:69:ce:5e:e2:9b:0d:6a:36:fc:56:bd:ef:
95:d8:2a:6f:1b:d9:19:47:36:b9:db:d8:8c:f4:c4:
ca:48:73:e6:a7:c4:58:33:06:5c:45:d2:01:56:93:
b3:24:69:93:8b:1d:f6:70:48:5e:db:cb:c7:14:b4:
13:47:89:e6:b6:70:be:bc:e6:2b:ef:9e:bf:0f:5c:
51:db:56:d7:34:2c:43:94:4a:18:4a:25:3e:76:20:
fc:9a:a0:ee:f0:35:59:f7:99:81:f5:eb:9c:0b:93:
3a:53:4b:ea:ec:fd:81:c1:62:bf:1d:8b:8d:dc:a5:
ee:d5:30:1d:b6:ce:8a:ec:37:6c:04:33:35:d8:9f:
98:2a:a0:09:f6:f2:2d:1d:3d:ac:60:68:36:22:00:
83:18:0e:f1:e7:65:81:fa:12:05:1c:b2:7d:13:b7:
95:b5:fd:54:29:99:56:ed:99:35:eb:da:63:ba:18:
36:3c:c3:eb:a4:0f:f9:28:43:80:e3:24:ba:b8:32:
de:9b:6c:41:80:b3:66:19:6f:25:73:64:06:8f:82:
7e:7d:f6:8d:47:93:db:9d:5a:c8:84:4a:1e:0b:2b:
50:12:db:d7:be:c5:b9:d0:c7:2d:16:04:f3:f9:7c:
55:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E0:81:57:13:04:1B:29:35:36:24:7A:E0:8F:BF:B8:28:B5:52:DE
X509v3 Authority Key Identifier:
keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1f:34:21:1e:6c:2d:d0:db:82:99:78:64:c6:f0:20:6d:7a:
8b:6a:94:cc:a0:8d:5d:9a:f3:98:f3:0f:ce:9d:0e:cf:f5:75:
de:47:3b:e4:d5:7a:33:f5:8f:72:15:ee:fa:f1:ef:ef:89:a2:
46:33:19:fd:ad:f6:9b:99:f4:11:ce:64:65:08:f3:cb:9b:e6:
00:0d:23:05:a4:b3:5e:83:5f:75:ec:12:f7:96:de:16:96:57:
a6:ae:bb:8e:b5:e3:f6:f5:c3:85:53:be:a4:0e:f7:b5:a5:36:
7e:c1:93:42:2b:a4:75:53:b2:34:80:2c:c8:b7:ed:99:47:1c:
54:69:6c:fc:99:97:08:dd:9f:c1:47:43:1f:7f:90:cc:35:29:
1e:77:9b:c7:40:9e:d4:01:9b:6d:96:13:60:7a:01:69:42:23:
21:e1:42:9d:cc:0c:b6:f4:d7:35:b6:7f:98:f2:be:e4:49:15:
64:8a:ea:fe:53:f3:80:b7:62:12:40:9a:20:05:30:39:6a:ca:
c4:c1:3a:3c:88:b6:5c:26:13:a4:d4:4e:5d:90:90:1e:ba:18:
cc:74:89:f9:82:0d:21:31:55:e4:91:8a:23:5d:59:24:e6:80:
93:7f:d0:4d:d8:c0:ad:47:1f:ac:93:7a:85:0b:70:af:c7:24:
58:95:16:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:52 2025 by rpki-client