Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: x65totXJ+SrDDQl7MFi1K6yYTAwG8L9Yv6TH1nzYdac=
Subject key identifier: 13:9B:CB:8C:67:0E:80:92:DE:F0:F1:AA:E5:A2:8A:BA:F5:F4:B7:8E
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 019A23D38902C778027DE4C56CD93C5F29B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 024D
Signing time: Mon 27 Oct 2025 04:00:56 +0000
Manifest this update: Mon 27 Oct 2025 04:00:56 +0000
Manifest next update: Tue 28 Oct 2025 04:00:56 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: zoVlMhfdJlzHpvSDT/HN/toXZyUdnmL2XmbJkxa9NgY=)
2: ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa (hash: ESZ0DE4a4/PZ75FUD4JmTPdMx0gc6CuklYJy0AZ+qzM=)
3: p7CsWJqhWsLkHyYPLS-R_3le0hU.roa (hash: EeSP4Cc1NDkG1olZjQwIwFAUrprwIWgmtu0OwLvcM94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:89:02:c7:78:02:7d:e4:c5:6c:d9:3c:5f:29:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Oct 27 04:00:56 2025 GMT
Not After : Oct 28 04:00:56 2025 GMT
Subject: CN=139bcb8c670e8092def0f1aae5a28abaf5f4b78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:ba:aa:cb:f9:5d:38:a3:8f:74:71:3f:eb:
af:4a:3c:09:1c:f8:a9:48:77:12:37:ea:a0:22:ab:
81:8e:10:95:cf:16:a1:a5:27:a0:ce:6e:5e:0c:e2:
12:df:71:c7:bf:e2:bf:a5:b5:a0:43:ce:ab:d1:d1:
ed:e1:2c:ff:44:f6:f1:e4:4c:34:fa:f3:0b:e7:68:
bd:f4:88:17:6d:4f:a9:62:24:db:67:54:eb:19:f0:
a7:5a:91:5c:b9:14:9b:7b:32:07:f8:c9:f2:db:50:
c0:93:e5:f8:e6:87:e5:87:8a:44:c0:8a:3c:fb:7e:
b0:20:e8:36:9f:8f:6a:24:fd:88:82:e6:5a:50:b2:
ca:72:2f:81:32:92:f1:a1:c9:7a:43:c3:8f:6b:c1:
73:ea:9a:83:58:f7:ed:3c:1d:9d:6d:78:00:f9:0c:
6b:19:7e:c1:77:71:3e:74:13:3a:36:02:88:ff:40:
30:79:4b:c3:48:c7:cf:de:ac:21:ae:0d:48:2b:99:
a1:59:bc:4b:7d:ad:81:ad:95:50:5c:f3:52:fc:b4:
a3:ac:52:fe:7a:65:a4:08:63:93:38:5a:3e:9d:0e:
51:a4:c3:db:d8:f4:c1:98:2d:67:4e:db:25:f0:61:
92:35:22:fd:2d:d7:54:9c:d9:b0:00:fb:17:e4:b7:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9B:CB:8C:67:0E:80:92:DE:F0:F1:AA:E5:A2:8A:BA:F5:F4:B7:8E
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:72:de:a4:ab:ff:88:f4:df:04:0d:02:68:10:e0:a3:02:54:
50:fb:43:b8:f2:ba:fa:1c:f2:d3:c8:2a:a0:bc:9c:b6:4f:d8:
39:3b:e5:9c:42:f3:4f:ec:d0:75:11:55:f1:2e:5c:84:3b:f8:
6d:25:18:c8:f1:45:e6:ea:f3:6b:3f:8a:25:4d:a0:53:df:b3:
e1:b3:cd:52:69:e5:96:8b:c2:91:95:64:f9:45:31:8e:03:4e:
53:46:8f:b9:5f:31:9a:0e:18:ad:24:a4:51:40:b5:eb:77:8f:
c6:51:85:2c:13:f7:ed:fa:d8:b6:93:c8:aa:ee:ca:c3:7c:a3:
2e:f1:13:f0:cb:34:74:6a:6f:08:42:81:3f:0d:d7:35:af:35:
0c:3a:e0:7f:70:37:da:58:a8:eb:ee:3a:af:ff:05:65:06:1a:
cb:7e:d3:b8:cf:9b:07:4e:94:a2:8f:cb:b2:f4:87:72:81:56:
a4:44:72:0f:1a:2d:f4:6b:77:a1:98:69:4b:5c:35:0e:45:f0:
1f:43:13:db:3b:b5:7a:5e:99:b1:88:dd:fa:d9:44:c1:af:55:
06:0e:66:cd:08:f9:b9:ad:8f:bf:21:ee:a2:1a:63:0b:eb:fa:
87:3a:23:cd:f2:a8:58:33:34:91:0b:58:8c:54:31:8a:85:b8:
d2:49:3e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:48:06 2025 by rpki-client