Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
File: E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft (raw, json)
Hash identifier: ZoqYmJFAzbQmsL6gNIVzKp9tcKcRGVp3ihQCL1hxFYE=
Subject key identifier: 0D:47:03:62:45:1F:F0:D2:D6:14:F8:1C:37:4F:EB:F6:9D:21:9E:0C
Authority key identifier: 13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
Certificate issuer: /CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Certificate serial: 019A71B8B4F71CDAD8C38DA891FC530E1F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
Manifest number: 0EA7
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: 8uZf_YXrnrFcX5OGm1hy0aMncrA.roa (hash: FJ+rC+vSFCLpeii+a3s75dE3+VofCsTHLoOQv8k1S8Q=)
2: E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl (hash: 5+UgxuATw82KvsmMRpeMr+xsz33e3CuWcPKRYUibUgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b4:f7:1c:da:d8:c3:8d:a8:91:fc:53:0e:1f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=0d470362451ff0d2d614f81c374febf69d219e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:eb:64:63:39:90:50:9e:4d:0f:16:6f:ea:
e5:91:ff:a7:30:5d:e7:25:93:03:96:67:13:3e:0a:
f6:29:00:ff:92:29:08:27:71:94:34:0d:b3:ac:f3:
41:a5:45:dd:65:22:6e:49:68:e5:4f:57:d1:2d:7a:
7a:c3:73:54:6f:5a:23:3e:c0:79:b1:e6:b2:e8:32:
da:8a:ea:a4:2c:e0:d1:e0:97:12:32:4a:c8:fc:51:
f8:ca:a7:71:90:61:73:76:c5:84:57:67:66:fb:02:
49:fa:aa:13:61:6f:08:b4:55:62:20:b4:96:36:51:
a2:7d:14:19:fa:2c:10:ad:ca:5b:13:2c:94:ac:0a:
67:eb:06:d0:f9:2a:fe:fa:42:10:29:f3:2d:7d:67:
b4:23:99:ce:6a:37:6b:32:eb:11:78:63:52:78:37:
ff:63:08:cd:13:23:e9:a5:53:c7:9e:bd:9e:ad:0d:
83:b8:70:f4:fb:b2:8e:8a:6a:d8:2b:d6:38:e2:d7:
67:30:cb:a3:56:62:9f:75:48:df:c5:60:a2:b8:f6:
d1:e7:a2:b2:88:f2:e9:c5:35:db:73:5f:7a:bf:61:
6a:30:2c:13:16:a4:c3:9c:68:fc:15:7b:59:b0:61:
aa:39:eb:c6:64:ba:3f:b9:63:64:eb:ca:52:90:05:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:47:03:62:45:1F:F0:D2:D6:14:F8:1C:37:4F:EB:F6:9D:21:9E:0C
X509v3 Authority Key Identifier:
keyid:13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:50:a1:72:6d:7b:55:6a:8f:f6:68:68:5f:6d:31:21:89:6e:
39:04:02:f3:5a:dd:fa:9d:53:63:5e:c7:06:79:dc:91:af:03:
4e:5b:40:d6:44:06:9f:68:ab:56:a1:4c:a9:2e:86:7c:90:0f:
11:30:01:ef:f3:24:ee:2d:ca:40:ac:62:3b:26:f3:c2:0c:dd:
50:5e:31:24:9b:a4:77:3e:1a:c1:0c:26:0a:99:03:48:b0:0c:
22:e8:0c:6d:e7:94:8e:24:1a:e4:e3:c7:b0:88:3d:33:f4:e9:
05:ae:41:b3:e9:0b:bd:36:8c:66:c4:05:05:8b:58:fb:62:1a:
82:17:7b:66:8f:5a:a9:de:e9:ac:8d:1f:5a:3c:03:c4:0c:c6:
eb:33:11:01:d7:dc:cd:5f:37:0f:de:28:51:68:9e:89:a1:a0:
e3:2b:d4:77:30:ad:2d:fc:56:87:c9:c5:fe:f3:4a:35:c2:e0:
b2:da:b8:9a:10:42:30:06:16:24:4c:1f:e3:2c:ea:08:02:c7:
24:a6:81:9b:5d:3e:c3:fa:1b:56:6b:4c:af:58:2b:26:eb:b6:
bd:17:bd:f4:c3:48:54:63:ed:18:e8:23:07:1a:9f:28:cf:a4:
ca:4c:30:73:53:32:68:40:62:37:e3:2f:44:44:3a:c5:07:df:
a3:9e:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:07 2025 by rpki-client