Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
File: E-XdFL3pMjctyLWTLMVNYI276Qg.mft (raw, json)
Hash identifier: 2p039SAsbXnRAzPrBvZrgW3blfITQKl8/0GQATzqUpQ=
Subject key identifier: 7A:A4:CD:4A:C9:4A:14:43:63:5E:E1:CA:82:91:E3:CC:2A:F5:83:75
Authority key identifier: 13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
Certificate issuer: /CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Certificate serial: 019A4E18908EB519985458615A4251DE85CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
Manifest number: 02FC
Signing time: Tue 04 Nov 2025 09:00:23 +0000
Manifest this update: Tue 04 Nov 2025 09:00:23 +0000
Manifest next update: Wed 05 Nov 2025 09:00:23 +0000
Files and hashes: 1: 12_j47AEFlNkQmnvJ6lQS6k9OJM.roa (hash: QL5MIkOPhYomrHDRf0wI6//DVHKZ3F+ShGeX+xkxEXo=)
2: E-XdFL3pMjctyLWTLMVNYI276Qg.crl (hash: 3pLTPzxL2pm5uECnQyj2sqkHiFM3n4r3PfknCarAki8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:90:8e:b5:19:98:54:58:61:5a:42:51:de:85:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Validity
Not Before: Nov 4 09:00:23 2025 GMT
Not After : Nov 5 09:00:23 2025 GMT
Subject: CN=7aa4cd4ac94a1443635ee1ca8291e3cc2af58375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:d4:6a:ce:ef:58:c5:e8:b1:b8:5c:9f:bc:
99:db:18:1c:21:ec:ef:d5:eb:73:8d:aa:d6:b6:79:
99:db:9a:cc:2e:e4:9f:6d:9d:8e:55:79:69:3d:2e:
65:72:14:10:8d:ee:80:d2:38:c7:89:be:86:a5:69:
b2:4c:45:f6:2a:fc:dc:bb:e3:99:ba:67:81:10:40:
7e:c1:09:ab:1e:88:b1:33:97:da:d5:51:a9:79:9e:
54:e0:ee:00:8d:f2:a1:d4:6a:fb:e9:48:a4:1f:f9:
39:88:83:49:c0:ce:72:a2:db:85:05:95:96:1f:bb:
06:8f:cb:b4:d3:f4:1c:cd:6a:7a:3f:bd:4c:70:eb:
e5:89:7a:d1:ba:58:5d:05:24:65:51:90:41:e2:9d:
4b:69:f4:9a:48:ca:69:1a:77:e0:a0:95:17:a2:a3:
43:3f:3a:e3:38:6d:1e:2a:53:3f:ec:f8:44:4d:15:
6b:d0:e5:c6:c9:36:d6:a5:0a:f3:90:c0:4b:17:0d:
c5:12:3d:ee:64:5e:cb:28:e7:53:53:da:d8:a4:86:
87:7a:ef:3a:6e:75:9e:c3:27:4e:d8:ac:83:2f:39:
ff:6e:72:71:d8:c7:8e:c8:71:e6:33:74:38:68:b7:
e5:63:8e:2c:b1:65:8a:5b:d9:95:fa:c0:1c:38:18:
2a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A4:CD:4A:C9:4A:14:43:63:5E:E1:CA:82:91:E3:CC:2A:F5:83:75
X509v3 Authority Key Identifier:
keyid:13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d2:ea:84:c6:63:07:2b:64:66:e8:ef:28:2e:79:f8:54:fd:
77:67:9b:96:a3:9b:0d:00:60:d4:d8:70:ce:f9:1b:02:96:ab:
b5:28:01:50:eb:58:8e:39:6e:7e:06:92:16:34:7d:62:1a:e0:
8f:c6:68:39:3b:87:12:8e:8e:fa:10:ad:28:88:f3:d7:db:8c:
92:83:4d:1b:82:07:c7:88:61:41:5d:df:f9:56:61:57:da:44:
4e:05:9d:e4:a0:c1:fe:cd:b4:f0:53:6e:d9:3a:34:2d:98:ce:
fe:02:0f:7c:eb:96:29:6c:f3:c1:1d:d5:c1:8f:64:91:54:37:
4e:5e:ff:50:38:c5:3d:ef:ad:4e:0d:96:5d:4b:2a:a8:dc:a6:
11:f3:3e:9b:1f:8a:21:a3:fd:3d:80:b5:6e:79:a9:f2:46:5d:
2a:a8:e1:4f:4a:27:a6:9f:55:67:65:1a:84:33:40:88:04:22:
7a:3b:ec:9e:4a:fd:0e:36:7b:a3:70:64:de:93:3a:09:05:96:
d8:48:d8:e9:a3:22:95:6c:5d:69:4f:c7:f5:c0:7d:da:70:61:
c3:a7:4a:7b:b7:22:01:16:ff:24:b1:2c:4c:cc:70:46:cb:b6:
4b:1b:84:50:fa:8b:be:50:9a:4d:ac:5a:a4:90:ec:59:81:a8:
fc:d1:71:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:07 2025 by rpki-client