Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
File: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft (raw, json)
Hash identifier: absLcKspIlmLo7VR/ZniZfXGXy2sll/OjfSBHjHVQho=
Subject key identifier: 2E:17:05:6E:D3:9C:0D:5E:2B:73:0B:FC:2A:70:15:53:20:4A:AC:03
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Certificate issuer: /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial: 019A4F62AC2A07EF2D3D1E72C50696B60B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 15:00:57 +0000
Manifest this update: Tue 04 Nov 2025 15:00:57 +0000
Manifest next update: Wed 05 Nov 2025 15:00:57 +0000
Files and hashes: 1: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl (hash: /QrfQ/YBCtIswy353jTuYerxXxrKR/ktJ/j/UPd0Zfs=)
2: dovIL-gTzJ_aoQv0YqdSPue-W8c.roa (hash: xvPlQMVt6KADuNdSrMZISm2hi7tJLKf4OAcoc3dyLHM=)
3: eG_gGxLivr2ewefCZXKvl9LEIQ4.roa (hash: 4AFKJ4zK1Zt8UICDrX7yj7rG6ous3rW3n9Muuzhoyfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:ac:2a:07:ef:2d:3d:1e:72:c5:06:96:b6:0b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Validity
Not Before: Nov 4 15:00:57 2025 GMT
Not After : Nov 5 15:00:57 2025 GMT
Subject: CN=2e17056ed39c0d5e2b730bfc2a701553204aac03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:e6:ac:7b:3e:5e:7d:17:9a:7f:2b:e4:48:
3a:ce:c4:4c:d3:d2:39:16:b0:5e:60:ac:d5:be:6c:
87:21:ad:71:ec:3f:fb:05:3e:34:ac:3a:26:71:30:
fe:2f:3c:30:22:48:a9:11:e4:a1:61:e2:45:ce:2c:
de:4c:bc:a3:1e:4e:8f:8c:d4:be:b6:f7:a6:f7:0c:
fa:8b:cf:e2:ec:41:47:ad:03:21:09:d6:ac:57:14:
c0:58:d3:d1:d9:9f:20:2a:ff:df:66:b4:02:cf:6c:
3e:0c:aa:ab:fe:be:d2:cc:75:76:75:46:5b:f6:52:
65:ff:a7:95:f2:fd:cf:eb:b8:5a:0a:4c:9d:fd:f4:
d4:2e:20:8c:8e:15:d9:5d:21:9e:6a:83:b8:90:57:
43:9e:ce:06:34:26:c2:b3:6f:e7:81:fa:b9:80:93:
29:8a:eb:b2:f3:c3:9f:a1:89:a7:a9:9c:68:e3:59:
09:7d:80:c8:44:45:19:f4:cd:2d:3a:49:93:1a:7d:
1e:d5:44:02:6d:5c:3d:df:50:76:6b:35:6f:41:81:
ab:a1:35:fd:52:3a:93:c1:f7:7b:b4:32:71:51:19:
d4:d9:ce:36:79:21:d8:ca:af:ea:1d:64:3d:af:3f:
96:c8:85:aa:20:cd:c7:f2:38:2c:d8:5b:89:af:ee:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:17:05:6E:D3:9C:0D:5E:2B:73:0B:FC:2A:70:15:53:20:4A:AC:03
X509v3 Authority Key Identifier:
keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:26:56:2f:61:a4:c3:96:87:6d:5f:82:15:d7:55:79:f4:2d:
5a:10:bc:f7:e0:03:5c:e3:92:8a:bf:b5:db:8e:15:34:c6:79:
08:0e:65:bb:d2:0f:0f:57:d1:fa:60:71:af:af:76:34:85:f9:
0e:89:48:0f:f8:a1:25:7f:18:15:5a:56:c9:17:ad:a9:08:4d:
c7:28:86:be:aa:55:8c:eb:d5:cc:0e:0a:7e:d9:9a:a2:be:01:
f8:37:d2:1f:de:70:60:f8:7c:f5:e0:e0:72:ae:82:ee:3e:3e:
d6:cb:0e:a7:a1:0e:a9:06:8f:35:02:83:22:2e:30:9f:3d:f7:
ae:2d:9a:2f:63:ba:0a:dd:1a:bb:63:31:10:c6:f4:21:72:9e:
25:8b:6e:45:8a:04:57:86:f0:c8:24:08:13:a5:65:0b:a6:f0:
41:cf:67:b2:28:30:1b:b9:cb:94:cd:92:47:08:f0:2b:35:20:
9d:70:51:dd:e5:a4:fa:42:e0:ee:11:62:6a:53:01:1d:fa:a4:
d1:6f:7a:18:26:29:c2:94:d7:5e:e5:2f:10:27:62:7c:38:b3:
26:14:60:0f:bc:56:6c:ce:46:b6:80:fd:ce:d5:38:02:1e:5b:
5e:d3:0e:9b:b7:59:a0:cc:f0:65:47:ac:a5:e9:4d:12:ad:61:
c3:c2:60:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:42 2025 by rpki-client