Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File: E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier: b+6xoVtpuZVnsSB0juVpaevrL0GO4cRO9egG89ARlRM=
Subject key identifier: 8E:49:EE:2A:52:C0:06:73:20:A0:A7:D0:79:9F:96:38:04:81:5C:71
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer: /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial: 019A4F62BC70A193EA6AAB4E72C4BFF5576C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number: 0971
Signing time: Tue 04 Nov 2025 15:01:02 +0000
Manifest this update: Tue 04 Nov 2025 15:01:02 +0000
Manifest next update: Wed 05 Nov 2025 15:01:02 +0000
Files and hashes: 1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: wMpVYHj/snjnD42bUlnC0p3cx7+Mznsl9GNX5M5zFt4=)
2: _QgoRTMtyS5EtLyc5fzMPDI_ctA.roa (hash: zInvj3NFraNTsicxTEwbxiFyh/WcUo2wVcGwRT2Mtog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:bc:70:a1:93:ea:6a:ab:4e:72:c4:bf:f5:57:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Validity
Not Before: Nov 4 15:01:02 2025 GMT
Not After : Nov 5 15:01:02 2025 GMT
Subject: CN=8e49ee2a52c0067320a0a7d0799f963804815c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:99:f2:34:d7:92:1a:1e:9f:37:29:bd:92:
78:72:45:38:29:18:7a:c9:08:ba:70:f5:a0:3f:b8:
1f:1f:11:ef:fa:4e:d0:f5:e1:73:4d:de:db:e7:d3:
d4:b1:af:43:64:15:d5:78:b3:1c:49:21:e8:1f:8a:
77:9e:f4:24:d3:15:04:44:37:c4:07:eb:ae:ac:a6:
03:7f:55:e6:bc:41:81:3c:6d:0f:60:ff:66:72:5f:
30:e0:16:c2:75:92:3c:a4:0e:ba:11:ff:6a:0c:94:
eb:92:0d:e2:d9:be:d5:5e:d5:be:36:71:1a:ef:71:
b6:1d:01:84:e8:ce:09:4f:42:de:28:37:26:52:02:
ab:f8:4e:71:13:52:32:ef:a0:f7:a7:b6:3f:ae:cb:
0b:db:90:6d:2a:5e:9f:10:e5:f8:48:a7:e1:8f:bd:
a4:07:ed:95:22:3e:f5:88:82:b6:a7:6e:d2:0c:99:
a9:83:56:b4:a0:7a:95:13:2b:b7:59:65:34:25:aa:
9a:c2:0e:f0:3f:cd:06:1c:36:e5:0c:9f:fd:2c:7e:
99:4a:a5:9e:d2:59:6d:8f:9f:71:9a:5a:c0:b5:0e:
39:8c:a0:0f:c1:e1:5e:ae:0d:ea:42:6b:a3:61:ec:
d5:3d:9a:64:89:e5:5a:72:61:96:09:d0:9c:fe:e3:
e8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:49:EE:2A:52:C0:06:73:20:A0:A7:D0:79:9F:96:38:04:81:5C:71
X509v3 Authority Key Identifier:
keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0e:39:c7:81:c1:f7:bd:ff:da:fb:96:d2:27:9f:64:05:1c:
30:65:2d:78:15:54:af:c5:eb:1c:c2:47:4b:f6:77:1f:58:59:
10:a5:5e:4e:2a:3e:34:b8:ca:d7:cf:cf:b8:4c:a4:c8:b2:f1:
1a:bf:38:fa:c5:16:5f:a3:c0:22:8c:79:b4:d7:c7:b6:d0:f2:
80:76:98:e6:00:89:0b:61:b7:19:04:b5:51:e2:bf:d8:13:d7:
a7:fd:36:3c:30:d7:05:f0:c0:50:a9:25:1f:9a:00:02:31:6c:
ad:0a:89:b8:ba:df:a9:19:6d:56:06:9e:97:e4:92:9b:e6:a1:
46:a0:e2:20:e8:6f:51:0d:f7:5e:e5:44:42:80:d8:a8:c1:11:
b0:aa:dc:e8:ad:48:94:12:3e:a2:ca:45:07:14:6b:5d:34:b6:
3e:d7:33:fc:78:30:c7:4b:a1:38:fd:3e:b4:6e:21:d1:c9:43:
e6:55:cc:4e:4c:5c:b8:25:44:40:0e:79:03:a0:1c:21:6d:be:
2c:0d:4c:1b:c8:24:38:c7:ac:09:9f:34:e0:4c:dd:27:42:cc:
de:54:47:b0:14:f6:84:91:d3:4f:cc:56:86:29:6e:f2:8d:90:
3d:03:20:0c:72:04:73:83:e4:cb:22:31:13:f1:87:83:1c:d2:
a0:48:c2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:17 2025 by rpki-client