Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
File: E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json)
Hash identifier: JAwePgcA+8je/biF9vtS2vR7xiTJ35KnoGnFNENrjMk=
Subject key identifier: E8:08:47:B9:A6:B4:AA:23:AF:ED:B0:07:BA:84:0C:15:4B:A9:89:39
Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
Certificate issuer: /CN=13701ebe06799de0969899205150e532deffe7b5
Certificate serial: 019A556448DDCF8B9EC47ECD1B0FBD03F60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
Manifest number: 0339
Signing time: Wed 05 Nov 2025 19:00:26 +0000
Manifest this update: Wed 05 Nov 2025 19:00:26 +0000
Manifest next update: Thu 06 Nov 2025 19:00:26 +0000
Files and hashes: 1: 8gVvFm91f0RDawryW7l9gKrlwps.roa (hash: QofxAMe0K3ECuRtwFP3oD9RJD1otx3XwH2YFtNZT6bY=)
2: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: k1JKvfFpCfZjT1URui5xEOSL+fD1X9lY250CwGUMv3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:48:dd:cf:8b:9e:c4:7e:cd:1b:0f:bd:03:f6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13701ebe06799de0969899205150e532deffe7b5
Validity
Not Before: Nov 5 19:00:26 2025 GMT
Not After : Nov 6 19:00:26 2025 GMT
Subject: CN=e80847b9a6b4aa23afedb007ba840c154ba98939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:e7:ee:79:9c:d8:a4:e5:f4:02:e8:f3:f8:
e2:17:ce:c9:89:2d:52:e9:54:93:1c:d7:1a:ba:3d:
67:54:a2:65:a6:41:e6:2f:4d:8a:df:02:c4:7b:7f:
5c:c7:a8:28:07:2f:6a:d0:f1:54:d1:db:c0:da:00:
04:50:1f:f2:60:3e:6e:df:54:81:17:78:23:87:98:
36:22:e2:f1:bf:0c:9a:8b:b8:a1:04:26:2d:1b:90:
63:16:1a:a2:f6:97:72:14:d5:aa:42:b3:60:3c:e6:
53:af:d5:9e:90:4d:f7:c7:86:04:70:0c:dd:90:b1:
b9:9f:0c:38:b3:1a:ec:42:50:71:6f:b4:0a:b1:bd:
12:46:d2:77:51:f4:91:ab:47:7b:20:00:b1:9f:af:
d8:8c:66:0c:79:eb:7a:05:71:4e:2a:2b:dd:5e:52:
3d:56:80:01:f1:14:8c:83:4b:84:73:fc:20:8f:93:
8f:d8:8d:55:13:0c:3c:e2:86:7d:d1:38:a1:f4:60:
00:64:1d:3c:49:22:0e:85:2e:9e:eb:73:1f:bb:8a:
25:b8:5d:62:d7:6d:aa:30:53:3f:8f:7d:d4:f3:e8:
4d:90:a1:8c:af:0c:12:3f:75:d0:5f:09:10:94:85:
50:9a:69:21:f6:1d:ba:7f:b5:4d:e8:c4:57:06:7d:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:08:47:B9:A6:B4:AA:23:AF:ED:B0:07:BA:84:0C:15:4B:A9:89:39
X509v3 Authority Key Identifier:
keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:15:af:78:55:e6:91:fc:82:c9:7c:eb:b2:a8:95:5e:0a:a1:
d4:a8:cf:93:df:f4:87:a1:4c:24:3a:24:13:cb:c8:fb:99:b0:
fa:c7:97:2e:85:e5:6f:28:9b:0c:65:76:0d:98:44:ab:f9:ba:
bd:ce:00:53:91:78:31:cf:11:95:e1:0c:4d:7b:3e:29:19:b4:
db:d4:a2:59:a9:74:a4:8b:a2:b6:dc:5c:28:d2:e0:d1:0d:67:
ec:5e:b5:80:9b:ad:07:3f:b5:1c:f4:b7:8e:04:5b:55:ac:af:
95:42:9d:74:73:b1:7a:5b:b2:63:05:f1:ca:63:02:9f:8f:95:
1d:18:08:37:96:9e:e8:1f:66:3d:74:3d:bf:7e:ff:4f:1e:42:
a3:21:3a:e7:79:ee:45:ed:9d:b7:f2:1a:71:6a:8e:a1:59:6b:
13:58:df:a8:cf:78:c4:9d:d4:eb:62:99:c6:01:e5:25:b3:c1:
4d:df:ac:97:3b:60:38:7e:26:a2:d0:24:81:99:78:8f:81:a2:
77:69:48:50:ec:74:92:15:fb:2d:9a:b9:74:1f:51:f0:76:7c:
6a:14:bf:b1:5f:9a:aa:5f:84:79:58:26:2e:ed:f8:51:08:7e:
ca:06:86:5e:3a:f7:8f:63:23:ab:23:b6:cf:a6:63:09:b5:44:
28:3d:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:54:41 2025 by rpki-client