Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier: 17m0ex76Iz6q9Hg5B2GChwoJ2HWlBC/G02FxwPYdTH8=
Subject key identifier: D6:C2:60:4E:22:59:00:A4:50:E4:26:9A:B3:4E:0B:CF:51:AF:67:23
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial: 019A4D744C4FEF46623FD83CA4F44CC37550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:58 +0000
Manifest this update: Tue 04 Nov 2025 06:00:58 +0000
Manifest next update: Wed 05 Nov 2025 06:00:58 +0000
Files and hashes: 1: 0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa (hash: X8YDNwD9PGK+IazmDttNRD5zMBvc8bSCuQ7N4xzf1ko=)
2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: py/q8hEfThCPNnv9MwcvjqR+fbO8Q2Urf4A8qJV05fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:4c:4f:ef:46:62:3f:d8:3c:a4:f4:4c:c3:75:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Validity
Not Before: Nov 4 06:00:58 2025 GMT
Not After : Nov 5 06:00:58 2025 GMT
Subject: CN=d6c2604e225900a450e4269ab34e0bcf51af6723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:4c:dd:98:00:ed:d1:a4:3a:da:71:01:30:
04:84:f7:18:50:0e:fb:6d:29:37:d3:e2:99:e8:2f:
7d:04:35:fb:d0:bf:f1:ec:92:46:47:af:01:d1:b4:
f9:8b:52:c6:0d:f0:7d:2d:65:a0:df:55:86:e5:5a:
5c:23:40:8f:46:44:20:ed:03:16:ca:05:e4:37:be:
28:0e:ef:c8:92:bd:20:9e:24:31:d1:70:e3:e0:43:
f4:ab:d9:d5:45:b7:d8:b7:94:83:5f:73:97:3b:98:
78:25:77:77:dc:c3:db:d6:17:5d:76:d0:ed:17:96:
f5:95:c9:33:85:ea:33:12:e0:8c:49:72:63:54:b7:
1b:e7:81:49:14:4a:b1:d3:e3:e5:dc:d5:1b:d6:c0:
c8:16:a3:08:0f:e3:15:2c:34:24:56:09:c3:a2:aa:
5d:ef:3f:c0:b7:27:8e:17:c3:48:2d:68:e3:07:f3:
22:14:b6:19:35:3c:8b:77:41:d8:42:8e:1d:c3:74:
d2:82:2d:c6:28:c6:a3:6e:28:3f:32:a1:d8:3b:91:
ce:3b:5f:7d:54:ef:fa:2e:71:d0:a4:68:63:9c:7c:
e8:96:4e:1b:15:69:e6:84:88:91:a7:c5:fd:ec:61:
7e:ee:70:3b:6d:cb:1c:80:c9:41:b0:55:05:a1:43:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C2:60:4E:22:59:00:A4:50:E4:26:9A:B3:4E:0B:CF:51:AF:67:23
X509v3 Authority Key Identifier:
keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:70:1a:4c:78:43:1d:c1:4f:10:d8:b7:bd:a6:93:94:8b:f0:
22:8f:70:f9:d7:aa:1c:73:13:a3:18:fc:03:51:e2:69:32:c8:
12:ce:b3:13:95:0e:96:54:a1:47:03:c6:7f:e8:25:91:35:1d:
9e:dc:70:de:c5:37:74:7d:a4:d3:00:45:fc:50:65:c8:e7:3f:
19:c8:22:3b:7c:0d:dd:8b:07:0f:00:b0:52:2a:e5:39:8a:c4:
40:4d:c0:91:42:21:10:ed:ba:e5:d4:a5:16:a2:f3:0f:82:e7:
e4:42:73:e6:19:60:75:14:0b:22:ab:93:b9:eb:b9:c0:b3:28:
5b:d4:00:a9:23:01:ee:b6:12:61:1b:59:23:02:bd:e6:0f:bd:
ed:9a:17:e3:69:28:f6:c0:06:bc:3b:0b:40:f2:cf:6c:fb:c5:
c4:fe:9e:15:29:9f:52:24:28:ad:49:5e:a7:c5:9d:00:f3:04:
51:92:15:e8:23:61:f0:49:2c:a3:9b:c4:36:de:03:83:68:de:
e9:52:a5:9d:e6:d9:09:ad:a4:b0:60:00:29:1d:17:4c:e6:17:
b2:11:fe:87:06:49:a2:e1:12:94:eb:c9:89:13:4d:b9:8f:97:
d3:21:60:71:47:c1:3b:f3:02:2a:90:be:67:cc:41:a9:18:98:
cb:c3:ad:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:25 2025 by rpki-client