Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
File: e9g2worwknoDVYYlrt9v14ekkFw.mft (raw, json)
Hash identifier: 1Suj3uapraiAW6YqCjnsaxaep3H9sW/s0W07qn9Pndw=
Subject key identifier: 26:41:8A:62:0C:66:41:53:C1:0D:50:3F:94:41:F0:2B:6D:93:21:DA
Authority key identifier: 7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C
Certificate issuer: /CN=7bd836c28af0927a03558625aedf6fd787a4905c
Certificate serial: 019A4EF46B05B02EB88E78B01E0C455DC7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
Manifest number: 1647
Signing time: Tue 04 Nov 2025 13:00:32 +0000
Manifest this update: Tue 04 Nov 2025 13:00:32 +0000
Manifest next update: Wed 05 Nov 2025 13:00:32 +0000
Files and hashes: 1: e9g2worwknoDVYYlrt9v14ekkFw.crl (hash: y3XWzUXz8mV5xiasA0lAaTuASQrjORAYGhFzEoITRFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:6b:05:b0:2e:b8:8e:78:b0:1e:0c:45:5d:c7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd836c28af0927a03558625aedf6fd787a4905c
Validity
Not Before: Nov 4 13:00:32 2025 GMT
Not After : Nov 5 13:00:32 2025 GMT
Subject: CN=26418a620c664153c10d503f9441f02b6d9321da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:79:76:ec:f0:8e:64:3b:f9:54:dc:40:c8:
cb:f6:0a:65:e8:30:15:28:ad:a2:42:4d:a9:da:dc:
9d:a0:64:dd:b3:75:9c:fd:8b:fe:5d:b5:84:57:ff:
ae:b5:8e:50:ba:d1:d1:f2:1b:5a:99:ff:73:4c:8c:
e8:dc:15:67:a2:3b:e1:73:d8:cf:5c:30:f8:67:19:
a0:55:1f:b2:12:4d:50:c8:ff:43:7d:ea:91:de:32:
89:5a:9f:e2:40:9a:e7:17:5a:4b:22:82:9a:1c:ec:
5e:06:39:c0:37:12:3e:b3:bd:ee:15:4b:02:70:36:
7c:43:38:35:7b:fa:9f:f2:d3:49:94:2e:e8:41:0b:
d7:95:64:02:82:c6:93:cd:0b:16:dd:83:83:b2:4a:
b0:e1:80:14:a5:90:73:1f:e3:a2:21:16:d0:35:65:
9a:7d:8b:3a:36:b8:e7:39:3a:83:e6:13:6b:4b:ac:
ca:53:89:22:f0:f4:97:03:2b:0a:79:b9:3a:3c:63:
f7:2d:11:fc:aa:92:26:5d:38:03:65:07:9e:81:c3:
9c:71:b1:b0:9d:b2:4d:86:31:09:e9:9b:dc:5e:9c:
a5:f0:e8:37:45:3d:ed:88:8b:cf:cd:2a:2d:c6:03:
c1:ca:ed:08:a5:5a:e4:e7:8f:e7:00:ae:89:95:35:
aa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:41:8A:62:0C:66:41:53:C1:0D:50:3F:94:41:F0:2B:6D:93:21:DA
X509v3 Authority Key Identifier:
keyid:7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:84:81:dd:53:c4:49:58:f8:ef:0f:89:0a:08:bc:86:b7:b1:
dc:83:db:7b:c7:4e:69:ce:d6:c9:3c:21:7e:07:c5:50:ed:72:
a6:30:9a:f5:92:cf:b7:da:f5:3f:9e:01:07:be:e0:66:40:5b:
51:1f:95:28:da:ed:c6:0c:e9:58:e3:61:1d:db:ab:c2:cf:f7:
7a:ff:68:f4:fe:cc:ab:f2:be:2a:99:aa:46:20:c4:0e:56:a1:
b7:4b:95:eb:be:13:21:ff:8d:11:c7:2e:1d:38:f3:d5:ee:ca:
2f:90:0b:a6:aa:73:fb:b8:1d:0d:14:28:91:4b:1d:29:a0:25:
3f:ce:fb:0d:85:b5:10:30:04:82:35:0c:51:90:87:31:83:1b:
0c:5b:b9:a7:74:e1:e2:42:df:5b:e3:91:a6:2d:24:b8:dd:e5:
71:0b:b8:62:91:60:08:b6:85:63:90:0c:59:a4:27:36:d5:ce:
7d:51:2d:69:0e:5d:79:84:36:c8:e3:37:1b:9a:d6:82:f3:21:
6d:03:aa:f7:d5:c2:fe:a4:7a:78:da:5b:9b:d1:a4:fa:ae:9e:
69:f6:ae:1f:77:09:47:69:a1:f2:f7:e4:0c:1b:c7:da:08:82:
a8:c0:f1:54:5f:94:97:17:45:d9:92:2c:16:0a:77:dd:ac:48:
97:5c:24:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:58 2025 by rpki-client