Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: jEpwnPVhiIVOHWvHuRxG5OFhK5uYFHfHVWEUsitP1yg=
Subject key identifier: BE:AD:7F:E6:9B:D1:AB:D8:DB:71:DC:BB:D0:86:BB:A6:78:BD:9C:A4
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 019A4E4FE34E2536DB9BE5E9BEAA23333F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 14E7
Signing time: Tue 04 Nov 2025 10:00:49 +0000
Manifest this update: Tue 04 Nov 2025 10:00:49 +0000
Manifest next update: Wed 05 Nov 2025 10:00:49 +0000
Files and hashes: 1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: xWqFsrqLz79gY9wqDmrNHNQguQy3yQbACGFu6Mlg8Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:e3:4e:25:36:db:9b:e5:e9:be:aa:23:33:3f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Nov 4 10:00:49 2025 GMT
Not After : Nov 5 10:00:49 2025 GMT
Subject: CN=bead7fe69bd1abd8db71dcbbd086bba678bd9ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:85:9b:02:d5:50:8d:71:e0:21:02:36:a2:
e9:e3:17:7d:08:cc:b2:24:82:e3:1d:ee:66:4b:3b:
f1:b3:86:29:63:04:67:71:38:53:3b:95:f9:08:69:
49:8b:1b:f8:48:a0:5f:8c:e2:0b:c9:f4:47:b9:de:
d8:5d:1d:d3:31:04:4b:b1:b1:16:5f:f0:02:81:7d:
a1:fa:e1:de:ee:41:89:19:c3:d0:97:94:fc:0e:50:
9b:9a:7e:df:93:ea:87:f6:d2:3a:5c:77:5d:16:4e:
9e:68:93:87:08:e1:45:20:e7:ff:c6:65:6b:cb:e7:
a4:88:bc:98:08:be:0d:63:27:b2:1d:cd:ab:52:62:
13:74:3c:9f:e1:18:94:8f:17:46:c0:c2:a6:73:df:
b5:12:e9:03:5d:76:ac:dd:0e:24:99:4d:75:d0:6a:
7d:9f:93:97:e7:b8:e9:58:68:e8:82:56:b4:35:6b:
20:b2:9f:7e:be:a6:35:7b:01:39:6d:f3:f0:ed:b0:
93:9c:88:9f:d1:aa:fc:0a:cc:ce:d1:25:88:16:53:
0b:6c:8a:ca:e9:8d:e3:93:37:f5:2b:ed:6e:18:e5:
16:6e:34:2b:00:02:e8:cd:b1:ff:4b:7f:8d:cf:69:
39:d2:ec:56:03:da:69:5c:83:d8:52:a8:4f:a7:32:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AD:7F:E6:9B:D1:AB:D8:DB:71:DC:BB:D0:86:BB:A6:78:BD:9C:A4
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9e:d5:f2:d1:e6:81:03:2f:98:a8:8c:48:3e:7f:c7:89:49:
2d:d5:01:35:07:76:51:16:eb:c9:16:25:8c:87:79:c6:3c:cd:
46:36:66:4c:f7:ca:d5:91:a4:6f:ad:fd:a1:a8:98:a5:d9:9a:
65:f1:ba:47:69:ad:22:d8:e6:a1:1a:f0:25:c9:9e:8f:2a:a2:
cf:ba:4d:2f:81:4f:52:f0:1f:7c:f2:c9:85:f8:21:b1:4c:f7:
45:a7:e5:91:e8:6f:66:d2:5c:08:f8:08:55:2e:dd:ab:94:c5:
c4:be:e8:6e:5f:0f:50:0c:51:ba:cf:70:c2:0b:bd:be:e1:9b:
d3:2e:c0:71:f2:d3:ee:02:d0:3b:84:e2:e3:95:cc:59:07:72:
08:da:59:23:58:ca:ae:84:20:68:19:ac:62:81:1c:e2:fc:22:
6e:f9:ac:8e:ff:1a:63:bb:d6:2e:21:13:45:9b:41:0e:f9:28:
9b:ba:b7:2b:fc:c6:5d:ad:ec:30:d3:ef:f2:bd:82:75:2f:09:
50:8b:47:cc:c8:af:2f:b9:d2:96:f3:83:82:8c:db:4c:c7:8c:
d5:8b:08:67:83:9c:f1:1f:6d:4a:3d:89:5f:64:5e:71:d2:4d:
90:56:80:03:22:fb:aa:ab:af:e3:6d:53:94:92:c6:3c:10:0e:
24:41:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:11 2025 by rpki-client