Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json)
Hash identifier: qBjp1NOnsxChWdk/9xEDuRqatW5pYjm94MXlPpaTsPg=
Subject key identifier: 10:BE:24:1C:0E:2F:D0:F6:27:9F:A3:74:F3:2B:1E:E5:02:1D:DC:4F
Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Certificate serial: 019A4D73F0AF7DB15C3D9DBABBF365CA4D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
Manifest number: 0D4F
Signing time: Tue 04 Nov 2025 06:00:35 +0000
Manifest this update: Tue 04 Nov 2025 06:00:35 +0000
Manifest next update: Wed 05 Nov 2025 06:00:35 +0000
Files and hashes: 1: 38mEm2F8Yjh1FOnrSxxmmsrIhfw.roa (hash: UA6RTPbLgtEACOSSNTD3WLGlqG06YwLEPzk3fCMKgmQ=)
2: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: MTRtUKJ/QDmVLzPpJciijFbN3CqVwHmH2K02fzjKU0E=)
3: lkxfkXJeUwS4tf9hwfUaHviGSgg.roa (hash: MB/FOS9D0/N7sc26YuesIdJ9X16AAYgiGD6hIoBNyjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f0:af:7d:b1:5c:3d:9d:ba:bb:f3:65:ca:4d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Validity
Not Before: Nov 4 06:00:35 2025 GMT
Not After : Nov 5 06:00:35 2025 GMT
Subject: CN=10be241c0e2fd0f6279fa374f32b1ee5021ddc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:5d:80:e5:40:4c:92:84:54:6a:ba:65:c1:
6c:74:68:96:01:4a:4f:9a:85:71:c7:ed:74:34:54:
be:97:37:51:c7:40:37:f6:23:d3:64:3a:f7:81:a0:
fa:dc:bc:ab:1f:b4:9e:0f:92:84:10:54:97:a3:ba:
5d:bb:7f:6b:17:c3:2c:b1:b2:ee:5b:41:9f:a0:8d:
d6:61:75:69:16:b7:3c:de:ce:52:5e:22:d9:5b:3f:
c0:54:5b:37:14:5a:47:cc:77:fd:de:23:53:d3:17:
58:e9:67:c3:3f:65:88:16:2b:2f:4c:33:d3:82:96:
b2:ad:80:75:2a:18:cd:53:e0:38:7c:50:a3:f9:93:
6e:f8:8e:13:74:8b:98:bd:28:2c:91:b4:af:ab:43:
8b:af:6b:45:4c:34:f8:eb:99:be:60:36:30:55:22:
d2:b3:d4:6e:ff:95:63:5a:ea:50:42:9d:93:21:f6:
92:42:22:cd:56:7c:4a:eb:63:90:1d:4f:3a:c0:df:
79:95:ad:5b:8f:8f:68:3c:e8:ab:a4:48:1f:f1:4b:
5f:57:a9:6c:09:f4:b2:a1:49:73:2e:4b:b2:a9:26:
a4:c6:27:b7:56:b9:e4:2a:a2:bd:d1:d0:bf:1c:81:
1c:3a:40:f9:59:6c:45:9e:a2:5d:6d:0c:6e:a6:ca:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BE:24:1C:0E:2F:D0:F6:27:9F:A3:74:F3:2B:1E:E5:02:1D:DC:4F
X509v3 Authority Key Identifier:
keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d5:c8:58:4e:b5:56:42:c6:a9:b7:60:79:9e:ed:81:53:50:
fa:a4:54:80:69:a7:13:0d:77:ba:55:42:e7:c3:70:e8:26:10:
dd:b6:5c:cd:fc:ce:a7:04:91:96:80:da:d1:78:4c:8c:7c:11:
2f:46:c0:ee:8a:22:86:87:d3:32:af:39:3b:10:b9:0f:02:88:
f6:f7:3d:a1:6f:74:49:54:5a:a4:4b:2b:e4:f3:82:e8:12:df:
4a:c8:7b:b9:c0:b6:54:f8:54:fa:b0:f4:b2:29:97:34:40:87:
32:b3:10:85:2d:fa:12:8f:a1:61:95:46:35:e7:b4:fa:23:70:
03:5e:de:9a:30:cb:1a:c3:12:3f:78:fb:ca:96:3c:4f:12:29:
06:4c:c6:40:29:d2:14:80:1a:0d:4e:53:ec:73:a0:3e:7a:39:
17:de:a9:aa:9e:b2:a4:9d:af:a3:ee:69:43:a9:5c:30:2f:da:
12:6c:bd:eb:95:1d:0e:85:99:d7:ea:f8:ec:cb:e3:9d:cb:56:
17:5f:b4:39:37:3f:41:f7:ef:90:5a:72:3f:8b:83:f3:13:e3:
b3:ca:e3:ba:75:19:d9:69:7c:d5:00:89:30:7e:fe:cb:87:75:
9d:d7:eb:ef:88:11:d0:14:d7:b6:9a:61:56:ec:fc:89:0c:26:
4d:42:09:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc/CvfbFcPZ26u/Nlyk0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDgwNDJhMjgwMTVkMjdmMzViMWYxYWI3MzYxMWU4NTEx
YjY5MjMwHhcNMjUxMTA0MDYwMDM1WhcNMjUxMTA1MDYwMDM1WjAzMTEwLwYDVQQD
EygxMGJlMjQxYzBlMmZkMGY2Mjc5ZmEzNzRmMzJiMWVlNTAyMWRkYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iVdgOVATJKEVGq6ZcFsdGiWAUpP
moVxx+10NFS+lzdRx0A39iPTZDr3gaD63LyrH7SeD5KEEFSXo7pdu39rF8MssbLu
W0GfoI3WYXVpFrc83s5SXiLZWz/AVFs3FFpHzHf93iNT0xdY6WfDP2WIFisvTDPT
gpayrYB1KhjNU+A4fFCj+ZNu+I4TdIuYvSgskbSvq0OLr2tFTDT465m+YDYwVSLS
s9Ru/5VjWupQQp2TIfaSQiLNVnxK62OQHU86wN95la1bj49oPOirpEgf8UtfV6ls
CfSyoUlzLkuyqSakxie3VrnkKqK90dC/HIEcOkD5WWxFnqJdbQxupsqULQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBC+JBwOL9D2J5+jdPMrHuUCHdxPMB8GA1UdIwQY
MBaAFBPYBCooAV0n81sfGrc2EehRG2kjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgt
YTQyOTZhZDk4NjM1LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9kN2YyZDgtNDZjZC00MWZkLTgwMDgtYTQyOTZhZDk4NjM1
LzEvRTlnRUtpZ0JYU2Z6V3g4YXR6WVI2RkViYVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9XIWE61
VkLGqbdgeZ7tgVNQ+qRUgGmnEw13ulVC58Nw6CYQ3bZczfzOpwSRloDa0XhMjHwR
L0bA7ooihofTMq85OxC5DwKI9vc9oW90SVRapEsr5POC6BLfSsh7ucC2VPhU+rD0
simXNECHMrMQhS36Eo+hYZVGNee0+iNwA17emjDLGsMSP3j7ypY8TxIpBkzGQCnS
FIAaDU5T7HOgPno5F96pqp6ypJ2vo+5pQ6lcMC/aEmy965UdDoWZ1+r47MvjnctW
F1+0OTc/QffvkFpyP4uD8xPjs8rjunUZ2Wl81QCJMH7+y4d1ndfr74gR0BTXtpph
Vuz8iQwmTUIJPQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:58 2025 by rpki-client