Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
File: E7myHACB0jxKIfYKCEp1y1-VvqI.mft (raw, json)
Hash identifier: nOdtxl+1i8JiE/QJVAPQHmvhYm1U7B0eqYOuNfwnN1Q=
Subject key identifier: F9:A1:F9:8C:9C:74:1A:2D:51:06:5F:78:55:C1:30:48:D3:87:55:71
Authority key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
Certificate issuer: /CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Certificate serial: 019A50E30FDA3AA1448D73179A7B6DD9D9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
Manifest number: 0841
Signing time: Tue 04 Nov 2025 22:00:49 +0000
Manifest this update: Tue 04 Nov 2025 22:00:49 +0000
Manifest next update: Wed 05 Nov 2025 22:00:49 +0000
Files and hashes: 1: 9Z1MbiRMYxp2gP8MxCFrNvXKHOQ.roa (hash: VEHI4wOUfy63wDjHbpWMSX4O+o3FhB3BTr504lTLiwE=)
2: E7myHACB0jxKIfYKCEp1y1-VvqI.crl (hash: LWv520mzXzettnl5lZc85BMk+/GG5+e7FyJxUKblNWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:0f:da:3a:a1:44:8d:73:17:9a:7b:6d:d9:d9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Validity
Not Before: Nov 4 22:00:49 2025 GMT
Not After : Nov 5 22:00:49 2025 GMT
Subject: CN=f9a1f98c9c741a2d51065f7855c13048d3875571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:e9:ea:0d:85:6c:32:e2:7a:48:b8:44:5a:
9c:6b:0a:d7:af:67:25:6b:5e:4a:73:be:7e:f9:b3:
a9:45:30:be:0a:58:0a:fe:d3:e7:09:a1:af:75:eb:
48:c5:02:e5:f1:b8:42:13:7a:e9:3e:93:c5:86:79:
57:cd:72:35:f9:77:23:89:dc:0c:62:9b:1a:05:3d:
a9:50:2a:38:0b:1e:7c:a1:04:50:53:fd:a6:f4:56:
71:7b:8a:37:e1:52:2f:f0:56:f9:bc:47:e1:ee:bf:
d9:07:3b:af:e3:2f:9d:05:1b:47:c6:bd:66:cf:1e:
57:53:cf:bb:91:e8:95:27:e4:ca:5d:bd:aa:b0:c0:
0a:40:f5:73:a6:5d:eb:ea:da:e5:42:c4:b8:0d:b2:
b3:1e:1a:b0:55:7b:53:04:71:ae:7a:ee:c7:df:70:
9f:4a:41:9e:87:75:9f:e3:eb:a4:47:31:ef:ca:35:
65:e9:98:1f:15:97:79:11:28:4b:c6:4b:d3:0b:6d:
0e:ad:e1:d5:c3:93:ec:62:18:dc:c6:c2:4c:69:30:
b5:f6:e2:dc:23:6d:69:e0:c5:f9:e8:50:9b:43:03:
f4:04:a5:8f:66:ee:70:aa:ef:dd:cd:61:05:47:de:
31:56:ec:7a:8c:9d:11:67:1e:87:6f:42:58:8b:6c:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A1:F9:8C:9C:74:1A:2D:51:06:5F:78:55:C1:30:48:D3:87:55:71
X509v3 Authority Key Identifier:
keyid:13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ac:71:94:4f:b8:d3:51:12:41:cc:26:cd:bd:1f:27:df:c8:
88:df:ab:dc:25:81:c4:61:d1:d8:d7:79:b3:1d:9a:6f:23:23:
aa:4c:ab:23:d5:11:af:ad:93:eb:5e:a6:6d:2c:68:b7:5c:44:
03:11:b4:e6:28:a2:5a:86:97:41:60:97:ab:6f:54:9d:1e:0a:
7e:9b:77:1c:49:fd:22:54:c3:dd:a9:16:4a:3b:1a:49:b1:f8:
9a:66:f1:03:65:d7:76:5e:a7:51:9c:3e:5c:f3:11:7c:30:2f:
09:1f:f4:c6:85:f9:8b:13:c9:02:88:82:1e:48:52:bb:f1:52:
a5:36:15:70:8d:17:45:cb:4b:0e:33:29:9c:d8:25:ec:c2:da:
e9:8b:b5:3c:02:a8:94:b0:5d:01:c9:eb:a4:74:ac:51:cf:bf:
ff:07:f5:e4:c7:1f:ed:f7:64:c7:57:a0:9c:48:a7:83:a9:0e:
1d:f1:2d:e0:b1:6c:ff:9a:46:0d:f8:8d:94:f4:cb:97:9f:3c:
1c:e6:59:ed:66:d5:8d:29:10:66:1e:4e:85:7e:28:04:54:b2:
8a:e8:06:c4:6f:12:3d:d6:37:d1:b0:ee:1c:3e:e3:c2:6d:75:
20:13:7a:cd:03:8b:37:73:b6:db:ee:a1:db:0d:7b:9b:29:b1:
ba:b2:d6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:55:08 2025 by rpki-client