Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
File: E8xjCawwp_wBXDNEy8gIYbTFR88.mft (raw, json)
Hash identifier: 4XI6ZS+XNfc56q8T/yNv8xevle9XT2FpS1WnTwenyoI=
Subject key identifier: E4:90:E8:D1:22:E0:D9:32:1B:28:28:6F:35:A5:FC:71:B5:2F:BA:A0
Authority key identifier: 13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
Certificate issuer: /CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Certificate serial: 019A52D159645ACB07B74C867573CDB81E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 07:00:42 +0000
Manifest this update: Wed 05 Nov 2025 07:00:42 +0000
Manifest next update: Thu 06 Nov 2025 07:00:42 +0000
Files and hashes: 1: E8xjCawwp_wBXDNEy8gIYbTFR88.crl (hash: EKRlhqKE0eTiFqVWBTwfnRnqA2K5IFm5OhpjUvycsMg=)
2: jzVDE20GlCgVCg-KhJB_QzsLMCg.roa (hash: LaydqvlZJmK18FahUwbjtSgT6W86Q5gZmcNPgCbbqe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:59:64:5a:cb:07:b7:4c:86:75:73:cd:b8:1e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Validity
Not Before: Nov 5 07:00:42 2025 GMT
Not After : Nov 6 07:00:42 2025 GMT
Subject: CN=e490e8d122e0d9321b28286f35a5fc71b52fbaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:3c:5c:ae:1a:9f:43:df:bf:c3:bc:19:a7:
96:b0:0b:c3:68:2e:38:8a:8f:de:9d:67:e2:d7:3c:
aa:95:52:d7:21:8d:89:bc:1d:20:2e:14:e2:e1:32:
0c:2b:dd:bd:05:68:e0:bf:6c:e9:c8:2c:db:28:8a:
e7:77:40:17:3a:b7:01:94:ff:30:78:e7:86:ae:01:
11:2e:5b:26:3a:0a:45:92:72:9f:9e:35:db:1b:61:
0b:11:9c:de:00:95:be:f8:ac:1a:24:e8:a2:ba:51:
83:24:14:18:1d:5b:09:54:35:dd:a0:f5:93:fb:9d:
d6:86:1f:9e:4a:57:3a:0c:98:6e:c8:eb:07:8b:3a:
84:56:b3:4e:2b:aa:02:64:80:2e:6f:97:41:9c:5b:
d3:43:ab:b7:ef:af:18:3d:69:0d:ba:93:f8:1d:dd:
77:e8:0b:54:c4:b9:b1:3c:48:1f:f1:58:1d:e5:a4:
ac:0c:bb:46:8c:db:69:fe:01:37:2d:00:ae:fd:35:
4a:ac:35:ee:48:f1:6e:00:dc:2c:c5:df:d0:29:ba:
be:a1:4e:e6:01:72:cf:27:22:69:72:50:3e:b3:27:
5e:12:a1:6d:4e:36:46:e8:7d:df:fb:30:72:fe:60:
c7:47:5a:24:57:2d:99:bf:ab:ae:44:f6:7e:3f:7e:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:90:E8:D1:22:E0:D9:32:1B:28:28:6F:35:A5:FC:71:B5:2F:BA:A0
X509v3 Authority Key Identifier:
keyid:13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bf:a0:ea:8c:b5:a3:de:85:5a:1f:83:c6:7e:b5:f2:b4:4c:
db:df:93:0a:71:4d:29:56:f2:9c:b8:f2:67:e8:26:bd:9d:4b:
d6:c5:e4:66:c2:fc:89:f3:62:bc:97:93:62:9d:92:60:ef:27:
20:a8:96:d1:7d:be:51:22:a8:fa:b0:fd:cb:ba:77:c7:31:35:
af:55:7c:70:51:e5:d5:56:5b:bb:cc:00:4a:de:a5:0d:4e:02:
bb:d6:05:bf:0a:30:94:77:f4:0e:36:86:3c:1e:f3:05:25:91:
c8:f3:bc:43:44:a2:0a:7e:f9:16:6d:ae:e6:8d:65:13:41:c5:
8e:a3:83:3a:74:2f:05:2d:b8:91:45:e9:d7:fd:db:76:50:b2:
55:74:ff:e3:e9:59:71:48:da:0f:1c:e0:c5:2c:75:05:b4:9e:
3d:a3:5f:5d:06:6b:5b:43:dc:e3:db:a2:f4:7d:d7:54:ce:58:
7f:38:46:85:ca:ec:e1:b7:36:8c:d9:ea:e8:52:fe:2a:af:50:
ef:fb:89:fd:0a:8c:fc:f0:50:8e:4b:1d:54:65:44:75:40:56:
0c:c1:05:50:fa:e9:ed:9f:b4:68:ea:2f:d5:59:35:0e:23:43:
93:06:68:b6:34:8a:41:8e:a9:02:8f:8a:29:ff:86:2d:7e:0e:
9e:e8:32:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:04:36 2025 by rpki-client