Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: K4gUt+6/oXibs7NYcf/nzxmvkMjCVva+I1kNgG+bkv8=
Subject key identifier: AF:DF:DA:A0:E9:C3:14:58:7D:74:E3:75:37:6E:72:80:7F:DA:7F:B8
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 019A4D746D6108CF4F40F5FC5536D9004366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0DA1
Signing time: Tue 04 Nov 2025 06:01:06 +0000
Manifest this update: Tue 04 Nov 2025 06:01:06 +0000
Manifest next update: Wed 05 Nov 2025 06:01:06 +0000
Files and hashes: 1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: uGiaG2Cx8LgqbG19UulGDBNeb/upzqH9Zpy/WfjfexI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:6d:61:08:cf:4f:40:f5:fc:55:36:d9:00:43:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Nov 4 06:01:06 2025 GMT
Not After : Nov 5 06:01:06 2025 GMT
Subject: CN=afdfdaa0e9c314587d74e375376e72807fda7fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:49:eb:0d:db:25:bd:7e:b3:00:a0:f8:e1:
7c:64:1a:b1:75:99:09:d7:b1:0b:2e:c0:81:32:94:
08:00:1d:71:f1:7e:5b:a5:dd:5f:86:14:18:9d:f2:
11:4b:bb:bf:31:f5:71:cf:17:c5:52:8a:43:e0:29:
8f:83:81:05:b0:9f:95:92:d6:b9:64:52:12:d7:72:
bd:ad:e4:5f:21:9e:0a:0e:53:21:3d:15:5a:df:9f:
e9:b0:32:a8:6e:a2:57:3f:b3:23:82:fa:ec:44:6e:
20:b3:39:78:df:97:66:4f:0d:55:b9:6c:7f:97:e7:
fd:6b:c3:49:a7:f0:c3:40:3e:0c:87:b7:1f:be:d2:
17:a2:29:cd:4f:2d:39:53:4b:a1:7f:1a:4d:d7:b0:
07:43:2f:7f:35:42:69:89:75:ca:61:31:58:ab:3c:
9b:34:30:1e:71:dc:d3:33:6d:28:7c:ff:bd:9e:e6:
3b:81:59:50:ef:08:1a:d8:19:72:8b:9e:06:1d:18:
23:3c:45:8c:06:75:67:8f:00:3e:39:17:91:75:ea:
9b:0d:68:5a:44:fa:8d:e9:ae:cb:27:44:c1:94:f8:
d6:ee:8a:26:6c:c5:61:3f:cd:b9:d6:cf:c3:3c:49:
0f:1c:85:c5:ee:1f:5c:70:e3:cd:12:42:b9:1c:4f:
19:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DF:DA:A0:E9:C3:14:58:7D:74:E3:75:37:6E:72:80:7F:DA:7F:B8
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:36:ca:9a:ee:22:ac:99:d5:31:4c:d7:66:9b:3f:e3:8d:47:
4a:e5:86:45:2c:7d:9e:3d:e0:64:e8:46:6f:d8:f4:c3:2e:bd:
3a:48:26:ff:dd:1c:81:3f:8d:83:3b:b3:5e:dd:ad:d6:94:7a:
73:28:30:9f:47:89:ff:d4:ae:14:03:76:71:7e:fc:54:a0:f2:
2f:92:d9:d9:c2:d0:41:24:60:5d:a1:9a:69:ff:4c:75:a5:b0:
ee:c5:d9:0c:1e:96:1a:92:bb:7f:44:85:0f:6f:ae:8f:a7:ce:
ba:47:fa:d5:9c:0d:00:af:af:77:19:6a:7d:00:ea:11:f2:36:
f5:e7:b8:a8:f1:c9:a8:33:4d:33:04:0c:e7:cd:bf:03:91:13:
2b:c7:5a:71:87:6f:79:4a:53:00:bd:af:4c:1b:29:4a:e7:c8:
25:e1:95:a3:0f:b5:b4:38:d7:17:6a:cc:2e:3b:f6:25:95:ca:
6c:6f:60:54:48:53:33:a4:c2:4e:be:1c:26:90:01:04:27:d0:
d8:e5:dd:42:09:0b:4a:5f:e8:3e:71:81:52:2e:de:51:3c:e7:
43:6c:a4:97:ea:95:f9:6b:07:be:f9:81:3b:3f:1b:3e:73:42:
51:42:ab:4f:08:11:88:16:2e:ea:5b:1e:7d:8e:6a:12:d3:ef:
97:d5:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:06 2025 by rpki-client