Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
File: E82HAn19OjuffEukSV5J4hrVpLs.mft (raw, json)
Hash identifier: /GIczH/et16/qE2xmgWQzXngQYMbtQ5U8a6FitPtcI0=
Subject key identifier: 7F:1D:90:1E:4C:53:8A:DA:74:3B:B0:86:13:F2:F9:F4:A3:B7:88:9B
Authority key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
Certificate issuer: /CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Certificate serial: 0199FC5835DDBC3E7CC13EEA0CDC3457715E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
Manifest number: 12C0
Signing time: Sun 19 Oct 2025 12:01:03 +0000
Manifest this update: Sun 19 Oct 2025 12:01:03 +0000
Manifest next update: Mon 20 Oct 2025 12:01:03 +0000
Files and hashes: 1: E82HAn19OjuffEukSV5J4hrVpLs.crl (hash: /1R7sQj7wzpZkZ2RBBViUzZ4YF95OsfWCz7BP1aLHcM=)
2: RAwW8IE1n9sVekuiCyEikAL5HtE.roa (hash: R2iI0k0l7koAhrOpg0u96qvpaz2J9avElrVz1cFdebo=)
3: RNSC3VsqxwY5F2CPaJmOCK9DnZw.roa (hash: 7V4nDCtb0KwqDCqyA/QY/lvyHUYCIvkngjaYw/DzojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:35:dd:bc:3e:7c:c1:3e:ea:0c:dc:34:57:71:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Validity
Not Before: Oct 19 12:01:03 2025 GMT
Not After : Oct 20 12:01:03 2025 GMT
Subject: CN=7f1d901e4c538ada743bb08613f2f9f4a3b7889b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:c4:93:52:2e:40:06:22:04:84:7a:45:1f:
08:6b:b4:7a:cf:8b:f3:ed:f8:dd:6e:0d:62:75:e4:
7b:76:15:57:b3:73:d1:2b:61:07:0b:b1:46:bb:87:
ae:9a:02:15:6b:05:2c:62:16:d5:53:00:69:1e:ce:
12:00:4b:6a:bd:a9:21:2d:34:46:69:1e:42:08:32:
78:ee:fd:a7:e2:c6:ad:58:5f:87:b8:be:eb:c0:b8:
70:0b:38:bc:9d:9c:a7:0c:b6:a5:85:ef:62:70:1d:
47:64:8e:4b:2c:34:4d:a9:62:f8:ad:e9:a4:08:05:
e9:3d:75:2e:25:b9:74:f6:84:0f:f0:88:e1:05:de:
b7:24:ae:34:40:62:40:8e:b4:9c:2a:be:28:c1:e8:
ef:6b:d5:5c:92:49:26:5c:bf:69:42:28:a8:02:c0:
df:1d:74:9d:3e:36:5f:62:70:1a:f0:ce:de:ae:31:
00:1d:db:2d:31:81:69:0c:51:50:86:5d:c0:73:57:
53:73:89:fd:41:cc:c1:1e:b8:81:3a:3d:47:6d:ff:
87:07:c7:bc:51:d3:bd:c8:c7:3d:1d:95:10:5d:49:
77:29:cb:56:be:ab:ca:6e:d9:0d:2c:6a:5a:91:c5:
4e:5f:ab:9a:e4:51:ca:0d:1f:5a:32:68:7d:13:02:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1D:90:1E:4C:53:8A:DA:74:3B:B0:86:13:F2:F9:F4:A3:B7:88:9B
X509v3 Authority Key Identifier:
keyid:13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e2:48:b4:a9:27:b4:e2:2d:75:42:58:4e:38:9a:a2:ab:89:
ae:22:67:cb:7b:99:49:1c:8c:3b:47:70:de:71:24:b9:7c:80:
c5:e1:41:09:bf:5a:f7:4d:39:18:3a:66:aa:18:b4:8a:11:34:
81:86:1b:95:54:07:51:c9:eb:78:66:5e:d3:75:53:21:a5:eb:
9f:24:6d:87:f3:fc:b5:ee:d5:79:33:df:e8:25:17:00:a9:2e:
8e:81:09:be:79:8c:1c:1e:60:53:6e:02:0d:e2:0a:61:09:67:
d5:47:3c:b2:09:52:45:fa:e9:8d:b6:85:9a:cc:13:96:d0:ab:
23:48:e1:ff:da:2f:5c:aa:c0:76:8b:53:52:a2:95:eb:ea:de:
09:03:18:0c:8a:ab:0f:0c:d1:ba:05:fc:f3:20:f2:a3:47:45:
30:7e:9d:1e:90:f3:8d:1f:5d:2d:9e:ac:63:22:85:00:12:31:
38:3d:ff:96:27:26:93:e6:0e:e9:22:1e:f4:d8:8d:9d:9f:4d:
12:82:88:f0:5f:ea:44:91:4e:fe:45:27:6b:5b:06:3d:ad:d3:
6d:cd:ea:4c:92:8c:65:5b:92:8f:69:d1:11:f8:04:5f:0c:a9:
75:ff:7d:b4:80:c9:e5:49:f1:21:a4:b4:fa:d2:6c:fa:0e:ce:
44:93:6f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:07 2025 by rpki-client