Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
File: EIPENieVN9T3JtIxDO8UpC8bK4o.mft (raw, json)
Hash identifier: fKUNEclXGrKoYsaaKvNuEQhxUMTu1jXHhnbh4z87JHw=
Subject key identifier: CE:1C:36:85:AB:3F:7C:5F:4A:B6:89:EF:B3:A2:C5:F0:64:22:8B:97
Authority key identifier: 10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
Certificate issuer: /CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Certificate serial: 0199FC8F27E3A42479E94255828A8B67E325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
Manifest number: 03FD
Signing time: Sun 19 Oct 2025 13:01:04 +0000
Manifest this update: Sun 19 Oct 2025 13:01:04 +0000
Manifest next update: Mon 20 Oct 2025 13:01:04 +0000
Files and hashes: 1: 9xKnDYTGsncir9pGK8UvDoqBIrQ.roa (hash: ruj+NSfqLyzPa16DtiDqJuwEcOM3gn9igG3unI9kKcI=)
2: EIPENieVN9T3JtIxDO8UpC8bK4o.crl (hash: 3XS0GNPqxR/1l9JUpMGCGA12K80ZOLnW4Fvv18R1fmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:27:e3:a4:24:79:e9:42:55:82:8a:8b:67:e3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Validity
Not Before: Oct 19 13:01:04 2025 GMT
Not After : Oct 20 13:01:04 2025 GMT
Subject: CN=ce1c3685ab3f7c5f4ab689efb3a2c5f064228b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:a6:83:aa:41:fc:b2:88:ef:b5:14:fe:28:
0a:e4:b3:90:6d:f2:af:a2:5e:b6:fd:18:4c:a0:c7:
46:5f:d9:50:36:bb:9e:f4:58:ea:bf:a6:3a:3a:27:
2c:ec:33:23:0e:14:44:ba:49:0a:01:7a:69:b9:85:
00:2f:ca:d0:3c:dc:2b:5b:6d:c7:c3:78:a4:23:04:
7f:74:21:cf:2a:08:db:8e:52:12:57:ff:59:33:65:
3d:91:ae:61:04:13:d5:d6:87:a2:03:e1:ff:91:93:
94:c0:3f:8b:7a:97:4d:b0:ef:3c:ef:22:38:48:a2:
64:e9:14:c0:86:50:ac:f9:a9:81:60:a5:a4:41:75:
2f:c8:4d:d9:30:04:9d:8a:7e:b3:41:d9:c4:7d:c9:
3f:f9:b4:c6:6d:c8:30:f6:f8:b9:9f:15:da:6a:a3:
3d:04:4e:61:46:be:80:86:7a:30:b5:70:08:fd:db:
5d:d9:a9:79:cf:9e:1c:a0:74:f7:fe:2c:bd:fe:59:
e5:44:56:2d:3c:13:5d:49:97:b5:28:a7:e1:9f:69:
84:ba:f1:13:39:82:22:aa:73:07:27:21:45:92:57:
92:cb:48:01:c9:9c:43:6f:3d:51:95:ba:b4:fd:9e:
b7:48:b1:0e:dd:93:6a:63:5f:24:c1:2f:15:89:f0:
4b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1C:36:85:AB:3F:7C:5F:4A:B6:89:EF:B3:A2:C5:F0:64:22:8B:97
X509v3 Authority Key Identifier:
keyid:10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:72:55:37:73:22:28:69:92:29:1d:3d:04:da:09:8a:8e:81:
ba:50:42:3d:38:46:04:6c:96:4c:d1:fb:63:7e:57:ed:f5:10:
63:ca:ec:2b:bb:b8:99:66:18:f7:cf:92:df:5d:52:66:1e:ba:
99:33:fe:71:a2:6f:3b:d8:09:9b:c1:60:4e:3b:17:68:08:5c:
de:9a:e8:df:e8:3a:11:d6:e8:d7:60:26:79:0e:86:1d:7e:13:
5c:4e:17:b1:b2:4f:c3:b3:20:0a:4e:f9:55:f3:7d:e5:b1:f5:
04:a1:7b:f7:2c:e6:4f:3b:56:80:6c:1f:fb:37:30:f9:84:2b:
c1:75:6c:b4:a9:2a:5b:5b:fb:b8:00:97:47:86:aa:e9:3a:97:
0d:e2:54:55:7b:97:98:1c:78:98:fc:f2:a9:0b:ce:0b:5e:bc:
39:2b:47:10:61:05:52:c6:b0:55:a6:c6:20:8a:17:02:ae:55:
a7:84:71:64:a1:a1:4d:3d:70:f9:01:89:88:69:37:80:ba:e5:
45:db:34:69:c4:db:d7:25:b1:df:39:8e:9a:68:5d:51:f7:cc:
6d:46:bf:86:c7:d7:0d:2f:88:6d:25:12:ca:30:99:3d:a6:0a:
e5:05:ef:cb:05:50:00:95:a8:43:58:ed:55:f4:90:cb:14:9b:
eb:66:e3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:33 2025 by rpki-client