Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
File: E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json)
Hash identifier: 48f1AqrfYzqPEqsjCEfo6csBPu8i/wkaaL0OKWy9m0A=
Subject key identifier: E6:4E:81:C3:1B:BF:0B:01:1F:FD:59:F6:BD:F1:8A:AA:67:F6:57:D0
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial: 019A006C69DC80EED328893A6A1243B9A8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
Manifest number: 1422
Signing time: Mon 20 Oct 2025 07:01:36 +0000
Manifest this update: Mon 20 Oct 2025 07:01:36 +0000
Manifest next update: Tue 21 Oct 2025 07:01:36 +0000
Files and hashes: 1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: aSGKf/bJRoSpb1mTBcBIT/09xyVeayOjDicYifenxA0=)
2: zB_eI0R_E9fHHHjTeKsfbCfUNfE.roa (hash: ojS7UDvnpbti0L0m+Z7X9vfIKPOWqVpCsWT632+KxOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:69:dc:80:ee:d3:28:89:3a:6a:12:43:b9:a8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Validity
Not Before: Oct 20 07:01:36 2025 GMT
Not After : Oct 21 07:01:36 2025 GMT
Subject: CN=e64e81c31bbf0b011ffd59f6bdf18aaa67f657d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:db:e1:c3:de:69:ac:2e:5e:2f:d9:c1:78:
52:c3:df:0b:4d:da:1c:bd:f1:44:0d:1f:4d:08:9a:
b5:e2:40:94:67:33:02:b4:72:86:fd:c8:55:31:53:
1c:0a:95:6d:28:0a:4c:e4:f1:12:e8:71:6b:08:54:
9d:43:d5:d8:06:8f:b8:9d:f6:6a:17:ec:1c:21:ff:
6e:27:9c:16:17:06:e9:6b:03:13:6f:f2:90:a8:4c:
08:c6:cb:14:a5:2e:e7:6a:7c:ce:ff:8b:9e:0d:81:
45:ef:75:d5:db:dd:20:3d:2c:be:4e:9c:d6:3b:2d:
f2:08:73:e1:80:0e:b4:25:b9:1a:b4:60:42:67:ab:
d0:af:cd:6d:67:f4:ee:d9:f5:fb:fc:56:62:d3:b6:
c8:5c:b8:ae:23:5b:12:35:e9:61:eb:f2:84:a8:72:
27:2d:d6:97:b8:9a:27:08:7a:ab:f2:53:99:a4:3a:
84:df:f3:47:4f:19:29:3f:54:4f:ce:df:31:2a:65:
1b:f8:0c:fb:a2:dc:b7:12:65:eb:9c:06:05:9a:8f:
a3:b2:53:42:f7:46:4d:b7:41:0b:be:bd:9e:8c:73:
94:02:3a:9e:38:ee:f1:c4:ca:c6:5c:f9:f6:b4:4f:
d7:83:bb:24:51:c0:d6:82:d3:d9:3c:b1:b7:8e:37:
84:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4E:81:C3:1B:BF:0B:01:1F:FD:59:F6:BD:F1:8A:AA:67:F6:57:D0
X509v3 Authority Key Identifier:
keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6a:b9:da:ac:4e:ba:fb:d7:c2:9b:d3:78:02:fb:51:e1:51:
18:76:8d:34:d9:35:74:1a:a4:58:bc:13:e6:be:9f:0f:8f:2f:
c0:10:9a:0e:b5:d2:bb:f0:36:09:ca:67:0b:7b:ee:22:3e:55:
b4:40:b7:da:4d:5d:5d:64:45:f3:c3:98:26:48:7a:2f:3f:72:
86:60:f2:4a:d3:b6:01:1d:4f:7e:e3:ca:b2:6a:a7:c3:66:9e:
df:5c:d1:57:30:23:f6:db:e9:e1:dc:78:e9:f5:73:8b:ca:60:
a0:75:ea:0f:66:4a:d6:ea:24:77:2c:af:5b:51:98:15:6d:7a:
3a:c0:95:76:22:08:af:96:d7:91:39:51:d1:a5:ed:45:aa:03:
65:83:17:69:e6:ea:2c:da:d1:c3:f6:8c:49:91:4b:93:77:9e:
c6:6c:20:00:8a:44:4b:86:14:19:7f:ed:09:80:47:a1:0a:d3:
e9:1c:09:40:dd:84:25:2d:6a:0e:71:ea:55:99:4d:7a:a7:83:
44:05:b6:69:71:ee:5e:3f:dd:47:d5:ad:5b:6b:9c:12:56:70:
b1:74:bc:69:12:c3:62:05:d2:fe:8c:0d:bb:9d:34:34:9e:65:
64:d7:d5:6b:9f:88:d8:77:62:66:dd:9a:62:43:35:77:45:c4:
13:b1:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:19:49 2025 by rpki-client