Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier: 3AGQ9eDR7B69jyvLTDkOMojx2Kf0UBfL/U3z5x+Kt20=
Subject key identifier: B2:92:14:E7:F7:29:46:FA:24:CA:58:D6:A0:2E:43:8A:AB:F9:12:DA
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial: 0199FC582F0C44D8309F0B06146B62E5701C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:01 +0000
Manifest this update: Sun 19 Oct 2025 12:01:01 +0000
Manifest next update: Mon 20 Oct 2025 12:01:01 +0000
Files and hashes: 1: 0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa (hash: X8YDNwD9PGK+IazmDttNRD5zMBvc8bSCuQ7N4xzf1ko=)
2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: 9gdNZwuYYNlE+h8JIl3o9cpFhmLC4boqgp4NGo8ETes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2f:0c:44:d8:30:9f:0b:06:14:6b:62:e5:70:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Validity
Not Before: Oct 19 12:01:01 2025 GMT
Not After : Oct 20 12:01:01 2025 GMT
Subject: CN=b29214e7f72946fa24ca58d6a02e438aabf912da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:61:1c:fe:06:58:b4:0a:35:e8:14:8a:14:
5a:b5:62:23:6c:37:7a:45:5a:65:12:bf:ae:33:aa:
05:2f:94:22:34:e2:cc:af:03:44:1b:06:65:99:03:
d0:56:33:a3:2b:4e:fb:35:c6:e8:fc:07:43:5c:2c:
cd:56:b5:e3:ec:ec:6a:18:2a:0c:62:e0:a6:01:2c:
71:f2:7f:f4:a6:84:b4:39:d0:2a:48:19:6b:68:79:
0d:77:96:7b:e4:71:e2:b7:96:c6:d8:d4:94:bd:cf:
ff:4e:d4:46:be:15:72:c7:6e:ed:b2:41:97:48:b9:
68:cb:fe:b0:61:45:64:c7:3e:05:0a:c3:c9:78:b1:
2b:60:54:d2:f7:e3:8e:6c:e5:32:56:65:63:e5:04:
1e:f2:00:83:b4:bb:d0:1e:fb:25:a4:f3:d4:b4:f3:
1d:5e:b3:ee:b2:2c:3a:a8:f4:2d:3c:ea:3a:93:9d:
8b:b7:7f:ba:3d:78:9f:a7:f4:46:30:88:97:73:77:
59:84:d0:9a:8b:ca:0c:47:58:3b:b0:52:87:99:20:
91:e0:8c:7b:26:69:c0:c4:df:bb:53:8c:73:47:0b:
04:31:76:08:f1:78:d2:b1:7b:fa:ae:07:67:ec:6e:
57:b8:b8:4f:bd:10:0a:15:1a:fc:5b:90:2d:22:e4:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:92:14:E7:F7:29:46:FA:24:CA:58:D6:A0:2E:43:8A:AB:F9:12:DA
X509v3 Authority Key Identifier:
keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:93:80:17:3f:d9:c7:43:47:dc:5a:a3:d4:68:02:46:58:e3:
77:68:6c:15:5e:45:15:bd:18:32:8d:6b:0a:34:6e:69:be:f7:
c1:62:fc:0f:d8:d0:6f:40:5c:99:9b:b0:5b:ce:27:20:49:aa:
fc:82:8f:e9:d6:32:9a:f6:26:80:08:00:e4:1d:6e:61:14:81:
8c:a9:51:12:e6:a1:ac:6f:13:b0:14:99:ba:6d:5c:ed:b0:58:
52:a7:c4:c3:63:e7:cb:50:f5:85:f8:df:52:65:f9:c3:cd:14:
0d:f3:b8:6b:ab:ce:52:13:0f:d8:c3:ce:27:2a:a2:b5:62:81:
0e:05:59:19:9f:7c:b2:7a:37:b6:cf:e2:cc:08:53:51:89:99:
64:82:33:78:81:2d:7b:c2:5b:97:cc:36:fb:64:f1:49:72:34:
19:de:85:b7:70:aa:ae:c7:87:38:30:ce:9e:5a:8c:47:a5:a0:
cb:59:22:27:d9:f1:ae:a3:da:66:f8:60:fb:76:6b:ac:d4:1f:
57:8b:42:b8:f7:95:cb:f1:87:79:27:39:36:03:e9:81:07:3a:
64:fc:09:47:fe:5f:eb:98:f5:99:45:98:3e:e0:c0:b8:59:bd:
60:08:1c:13:de:49:b7:d9:5a:79:53:27:ea:d9:ad:62:d2:40:
ba:97:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:38 2025 by rpki-client