Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
File: e9WZftB1wimLRhIl4QYPV3sdfU0.mft (raw, json)
Hash identifier: EnSXepuy+UJgrOlabX9axchS7+YgLd5oD2gTa2WpkP0=
Subject key identifier: 89:9F:37:26:65:94:8F:09:5E:63:31:BC:64:35:04:6A:97:33:85:B7
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Certificate issuer: /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial: 0199FF22A43D8C8A5ECB114925BF864CAB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
Manifest number: 0AB3
Signing time: Mon 20 Oct 2025 01:01:24 +0000
Manifest this update: Mon 20 Oct 2025 01:01:24 +0000
Manifest next update: Tue 21 Oct 2025 01:01:24 +0000
Files and hashes: 1: GcQb7Wci-pVX30WsNPMX_X8ZJVY.roa (hash: 0NLct9+IWSmNLab833+pcvKvnzISJQn90Hh82nLgM+o=)
2: LMLHHOF93hK4OUpbUUvvwD0c0kY.roa (hash: 02jA2t2eBDun8+LsbWX6msyQRXMN/G2Ajm0JM11hXxw=)
3: e9WZftB1wimLRhIl4QYPV3sdfU0.crl (hash: Kl9PIRxGvTWMWsEg+89IzLi3twI2jXaXHKplSIIi3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:a4:3d:8c:8a:5e:cb:11:49:25:bf:86:4c:ab:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Validity
Not Before: Oct 20 01:01:24 2025 GMT
Not After : Oct 21 01:01:24 2025 GMT
Subject: CN=899f372665948f095e6331bc6435046a973385b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:e4:77:a4:e5:30:80:9a:b3:62:74:dd:c7:
b6:60:ee:d0:cf:ca:dd:d7:fc:ae:ee:fa:1d:79:91:
bb:83:43:fe:9e:8b:4b:47:d9:94:ec:5f:96:e1:08:
55:55:ab:b2:98:ee:64:02:d7:ca:4d:39:f4:4f:f8:
d6:b3:65:26:3c:61:5e:8c:0d:72:6b:56:df:a9:08:
f6:20:45:70:15:5a:78:d6:11:b4:db:9b:57:92:03:
a1:bd:4c:2c:57:ec:93:0c:0d:43:f0:29:82:40:02:
09:ee:2c:75:05:ea:0a:44:a6:bd:0e:5c:69:69:a2:
4b:a0:fc:43:8d:7a:f3:50:da:fc:32:fb:89:f1:71:
27:7b:83:69:94:9c:ba:39:23:51:bf:17:72:8a:18:
4e:da:98:5a:7c:c7:2a:af:12:8f:a5:72:e9:86:33:
3a:12:5a:d2:4c:14:4d:21:bf:b5:e8:0b:78:9f:ff:
8b:14:19:05:72:bf:4a:5b:85:f4:4e:e2:d1:c6:5e:
a6:c2:91:d0:10:8f:5c:30:a0:4b:92:f6:e2:66:be:
00:21:47:e3:8a:69:52:41:7a:9e:b3:32:6e:72:78:
86:3f:e0:79:9c:7b:bc:54:37:42:57:f1:3f:b6:c4:
a4:02:91:ec:a8:84:7a:cd:c8:fc:28:1d:b0:02:3a:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9F:37:26:65:94:8F:09:5E:63:31:BC:64:35:04:6A:97:33:85:B7
X509v3 Authority Key Identifier:
keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:dc:ee:4e:d6:cf:1a:d5:1f:e2:0a:e5:b3:78:ae:fe:38:11:
93:58:74:9f:36:65:07:32:7b:a5:48:6e:41:7b:37:1e:2c:0f:
01:e6:6a:67:2a:32:a9:8b:59:e7:5f:e6:fe:77:36:4a:76:25:
24:33:62:0b:63:cc:5b:d7:9a:e4:02:98:2a:88:17:4b:43:f4:
d0:6b:d7:dd:d9:b2:18:c9:2f:e5:2f:22:a6:42:b7:48:76:64:
cc:a0:35:a9:20:ff:15:55:14:25:93:77:dd:f6:9f:41:75:91:
1d:80:e9:cd:d5:f6:08:14:6f:43:ce:44:79:e4:30:ce:ac:5c:
39:8e:15:1a:29:c4:36:6a:33:f8:85:74:55:8f:cc:00:1c:2d:
03:0c:8e:f3:15:86:18:68:02:be:d2:9e:f1:1f:59:32:c9:67:
5f:90:3a:80:8b:dc:df:ad:6b:65:23:cf:44:47:3a:f8:e3:bb:
2c:46:6b:f8:e1:47:90:d3:21:8e:a8:fb:25:64:63:ef:79:d3:
45:f7:bb:33:23:92:b3:ee:e6:ac:fd:6e:cd:47:ec:4e:fd:2c:
25:8a:c0:8a:59:ed:0a:1d:63:eb:60:7a:06:f9:d0:fa:8d:28:
45:c6:fb:ca:a2:a5:75:cd:53:73:6e:c7:cf:02:84:dd:59:0a:
4c:b9:7e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:27:55 2025 by rpki-client