Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
File: E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json)
Hash identifier: K1BTP94HFdtEdIWChzVIOntPzC/ZsDEgprgwrSQe/1M=
Subject key identifier: 6D:50:79:31:E9:EA:0D:E6:C5:E1:1E:4D:B8:0D:3C:91:BD:C8:30:28
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Certificate issuer: /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial: 0199FC217F799BF177677BF3B9570D1B5A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
Manifest number: 0DCA
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: 3ZKIh733NIkz8A90ghZangf0O7w.roa (hash: +/arpwpD8EZM12Zn7hG4BlRv38snttCFSH/eAZhX+dg=)
2: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: bgeM035twt8RkyQfh+DcGqkUUh1ZW6tKmmVRmj40IH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7f:79:9b:f1:77:67:7b:f3:b9:57:0d:1b:5a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=6d507931e9ea0de6c5e11e4db80d3c91bdc83028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:18:5b:dc:0b:0f:d5:45:c6:90:a8:80:1d:
3c:4d:bd:ba:f8:93:73:f3:5f:7f:f0:d9:64:1c:f9:
29:5a:2c:ee:4f:e1:1c:83:f9:0d:7a:b3:3a:7a:34:
86:d4:12:d7:bc:26:b1:61:fa:33:75:a1:a6:a4:e8:
9f:ab:fb:01:02:a1:f4:13:9c:ee:20:49:3d:53:8f:
e0:27:ea:27:d1:c0:19:32:e4:22:fd:ad:42:8f:3a:
d3:90:ac:78:be:70:82:9e:13:7d:03:32:03:c2:42:
1c:96:a9:17:49:80:d4:6b:32:ef:1e:a4:26:9b:91:
be:23:0a:05:b2:71:ee:2c:28:ae:c7:e9:f8:38:4c:
5f:6d:0f:cc:64:7b:57:97:8b:88:c1:b9:e6:c2:e7:
3b:75:81:39:af:fb:3c:46:92:c9:e1:c9:0e:7b:60:
f6:52:0d:80:c3:93:7c:10:c7:52:18:07:e0:e0:c3:
23:a1:b8:8f:78:44:19:c1:f0:f4:12:7c:54:82:97:
2e:d4:98:7b:d3:5e:46:0c:47:0f:3d:fb:e5:2c:5d:
23:4a:2e:11:c6:37:ab:16:bc:44:cb:0c:92:1b:44:
22:84:df:52:0e:7d:94:1d:08:0d:98:1e:eb:ff:19:
a8:f7:5b:02:2c:28:45:b9:18:ef:ef:e3:95:d9:20:
1d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:50:79:31:E9:EA:0D:E6:C5:E1:1E:4D:B8:0D:3C:91:BD:C8:30:28
X509v3 Authority Key Identifier:
keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fd:e1:e5:24:d7:5c:41:03:62:10:1c:3c:13:a9:c1:f0:fa:
d9:ec:f2:1a:36:90:fb:70:52:a2:97:1b:7f:31:11:10:f6:36:
42:da:60:cf:55:6f:73:8e:44:e1:4f:38:64:dc:5d:aa:ba:fd:
6b:95:12:a5:84:a7:19:d8:ee:d0:1c:fe:f3:72:b2:5b:fa:09:
7f:be:a8:d7:d3:b1:31:33:55:be:5a:9a:47:f8:d2:46:ba:4d:
b9:2a:82:43:cf:5b:28:f2:ce:00:c8:41:8c:34:d5:d3:e4:67:
64:b6:65:cf:75:6a:3c:59:54:d9:ee:61:2f:25:da:70:c9:64:
9e:ae:fe:96:a6:a9:f4:9e:d8:a7:1f:6a:c8:f1:61:10:9e:82:
01:9f:ea:4a:f9:2d:b8:df:41:05:12:91:ee:14:3d:3b:2c:5f:
53:6d:f6:b0:46:bc:f3:fd:c0:61:c3:08:a0:2e:ba:9f:52:b8:
80:7a:2b:c3:1d:a2:13:77:2d:44:be:78:4e:fe:1a:54:da:48:
37:8b:fc:85:1e:3d:a4:32:e0:50:14:e3:76:ee:64:7a:ae:17:
0e:33:fa:96:82:ff:42:62:68:24:3a:5c:31:02:05:b6:9c:21:
f7:fc:a0:a2:42:64:1b:a7:b9:2e:94:df:5f:b7:c8:b9:6b:37:
38:e2:b7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:15 2025 by rpki-client