Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
File: E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft (raw, json)
Hash identifier: JYT3BKk0YN5mm1xvkDHG7CmLb2q275OQT/tPRO+ABuA=
Subject key identifier: 27:0F:D3:5A:B8:35:9D:96:D5:4A:CE:10:74:7A:85:AF:16:2C:57:72
Authority key identifier: 13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8
Certificate issuer: /CN=134010e4398dfd6e19f45b513c22c1eca33311f8
Certificate serial: 0199FBEB9F91670985E33A05C253F4B17601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
Manifest number: 0B32
Signing time: Sun 19 Oct 2025 10:02:26 +0000
Manifest this update: Sun 19 Oct 2025 10:02:26 +0000
Manifest next update: Mon 20 Oct 2025 10:02:26 +0000
Files and hashes: 1: AkOZiNxVhUaQoLKipRlB_hZtuhU.roa (hash: OT/u98f/Om9ZIYFZJdTTw+++YqbpQpzo4KPrsjLuAbM=)
2: E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl (hash: t0C/oViiPC/vV28uV0CctAiJ352M8w5BHhHsBHMQNoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9f:91:67:09:85:e3:3a:05:c2:53:f4:b1:76:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134010e4398dfd6e19f45b513c22c1eca33311f8
Validity
Not Before: Oct 19 10:02:26 2025 GMT
Not After : Oct 20 10:02:26 2025 GMT
Subject: CN=270fd35ab8359d96d54ace10747a85af162c5772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:05:a3:9e:af:3a:14:65:f9:d2:8e:4b:df:
44:ba:49:2c:c8:3d:c4:3e:76:9a:98:7e:a7:29:8b:
a0:78:cf:4f:75:38:6c:0a:ba:69:1f:e5:66:fc:df:
9f:9b:79:76:6b:06:bc:76:d2:45:bf:a8:08:0a:40:
04:57:28:b3:83:8e:a7:74:18:d5:a0:e6:6c:18:61:
aa:fd:bb:09:29:ef:d0:a3:05:af:b1:ac:c3:9a:c5:
ce:8c:40:6c:89:03:fa:6f:60:cd:45:e6:df:4b:7f:
15:6a:e7:32:74:d9:6b:ab:c8:77:fe:9c:f6:d4:84:
46:99:94:78:15:a6:fe:17:2b:17:61:81:f5:4f:0b:
77:a1:7b:02:d6:a2:6b:05:e6:c8:c5:eb:43:40:ac:
6a:21:f2:0e:65:af:83:c6:e4:b6:ea:54:a7:c8:17:
94:0c:53:b3:9d:5e:11:9b:ab:62:89:88:76:43:3c:
4c:3d:72:85:16:f8:e3:2d:55:70:aa:a1:7f:96:d2:
da:2f:33:52:13:09:38:ea:29:81:8c:7e:53:52:48:
a4:d8:11:13:d4:b1:4f:cc:6b:b9:2d:42:0e:ab:bd:
50:15:b8:f1:8e:af:4f:11:28:6d:36:a5:70:d7:b0:
48:51:78:6d:53:eb:d7:f8:e8:5b:7e:1d:95:f2:66:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0F:D3:5A:B8:35:9D:96:D5:4A:CE:10:74:7A:85:AF:16:2C:57:72
X509v3 Authority Key Identifier:
keyid:13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6b:b7:1d:8c:88:9f:72:49:15:3a:84:82:60:a4:ca:86:ae:
89:6b:ab:73:ee:68:4b:e2:98:d5:ab:14:db:f2:ac:c4:46:aa:
0b:c3:b4:39:51:1d:1c:da:11:04:dc:82:54:bd:5c:e1:26:d2:
a8:c3:85:cf:d5:e8:b0:3c:ce:6f:4e:b5:b0:b7:63:b3:6c:4b:
12:c8:31:11:13:78:b6:26:c3:bc:6e:c1:27:10:02:9c:c2:af:
25:1f:3b:0e:ab:5b:c2:c2:39:f8:e7:4c:92:0f:31:0e:48:6c:
b6:44:de:28:a0:59:9c:31:92:83:2e:1d:ca:c2:13:f4:11:31:
60:36:c5:ce:e5:77:37:df:f0:24:77:d2:b2:d6:d1:10:42:b4:
ee:3b:6c:f9:13:c8:c3:d3:38:0b:97:e5:18:1f:83:f6:e5:32:
da:23:70:f0:b7:32:6e:0e:a6:ad:b0:80:04:b1:39:5e:ad:af:
e7:dd:b8:01:c8:8e:42:7d:a7:0b:f2:c9:d9:50:76:6d:c9:c6:
9c:ca:43:cb:01:98:07:25:99:6d:30:1c:f3:b1:fb:75:0d:1a:
d8:3b:33:46:f7:7e:44:9f:14:cf:57:85:33:96:90:5b:80:41:
df:f0:3d:b5:0f:ec:02:e2:0c:df:83:db:17:1c:06:83:6b:4c:
bd:29:16:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:56 2025 by rpki-client