Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json)
Hash identifier: Q6N+6giPwU1wmV6T+OAkDu9dKW4oTSqCKPN2DYeDRbc=
Subject key identifier: 37:DE:C2:97:19:71:28:53:5C:DA:AD:15:84:7F:E1:08:4A:F9:F8:D2
Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Certificate serial: 0199FC58A311020B5C37218FF8DA5FBC1A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
Manifest number: 0D25
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: 38mEm2F8Yjh1FOnrSxxmmsrIhfw.roa (hash: UA6RTPbLgtEACOSSNTD3WLGlqG06YwLEPzk3fCMKgmQ=)
2: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: VaFGEOWq2dmm7MM0C98f3yiWpoKx4OqKMUSLgz4szJE=)
3: lkxfkXJeUwS4tf9hwfUaHviGSgg.roa (hash: MB/FOS9D0/N7sc26YuesIdJ9X16AAYgiGD6hIoBNyjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a3:11:02:0b:5c:37:21:8f:f8:da:5f:bc:1a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=37dec297197128535cdaad15847fe1084af9f8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:4b:fc:a5:cf:8a:e8:a2:5f:0f:d3:02:50:
f4:fb:55:93:24:a3:4d:dd:54:57:77:49:0d:c2:a3:
92:39:6d:32:c5:9a:ef:fe:9f:d6:3d:f2:83:e0:ac:
96:9e:af:71:52:12:4d:a8:ef:d3:c9:22:99:c6:dd:
93:fe:58:46:d0:4f:67:95:ee:b3:f3:e2:11:55:ee:
8c:f7:02:a3:6a:63:a0:ab:85:ff:c7:9d:23:44:66:
ea:a0:6f:7a:9d:9a:42:c1:0f:b3:f0:32:ae:d5:d5:
74:52:cb:cb:46:cd:86:ec:9e:e7:5d:c9:88:35:54:
98:ef:ce:53:2e:1b:d8:ef:6b:aa:78:61:63:f7:58:
1f:f3:10:2f:40:78:f0:b2:87:6c:5a:73:a7:62:cd:
7b:c7:3c:55:8d:4b:95:db:49:87:96:df:7a:a5:98:
8c:11:e9:6d:2c:30:7d:72:ad:65:15:b7:1f:63:91:
a8:04:f0:8b:73:05:ca:91:35:db:b6:ff:07:09:49:
81:70:1e:7e:a0:53:f3:b1:72:36:e3:aa:a1:de:ad:
eb:31:5c:40:ab:fe:a0:de:93:94:31:b3:e2:f1:29:
f3:95:c4:ea:5b:ee:78:4f:22:0f:de:51:b9:7d:a7:
f6:f4:d6:51:43:06:75:f9:ec:44:44:01:cf:d1:cc:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DE:C2:97:19:71:28:53:5C:DA:AD:15:84:7F:E1:08:4A:F9:F8:D2
X509v3 Authority Key Identifier:
keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c0:79:c4:a0:46:01:95:4f:da:c4:d4:c5:b6:50:9d:ae:4b:
e3:73:de:62:db:93:a1:09:9f:2d:8f:f1:11:24:95:60:88:d3:
f0:80:1b:73:68:04:95:8e:95:31:78:9e:ac:13:1a:00:35:ee:
51:01:7d:89:86:42:92:59:16:7b:8a:1f:6f:56:d7:02:b2:af:
77:7d:c3:67:d7:6d:74:09:5a:50:ff:97:89:af:93:50:d7:2c:
d2:f0:f2:c6:00:53:55:be:eb:bc:32:51:30:2a:54:d6:c4:2f:
4d:07:e8:c0:da:d2:81:1b:ff:3d:5e:32:38:ee:21:9c:e7:9f:
b2:96:74:20:21:91:4a:76:60:c4:0d:5d:2b:a4:22:fb:82:af:
d4:5a:d4:a8:26:81:a1:5e:22:3c:1e:7c:bb:5a:7b:2b:d4:00:
df:4e:4c:1e:bd:6d:45:13:d7:ae:e7:73:85:9b:31:55:56:6c:
00:87:cf:cb:54:88:f5:ce:ad:fa:c7:a2:44:57:51:a8:7b:15:
65:45:f8:6f:c9:b4:bf:da:d3:17:52:77:52:02:f3:dc:d7:0d:
3b:7d:50:4d:bf:47:c8:cb:a6:d8:bd:07:0f:e9:2d:e9:3c:b1:
c9:43:75:71:42:c6:cb:6b:85:b5:6e:89:a1:70:47:e7:69:3f:
75:5d:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:42 2025 by rpki-client