Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
File: e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json)
Hash identifier: 0HM1nmKPz8hEEk+D2dIA90c8xJDqIPxHCrv1gxETcKs=
Subject key identifier: 26:77:DF:50:17:2F:8B:92:39:D0:DE:E0:54:46:9A:0F:D6:DA:97:81
Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Certificate issuer: /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Certificate serial: 0199FCC61CD25AE35B7FCDD0E3DCB75C5877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:05 +0000
Manifest this update: Sun 19 Oct 2025 14:01:05 +0000
Manifest next update: Mon 20 Oct 2025 14:01:05 +0000
Files and hashes: 1: _d9TqHUt6Akn4mIp9hun4eZSvDY.roa (hash: E+7eG5ZCI82NV5+vYe7SeDuuzqJipfHrlwV+FyH2KQM=)
2: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: JV+IxFdCEOalMeleB98lHcnW+ye29LsL/BV/GY0anuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1c:d2:5a:e3:5b:7f:cd:d0:e3:dc:b7:5c:58:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Validity
Not Before: Oct 19 14:01:05 2025 GMT
Not After : Oct 20 14:01:05 2025 GMT
Subject: CN=2677df50172f8b9239d0dee054469a0fd6da9781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:3a:ca:33:b3:a6:bf:fb:a8:cc:5e:0a:f9:
15:bd:cd:56:81:9c:3b:a1:f1:f5:4a:ec:78:b2:18:
c5:cb:70:09:8e:17:8b:70:2b:48:c8:0e:0e:ca:05:
28:76:59:8e:bd:47:c3:0f:ae:b7:ef:70:53:c8:1b:
96:71:09:94:52:87:08:d0:04:d0:ba:ff:1b:43:50:
db:88:9b:92:ad:b9:1d:59:4c:95:77:31:df:34:33:
a0:6c:bd:e5:ac:e4:13:29:27:e4:cb:ca:6c:b7:cf:
47:b8:3d:21:7e:cb:45:3f:ae:64:90:c0:ee:7c:4b:
b2:eb:2b:f3:c2:37:ad:af:23:78:bb:8d:67:ce:4c:
0f:12:20:0d:5e:4b:c7:3b:c9:db:3c:5b:2f:d5:1a:
38:26:9d:94:4f:26:85:7e:33:2d:4a:e2:9a:01:67:
75:41:c5:3d:32:0b:ed:86:2c:25:45:a0:82:56:9c:
58:16:af:9d:d0:58:39:53:b3:35:fc:e5:ca:b0:76:
76:00:8b:1b:8c:c9:2c:25:01:b7:86:14:e0:81:8e:
36:51:c6:8d:16:c0:af:1c:3d:d8:b3:b8:50:33:80:
86:64:27:d6:3e:a9:a0:83:7e:50:75:13:fb:7c:a9:
2f:c4:d1:97:f8:62:9c:f9:d0:ad:8e:4d:07:75:3b:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:77:DF:50:17:2F:8B:92:39:D0:DE:E0:54:46:9A:0F:D6:DA:97:81
X509v3 Authority Key Identifier:
keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b6:6c:d4:2c:96:6e:bc:af:4c:45:8d:31:60:a1:d9:c3:0d:
3a:57:fe:a4:4e:2e:ab:f0:48:c4:29:97:1a:81:e6:9d:22:06:
d1:fb:da:1f:46:42:77:74:67:c0:e2:78:9f:96:f4:1d:7d:14:
8a:ec:a9:7f:7f:46:4a:9f:5d:4a:af:3d:6e:7b:82:81:00:b1:
f5:7b:9f:f0:c7:6a:25:fd:dc:a1:0c:39:44:1f:da:0a:58:d5:
1e:6d:48:f1:92:23:71:f6:aa:d8:d6:48:19:e9:01:76:fb:f7:
b3:43:88:83:48:e2:eb:65:ae:52:c8:14:28:88:53:d9:10:0a:
0e:04:46:f5:cb:7f:7c:4b:1d:48:90:a6:da:8d:7d:a7:f5:cb:
22:0f:4c:50:62:55:3a:7f:36:24:78:a9:64:ef:57:0a:fb:9c:
03:b8:5e:41:5c:37:e3:1d:9f:b9:06:fa:df:48:5c:a9:e1:48:
93:d1:0d:23:88:52:46:2d:9b:53:4d:c3:d6:08:65:5e:ad:f0:
1f:6e:07:f7:ed:a2:19:cc:49:f8:bb:ef:43:26:02:b9:9a:f8:
41:4b:95:01:66:db:58:b9:be:19:ef:c0:fa:6a:7b:f7:19:1c:
01:55:12:d7:f9:dc:f4:97:e3:9d:01:9b:62:54:20:54:13:eb:
53:3a:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:59 2025 by rpki-client