Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: AA2bSGq8z4TWwssfH5SP8X0Vi4O245Y4DQdQSqNKkh0=
Subject key identifier: 90:9C:74:81:DC:15:3C:5E:07:90:E3:29:48:8B:F5:FB:D4:B8:41:8E
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 0199FE4761454752582AF253C87CCDE8DA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0D78
Signing time: Sun 19 Oct 2025 21:01:54 +0000
Manifest this update: Sun 19 Oct 2025 21:01:54 +0000
Manifest next update: Mon 20 Oct 2025 21:01:54 +0000
Files and hashes: 1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: 1nHbnitY69x4RUV3M+kqGut5IUFFMWD5eB6+ATz5tK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:61:45:47:52:58:2a:f2:53:c8:7c:cd:e8:da:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Oct 19 21:01:54 2025 GMT
Not After : Oct 20 21:01:54 2025 GMT
Subject: CN=909c7481dc153c5e0790e329488bf5fbd4b8418e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:af:03:43:79:d5:48:97:d5:7c:76:c4:73:f0:
19:d6:9f:21:2c:bf:04:9a:77:7c:9f:a4:ce:1d:f9:
d8:ef:3c:c5:06:15:ba:5f:42:9a:92:88:6f:cb:a2:
0c:38:b5:56:f5:c6:40:0a:93:fb:93:8f:d7:29:4c:
4f:aa:38:08:76:64:21:db:29:8d:d4:85:31:00:b9:
6c:38:10:b7:0d:a0:a6:52:8e:9d:49:33:09:a2:44:
56:c7:5f:49:90:e9:58:80:36:d3:b3:0b:74:e6:29:
6b:90:88:ab:bb:d5:8d:2e:9f:05:b7:1c:7c:1c:40:
a9:e7:0d:91:fc:bf:07:3b:fa:56:21:72:fe:d5:ca:
a4:0d:b3:a0:29:64:ea:93:e9:e6:82:c5:47:f3:f9:
22:75:63:95:e0:73:a9:35:6e:6c:94:12:9f:d7:8d:
ff:c9:8f:79:4e:c7:fd:78:0d:05:55:92:fe:b3:99:
9b:ac:b4:1f:7c:50:85:b4:84:5f:20:15:5c:c2:91:
12:78:ac:d2:7e:e7:cc:60:24:36:82:cb:5c:0c:fd:
7d:de:59:e8:62:52:a7:ad:3e:e3:16:ea:c8:d4:db:
8a:c6:04:6c:60:9e:27:cc:09:71:e1:8d:2b:6f:e0:
02:f0:32:2e:b3:78:2f:68:64:f2:42:f3:34:57:92:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9C:74:81:DC:15:3C:5E:07:90:E3:29:48:8B:F5:FB:D4:B8:41:8E
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:71:09:84:60:bf:50:c0:56:de:26:40:f6:b7:ba:cc:96:aa:
34:77:c7:c4:63:ec:1f:56:c5:81:e7:d1:6a:bb:2b:bb:3d:75:
38:21:0e:fe:b1:5c:fe:c8:b9:f1:3b:bf:01:eb:e2:84:88:60:
1c:dd:d5:2d:39:18:6f:61:ba:25:71:1f:b6:62:4b:b3:33:93:
f6:d6:fd:bf:0d:65:18:ce:d1:a0:be:94:00:48:24:0c:f0:c1:
1e:5d:9d:89:24:70:80:fc:36:80:b3:4a:16:80:8d:81:22:0b:
f7:80:2d:cf:09:98:ce:7a:d5:08:30:a9:a1:a7:a2:a8:47:99:
0a:1b:a7:d9:1b:ee:28:de:de:79:f8:b0:37:6f:b2:b3:df:8d:
2f:66:14:8d:f8:bc:48:2e:57:24:f0:b0:6b:32:70:1d:0b:65:
1c:92:78:97:5b:b5:f7:82:43:af:26:9d:d2:7c:4b:92:8e:87:
b2:80:32:79:57:3d:9c:09:77:e6:3b:70:27:55:a5:b9:57:c8:
0b:75:92:2d:87:c9:39:a8:33:a6:be:99:5d:2d:e5:2a:64:23:
90:46:bf:cf:54:33:89:71:b9:2f:05:bf:fb:c9:2b:c6:08:f0:
8a:cb:06:19:ad:d7:da:24:88:f5:2b:59:d8:bd:bf:3b:a3:df:
27:08:54:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:58 2025 by rpki-client