Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
File: e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft (raw, json)
Hash identifier: pPzkchtuRrP9GLJaFF/YA0fDh4n4hq7FOiJmiVJ31sM=
Subject key identifier: 93:86:FC:10:62:DC:C5:69:AB:48:CF:44:87:A9:DE:E9:A2:CC:A2:6E
Authority key identifier: 7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
Certificate issuer: /CN=7bd78d9140ad6e742e167063206582c1c45952bf
Certificate serial: 019A71B7CFC742B12B0EA94EE241A1C0E262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
Manifest number: 158E
Signing time: Tue 11 Nov 2025 07:01:02 +0000
Manifest this update: Tue 11 Nov 2025 07:01:02 +0000
Manifest next update: Wed 12 Nov 2025 07:01:02 +0000
Files and hashes: 1: e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl (hash: GUBqBUNfX8H3ZbIjrc/AYgE9cHmkk3b6itYIqWRhLp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:cf:c7:42:b1:2b:0e:a9:4e:e2:41:a1:c0:e2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd78d9140ad6e742e167063206582c1c45952bf
Validity
Not Before: Nov 11 07:01:02 2025 GMT
Not After : Nov 12 07:01:02 2025 GMT
Subject: CN=9386fc1062dcc569ab48cf4487a9dee9a2cca26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:36:f3:ef:a6:b6:b2:f2:e2:a4:65:d5:dc:
89:44:6f:d9:9f:a8:bd:c8:f9:7e:64:7f:7e:16:dc:
de:fe:02:1e:0c:0c:7f:0b:e8:6e:cd:d1:a7:f0:cf:
43:3f:ed:4b:70:bf:45:e3:ed:54:54:18:ce:86:b2:
84:fc:dd:a6:64:c8:4b:e7:39:48:53:b7:96:9f:4a:
21:67:c8:c4:ef:69:76:57:41:53:3f:bf:a3:b7:1e:
af:a2:57:04:8e:c1:ab:9f:f6:ea:c8:3c:f0:6b:34:
9a:9e:a1:c4:93:0a:6b:e0:37:ba:7a:a9:65:20:3d:
93:a7:1d:cf:63:2c:cf:f5:5a:8b:04:01:d5:15:d7:
f5:cb:78:59:82:b4:3b:35:32:8b:1f:2b:f3:dd:51:
f9:de:45:6d:41:a1:ad:34:a6:8a:9d:f2:11:21:08:
10:c7:df:40:c0:68:2e:2b:5d:75:f9:f2:5e:5b:68:
60:41:d6:62:8c:df:dd:83:10:00:b4:a8:84:56:40:
7c:aa:26:64:d4:99:e9:fa:3a:76:34:9b:6a:98:ca:
e2:04:a7:d2:b7:71:15:2f:8f:47:46:72:b4:3f:2d:
e9:b9:4f:70:1f:41:22:2b:ce:fb:64:1e:4e:cc:12:
2f:78:14:57:6b:9e:c3:e4:f4:b2:45:48:ef:6a:04:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:86:FC:10:62:DC:C5:69:AB:48:CF:44:87:A9:DE:E9:A2:CC:A2:6E
X509v3 Authority Key Identifier:
keyid:7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f7:09:b3:2e:c4:2c:6d:49:d4:69:d2:18:d5:a4:73:10:16:
49:46:2e:ed:c8:2f:c5:cf:0e:5c:83:83:29:c0:7e:b2:2f:02:
ac:51:5a:b8:7e:23:63:0c:d6:b8:07:15:25:d9:7a:b1:c2:eb:
91:e1:cb:cb:12:58:7b:5c:8e:0f:dd:60:c6:86:6c:10:ca:fd:
8e:0e:d3:90:d0:dd:2e:e2:31:91:b8:85:40:8c:a4:23:54:eb:
7e:9a:b7:96:d9:69:f5:a9:fc:f5:af:84:61:1e:0e:91:a9:a1:
c5:6b:2f:65:88:04:11:4d:b8:74:a9:b1:e0:33:07:a6:fb:3f:
79:7c:db:58:84:8e:d4:a1:8c:2d:65:23:84:63:dc:6e:fc:92:
8d:8a:a5:cf:59:48:1e:54:b1:c9:cb:71:8a:a3:b5:18:a0:78:
95:4e:28:53:22:62:c3:a5:e6:9c:3b:2f:f3:c1:c6:9c:16:b1:
d2:22:ff:79:8f:0a:e7:74:ac:29:fc:18:1f:31:30:0b:4c:c6:
99:16:f6:05:af:66:9f:cb:3e:33:19:4a:27:bd:83:51:02:b2:
46:60:75:8b:28:35:a1:27:67:3c:51:f6:1f:ed:a9:38:4c:73:
d2:a5:4b:3f:3c:62:ac:63:8b:1e:f9:5a:c6:94:fe:68:62:61:
9a:12:be:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:36 2025 by rpki-client