Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
File: E-XdFL3pMjctyLWTLMVNYI276Qg.mft (raw, json)
Hash identifier: eYVzCMN2ZpD2WM20Gj2cKUc5oZmepbwqKYa3iLPuVxw=
Subject key identifier: 0E:27:C5:EC:B7:17:D8:40:EA:28:C7:66:60:74:A4:D3:5B:32:AE:37
Authority key identifier: 13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
Certificate issuer: /CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Certificate serial: 019A4C2A24F3009B7549BDCF6413FE17CC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
Manifest number: 02FB
Signing time: Tue 04 Nov 2025 00:00:21 +0000
Manifest this update: Tue 04 Nov 2025 00:00:21 +0000
Manifest next update: Wed 05 Nov 2025 00:00:21 +0000
Files and hashes: 1: 12_j47AEFlNkQmnvJ6lQS6k9OJM.roa (hash: QL5MIkOPhYomrHDRf0wI6//DVHKZ3F+ShGeX+xkxEXo=)
2: E-XdFL3pMjctyLWTLMVNYI276Qg.crl (hash: J6f9ZHp/WAcPejs9KQJcJvcs7A0LWQSgyDfKsAKJsgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:2a:24:f3:00:9b:75:49:bd:cf:64:13:fe:17:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Validity
Not Before: Nov 4 00:00:21 2025 GMT
Not After : Nov 5 00:00:21 2025 GMT
Subject: CN=0e27c5ecb717d840ea28c7666074a4d35b32ae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:73:70:27:53:6a:68:8d:24:3f:7f:36:1e:b6:
86:7f:78:b5:0f:b7:25:49:ca:55:c6:f5:10:93:f2:
47:e8:e9:28:b8:11:4d:33:23:b4:d9:ac:d5:ed:fc:
8f:cb:82:bb:30:40:8e:c4:b3:c5:2d:ca:c4:3e:6a:
0e:fc:d3:d0:00:33:85:e7:9d:c3:4d:a3:fb:22:b0:
99:f7:b7:e5:b4:de:59:11:88:61:02:19:14:10:a7:
24:a9:17:f9:f4:c8:0f:59:a7:f1:d0:62:10:04:0c:
b4:c2:cd:4c:18:33:5f:45:42:41:88:79:4d:a3:50:
92:a6:9f:19:03:ce:84:af:d1:f9:36:20:9b:bf:2b:
34:b1:89:52:e6:a9:6a:89:a8:6c:e8:d3:d6:d4:69:
c4:31:d0:8b:2d:0e:f7:64:ff:0a:4a:b1:24:46:4b:
74:08:ff:5e:ee:e2:ff:8a:51:e5:05:7e:bc:7d:00:
55:15:e5:10:19:32:17:32:04:c5:a3:35:92:ce:bf:
dd:73:45:21:22:71:2f:94:a0:a9:af:b1:53:e7:3d:
be:3e:81:0f:d8:9e:30:9a:d7:b4:f8:25:79:4e:c8:
18:58:5f:d6:79:ea:f4:11:35:c0:01:4f:0e:c0:c4:
90:f1:b9:8e:35:2e:a9:fb:bb:3d:79:48:15:bb:61:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:27:C5:EC:B7:17:D8:40:EA:28:C7:66:60:74:A4:D3:5B:32:AE:37
X509v3 Authority Key Identifier:
keyid:13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:29:cf:95:11:e3:96:dd:36:94:17:8a:60:c8:a9:c2:ed:12:
ff:b6:09:5f:40:18:fa:e3:55:a7:6a:94:53:ec:c6:5a:c0:14:
bd:92:a6:99:2c:e2:0f:d2:27:e7:62:bb:0e:f2:fd:ed:00:b7:
c3:ea:16:8d:e0:0b:9a:81:ef:e6:55:36:70:df:97:78:9a:6d:
fb:a6:11:b0:4c:75:40:fa:85:1c:47:12:5b:0a:66:fa:54:ee:
6e:b1:17:63:c7:f6:ac:02:c5:fd:67:14:e4:0d:f0:9a:29:92:
f1:8f:f1:af:61:2c:91:c1:4e:68:5d:ba:62:cd:39:1b:af:94:
33:25:50:e4:63:c4:1f:fe:ff:15:35:a5:89:a9:12:2d:41:d8:
91:f8:0c:83:9a:a7:16:f6:3c:d9:4a:94:11:02:30:b6:b7:fd:
1a:ef:ef:b6:be:26:69:bd:b4:78:b6:21:09:7a:f6:a5:bf:57:
40:a9:59:68:c8:3e:ba:b6:30:37:e7:63:ed:3c:b0:9f:42:20:
53:cd:c7:98:78:64:81:35:60:7a:4a:71:15:5f:93:4e:f5:3a:
50:02:fa:dc:b0:73:2e:70:91:78:cb:9f:f5:db:58:31:10:e1:
24:0d:0c:46:3f:f5:11:24:ac:c4:d1:c3:6f:4c:44:07:ef:a6:
92:a5:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:17 2025 by rpki-client