
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
File: E82HAn19OjuffEukSV5J4hrVpLs.mft (raw, json)
Hash identifier: bvM7x5Ta60CohnxUjmjS2FvFRWwFh5RMjJ8UsbX009M=
Subject key identifier: C3:F8:B7:85:01:2F:DC:CC:94:A5:C3:03:61:F5:C6:5D:C6:C1:D0:33
Authority key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
Certificate issuer: /CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Certificate serial: 019A2C9F82B331DB718E7F09E93243ED1AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
Manifest number: 12D9
Signing time: Tue 28 Oct 2025 21:00:42 +0000
Manifest this update: Tue 28 Oct 2025 21:00:42 +0000
Manifest next update: Wed 29 Oct 2025 21:00:42 +0000
Files and hashes: 1: E82HAn19OjuffEukSV5J4hrVpLs.crl (hash: pDIiiUFFgPLEMVzJoIuwwhDw0P7QSsoZ7dU9YcEnIPo=)
2: RAwW8IE1n9sVekuiCyEikAL5HtE.roa (hash: R2iI0k0l7koAhrOpg0u96qvpaz2J9avElrVz1cFdebo=)
3: RNSC3VsqxwY5F2CPaJmOCK9DnZw.roa (hash: 7V4nDCtb0KwqDCqyA/QY/lvyHUYCIvkngjaYw/DzojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:9f:82:b3:31:db:71:8e:7f:09:e9:32:43:ed:1a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Validity
Not Before: Oct 28 21:00:42 2025 GMT
Not After : Oct 29 21:00:42 2025 GMT
Subject: CN=c3f8b785012fdccc94a5c30361f5c65dc6c1d033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:75:6a:be:47:81:08:2c:e1:29:ba:f2:93:
c9:be:c2:5c:22:1b:b5:c5:0e:c0:e6:fa:6e:98:4f:
19:37:83:3e:fe:4e:c7:d6:ed:15:5b:32:f3:12:cc:
55:ca:a4:52:6c:87:c4:56:e6:cb:32:22:9d:ee:d9:
a7:bf:ca:2a:ff:ba:91:fa:33:79:37:ab:28:fb:77:
05:d3:42:8f:15:99:0b:6a:50:1e:06:37:1f:9b:6c:
7a:5e:b5:df:45:e4:29:4c:ba:9a:d7:97:d2:db:c5:
b6:c1:c0:7f:d3:83:78:6b:09:de:4c:8b:6e:c8:cb:
91:a7:f5:61:09:61:f3:9e:b0:d4:31:24:9f:f0:df:
57:3f:81:0f:fa:f3:ca:1d:89:f6:a8:e3:13:c6:8c:
10:5f:f3:b4:31:8f:b4:c6:f3:9e:47:8e:cd:4c:71:
1d:d9:7f:8a:38:f1:6a:ba:88:9b:ed:99:ab:08:1f:
a2:ef:72:50:4a:3d:a4:ca:d6:dc:28:4f:e9:8e:9f:
1e:07:51:5e:77:3b:55:44:b8:a3:6e:ed:4f:78:28:
65:52:6d:84:db:68:08:e2:8d:ce:95:25:59:cd:8d:
63:b7:fd:52:f7:5a:5d:eb:e5:ba:00:95:94:1e:6e:
30:cf:44:7a:4a:d4:de:38:84:b1:60:e1:b1:31:d7:
75:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F8:B7:85:01:2F:DC:CC:94:A5:C3:03:61:F5:C6:5D:C6:C1:D0:33
X509v3 Authority Key Identifier:
keyid:13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8a:e7:f7:36:94:cc:f7:17:f1:ca:2e:e9:a6:6e:a9:ea:64:
77:91:d4:54:21:b7:b1:9c:90:ea:7b:6b:84:36:23:10:23:67:
e8:26:c9:22:33:b9:89:59:59:5f:2c:a6:99:c3:b8:e1:ae:f6:
88:a0:2f:b3:f1:ab:99:94:86:07:d5:47:36:20:8b:3e:57:cc:
d6:76:aa:7a:55:36:f7:6f:81:b3:f9:48:36:77:49:58:36:75:
9d:94:e8:46:45:cc:9c:18:cf:e5:b4:3f:db:1c:6c:0e:4a:f6:
f8:6a:01:60:0d:4f:69:93:af:d1:85:61:b2:6b:4a:86:e9:3c:
76:c7:94:63:37:19:75:a9:2e:54:2e:28:6c:10:f5:12:8c:a9:
d2:2f:af:3d:33:df:b5:13:c8:f5:b8:cf:07:c8:f8:08:20:77:
84:60:c4:b1:24:46:77:d9:a0:ea:cc:38:d3:55:03:76:ef:5f:
f5:6f:e4:cf:ea:40:91:fb:f0:79:79:83:3d:62:fc:b3:b6:10:
23:43:df:6f:39:61:70:50:d1:12:63:36:bf:e5:72:0c:81:ac:
7e:37:af:e3:a1:0c:11:2b:16:a0:dc:2a:9b:1e:12:e5:99:24:
bd:5e:50:1a:1b:73:3b:40:3c:50:70:e0:1d:c3:3e:96:49:14:
d9:89:92:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 06:17:03 2025 by rpki-client