
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
File: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft (raw, json)
Hash identifier: KDjfgUG7hAh+Etc3DQfAOCb1c58wtWdzU8nap+v7QtY=
Subject key identifier: 89:0E:D6:7D:2B:8C:AB:25:EA:FD:8C:74:CC:68:F7:C7:9F:CF:C1:B3
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Certificate issuer: /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial: 01992DB4BCF8AEA07EF931DD6C2B270950CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
Manifest number: 167E
Signing time: Tue 09 Sep 2025 09:00:43 +0000
Manifest this update: Tue 09 Sep 2025 09:00:43 +0000
Manifest next update: Wed 10 Sep 2025 09:00:43 +0000
Files and hashes: 1: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl (hash: fXX9F0NnLfXdHd9RqQGb79qyMwvqEBMtUHNmBSbfKyU=)
2: dovIL-gTzJ_aoQv0YqdSPue-W8c.roa (hash: xvPlQMVt6KADuNdSrMZISm2hi7tJLKf4OAcoc3dyLHM=)
3: eG_gGxLivr2ewefCZXKvl9LEIQ4.roa (hash: 4AFKJ4zK1Zt8UICDrX7yj7rG6ous3rW3n9Muuzhoyfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b4:bc:f8:ae:a0:7e:f9:31:dd:6c:2b:27:09:50:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Validity
Not Before: Sep 9 09:00:43 2025 GMT
Not After : Sep 10 09:00:43 2025 GMT
Subject: CN=890ed67d2b8cab25eafd8c74cc68f7c79fcfc1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:47:03:f6:84:bf:49:1a:74:f0:24:b0:58:
03:c7:44:12:87:93:80:1e:43:4a:c6:5b:5e:7d:3f:
e3:49:70:fc:4d:b5:09:8e:a9:f7:3a:96:0a:47:bd:
18:1b:cf:12:0c:5a:42:76:06:c0:b6:f6:11:a2:54:
22:c5:79:c4:15:83:15:86:cd:3c:78:72:a9:0b:42:
cf:54:c5:54:56:f8:f9:84:25:3c:ad:3d:cb:e5:15:
82:97:43:4d:31:39:76:fc:dc:b7:97:0a:73:dd:7e:
8e:82:a3:f2:e8:9e:31:f7:54:5d:fe:ae:4f:d2:c8:
33:c4:3d:04:9c:8c:21:56:1f:76:ad:46:4e:b5:ff:
07:11:d4:17:d9:a0:77:64:6b:30:16:8d:a7:43:2d:
61:1f:98:f1:dd:0f:e5:b4:63:36:25:14:31:7d:f9:
af:d9:05:5d:6b:d3:ff:2a:77:74:81:5a:01:5f:8f:
34:54:db:7b:dd:6a:5d:3e:6b:04:b5:13:2b:c3:e1:
ff:e8:59:87:17:69:5d:d6:12:83:73:6f:99:2f:56:
98:84:b0:1e:f5:22:3e:86:f6:66:4d:42:b8:f2:69:
f4:33:a1:ac:db:39:3f:07:9a:9b:9d:2f:85:49:38:
2d:77:46:02:57:48:b6:f5:ae:91:48:ad:75:10:7b:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0E:D6:7D:2B:8C:AB:25:EA:FD:8C:74:CC:68:F7:C7:9F:CF:C1:B3
X509v3 Authority Key Identifier:
keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:81:8c:8e:61:1c:2e:99:6f:eb:bc:8c:e2:47:d0:d7:0a:2b:
3c:95:e9:46:45:a9:f2:2d:60:e8:12:2d:e9:00:89:eb:33:e1:
ed:0a:ac:c2:1f:23:80:b9:22:ff:f1:e8:c5:d6:c8:a5:d9:be:
0f:f3:6a:13:d5:77:c4:94:72:4c:9b:d1:8f:ce:1d:99:44:62:
c3:cb:ab:24:69:2f:08:c3:34:60:f1:95:4d:d7:00:d1:3a:e5:
e5:e8:c3:a5:00:4e:be:e8:c2:da:71:97:17:ab:01:96:91:39:
e4:c8:b2:07:95:87:63:4f:6d:3e:17:65:b8:93:7b:8b:f4:5b:
32:cf:eb:d7:32:fd:f4:2f:9c:74:03:79:a1:6d:ab:7c:08:5c:
50:3c:38:1f:33:68:8d:9c:24:98:88:0d:28:e5:1e:f7:cf:d3:
f2:43:fe:e4:3e:a9:32:9a:2c:ef:2f:19:bc:1a:01:9f:a3:e5:
e4:f5:d9:96:d0:9d:5b:eb:f3:f4:7c:0f:4c:4f:d3:ed:7a:43:
f2:8a:0e:e0:3c:cf:4a:5e:09:98:e5:ca:ee:26:26:90:3c:0f:
b6:c0:aa:c0:3e:0e:31:93:9f:23:00:b4:25:4d:d3:b3:fe:10:
4a:f3:6e:90:07:c2:17:b7:8a:02:d3:e3:65:26:34:f1:4b:9a:
1a:53:8c:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkttLz4rqB++THdbCsnCVDLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDU5ZmQ2ODNlMzU3MGQ2Mzg5NTUzMGNlYjlmMmM4NGZl
ZmUwYTMwHhcNMjUwOTA5MDkwMDQzWhcNMjUwOTEwMDkwMDQzWjAzMTEwLwYDVQQD
Eyg4OTBlZDY3ZDJiOGNhYjI1ZWFmZDhjNzRjYzY4ZjdjNzlmY2ZjMWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsetHA/aEv0kadPAksFgDx0QSh5OA
HkNKxltefT/jSXD8TbUJjqn3OpYKR70YG88SDFpCdgbAtvYRolQixXnEFYMVhs08
eHKpC0LPVMVUVvj5hCU8rT3L5RWCl0NNMTl2/Ny3lwpz3X6OgqPy6J4x91Rd/q5P
0sgzxD0EnIwhVh92rUZOtf8HEdQX2aB3ZGswFo2nQy1hH5jx3Q/ltGM2JRQxffmv
2QVda9P/Knd0gVoBX480VNt73WpdPmsEtRMrw+H/6FmHF2ld1hKDc2+ZL1aYhLAe
9SI+hvZmTUK48mn0M6Gs2zk/B5qbnS+FSTgtd0YCV0i29a6RSK11EHveeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkO1n0rjKsl6v2MdMxo98efz8GzMB8GA1UdIwQY
MBaAFBPVn9aD41cNY4lVMM658shP7+CjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlXZjFvUGpWdzFqaVZVd3pybnl5RV92NEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80MTBlYWYtZjgyZC00N2ZmLTk5MjYt
MGIxYjMwODk1NjAyLzEvRTlXZjFvUGpWdzFqaVZVd3pybnl5RV92NEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi80MTBlYWYtZjgyZC00N2ZmLTk5MjYtMGIxYjMwODk1NjAy
LzEvRTlXZjFvUGpWdzFqaVZVd3pybnl5RV92NEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4GMjmEc
Lplv67yM4kfQ1worPJXpRkWp8i1g6BIt6QCJ6zPh7Qqswh8jgLki//HoxdbIpdm+
D/NqE9V3xJRyTJvRj84dmURiw8urJGkvCMM0YPGVTdcA0Trl5ejDpQBOvujC2nGX
F6sBlpE55MiyB5WHY09tPhdluJN7i/RbMs/r1zL99C+cdAN5oW2rfAhcUDw4HzNo
jZwkmIgNKOUe98/T8kP+5D6pMpos7y8ZvBoBn6Pl5PXZltCdW+vz9HwPTE/T7XpD
8ooO4DzPSl4JmOXK7iYmkDwPtsCqwD4OMZOfIwC0JU3Ts/4QSvNukAfCF7eKAtPj
ZSY08UuaGlOMLA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:15:20 2025 by rpki-client