Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: /XGBYPZropVTGRqPJfHUZaEyMuskYzbSFOKtEv/FElk=
Subject key identifier: 24:69:01:05:04:E7:04:1D:97:C0:48:C6:C3:CD:11:B3:4E:1F:BF:BA
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 0199C86AD0E66A26C580732839ED9FFD6DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 05F0
Signing time: Thu 09 Oct 2025 10:01:06 +0000
Manifest this update: Thu 09 Oct 2025 10:01:06 +0000
Manifest next update: Fri 10 Oct 2025 10:01:06 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: OTj+a1pUvPwUZfspuAyRJgxr6V2LAWl+e4tQBmI4u/k=)
2: mlSv0z_DmDnRb-AxotDJXsB_eHs.roa (hash: a6N3OYEbnbT+vGvxsKvRq+KvHJJy4jyn8uVLzPAW9y4=)
3: zStWlFKn8ajT-k4L_oV1Ttw-akk.roa (hash: XiRaOikrwOz45cDAwYif8C491fxrqYPE1ziMmxijlPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 07:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:6a:d0:e6:6a:26:c5:80:73:28:39:ed:9f:fd:6d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Oct 9 10:01:06 2025 GMT
Not After : Oct 10 10:01:06 2025 GMT
Subject: CN=2469010504e7041d97c048c6c3cd11b34e1fbfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:f9:6a:3a:71:95:c3:67:d9:15:17:b7:6c:
08:c5:47:07:f2:4c:91:02:4c:57:67:9c:ae:66:10:
bc:18:c0:e3:01:c2:bc:ec:dc:9e:f9:42:c1:57:3b:
14:40:43:e5:84:99:d8:ab:dc:42:45:2a:8d:14:e4:
e2:5e:06:d1:4e:e6:f9:58:a3:69:5c:f8:04:71:4a:
2e:65:01:f5:43:fe:97:e3:fb:ed:a8:42:3e:24:c3:
87:38:4e:88:dc:e1:19:0d:16:5f:24:8d:a7:67:47:
7a:9a:cb:5f:bc:28:c8:ed:31:8f:28:30:22:d9:8c:
46:65:4e:f8:3b:d1:0a:da:d4:24:e0:4e:34:10:23:
d0:f6:ad:85:74:60:1d:3e:2b:35:9c:12:a1:8b:a7:
cc:53:39:ab:bf:0f:e2:b8:92:c4:4e:72:6e:35:96:
ad:a7:7a:59:f9:22:4e:d0:84:9d:93:f3:e0:2f:3b:
b4:fa:7f:bc:9c:e1:09:2f:da:29:58:eb:99:66:45:
51:06:82:47:b2:1a:94:0c:55:a2:30:ff:e7:bf:3c:
1e:b3:b9:f9:f5:15:86:77:22:b5:fc:3e:a7:ce:8d:
1f:95:b4:8d:b9:52:b0:8d:41:80:01:de:02:95:55:
3d:fe:e2:8d:a9:d6:30:f6:60:5f:9c:30:d2:27:0e:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:69:01:05:04:E7:04:1D:97:C0:48:C6:C3:CD:11:B3:4E:1F:BF:BA
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:99:96:ce:05:76:f4:f6:90:be:7f:22:91:d8:b3:1f:66:8b:
a6:e9:a2:11:ef:ee:5c:08:5f:76:9a:44:c1:33:42:81:c9:97:
50:d0:75:48:82:93:2b:a7:cb:1b:55:8b:df:9c:9d:f2:8a:70:
a6:98:2c:e7:60:05:b5:90:d6:11:07:0d:6c:e5:46:90:aa:06:
1d:d1:fa:58:53:94:6e:88:37:ab:d9:cf:9d:e2:4f:2d:8e:6f:
5e:b9:62:1e:cb:24:1c:1e:31:8b:65:95:40:fe:dc:c1:ef:6f:
1b:aa:8d:ed:f5:f3:af:eb:b0:59:56:54:ad:af:41:45:a7:20:
7a:fa:b7:ff:b4:7a:c8:b0:b9:87:64:5f:68:73:fb:7a:76:7f:
88:bc:74:f3:38:b6:23:aa:90:fa:20:7f:e2:20:b2:b3:69:d7:
f3:8f:6c:36:be:0a:c0:33:58:b9:f2:e3:e7:18:6c:1b:25:d3:
dc:ed:e1:20:24:13:b4:c7:25:01:c8:17:ef:d1:df:4c:f7:2f:
8a:76:7a:a7:3a:3f:c5:1f:2e:e7:6d:4e:51:5c:b4:c9:32:33:
7e:a4:74:e9:a4:ee:af:e9:99:cb:53:43:89:b5:36:42:3f:8a:
92:28:eb:db:bb:1f:aa:71:b8:28:7d:ef:6e:0b:6a:2e:b7:98:
37:86:f1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 14:16:08 2025 by rpki-client