Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
File: E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json)
Hash identifier: miHSYeUxls410tsHrXINIDh9dfdgoA8bEMfkiB7oers=
Subject key identifier: E9:59:95:E3:1C:A5:F1:0E:CA:EA:3F:F8:40:B7:25:90:EE:4C:7E:3D
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Certificate issuer: /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial: 019A72932D080FF78A012B2703965E5D9D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
Manifest number: 0DA3
Signing time: Tue 11 Nov 2025 11:00:39 +0000
Manifest this update: Tue 11 Nov 2025 11:00:39 +0000
Manifest next update: Wed 12 Nov 2025 11:00:39 +0000
Files and hashes: 1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: lCJik0pk/Z+/Vt0mJVZtpLFCKTMvWWvp7lPfddd7ZBw=)
2: HN5Ai7UYMPmItHMFu1UIru4_irQ.roa (hash: uhP51xaan/wVcnPelAPmsRFjLXlTf1vXwd1upBi15zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:2d:08:0f:f7:8a:01:2b:27:03:96:5e:5d:9d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
Validity
Not Before: Nov 11 11:00:39 2025 GMT
Not After : Nov 12 11:00:39 2025 GMT
Subject: CN=e95995e31ca5f10ecaea3ff840b72590ee4c7e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4e:6f:df:7f:19:ba:9c:69:66:c6:bd:90:b2:
1e:9b:96:d4:2f:e5:53:6c:c6:a1:57:42:83:d7:56:
89:fb:0e:7c:32:51:c4:73:85:35:6a:e2:c0:74:3c:
58:d6:da:12:ee:10:2b:68:a2:1a:be:f9:96:92:0e:
ec:8e:17:e1:c7:9e:8c:42:f1:be:10:73:63:ae:ea:
d5:56:02:ad:bd:32:02:69:de:49:fa:2e:45:68:b7:
2c:9e:61:3b:50:3a:55:63:ba:09:b5:78:6b:77:9a:
29:64:5d:c2:8e:01:4f:e9:25:12:bf:25:70:0f:76:
a1:25:27:c7:b2:56:5d:1a:31:09:e6:49:bf:da:4e:
27:89:94:c6:6b:50:fb:eb:0f:6c:62:b4:e2:13:26:
74:cb:fc:ae:e4:07:ea:bb:5e:5f:84:1a:16:aa:4a:
98:ea:23:e3:cc:ab:c0:20:69:d3:84:f4:7e:53:af:
d8:90:89:7d:e7:30:48:ae:9e:f6:b9:1d:21:bc:0e:
47:5a:a2:18:19:7e:84:11:c8:5e:7f:89:46:d9:b7:
25:f9:fb:3c:f3:b6:c7:6d:ca:72:ee:c9:af:9c:01:
5e:58:78:e2:1b:42:e7:cb:45:2a:4e:16:85:42:e6:
d6:1b:35:21:ed:80:f7:4b:ab:bb:fd:68:ca:5b:09:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:59:95:E3:1C:A5:F1:0E:CA:EA:3F:F8:40:B7:25:90:EE:4C:7E:3D
X509v3 Authority Key Identifier:
keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b5:45:bc:ee:e2:71:07:cc:8c:ad:4c:47:6b:d2:11:1d:69:
60:fa:7d:7e:5e:57:82:a0:70:af:a0:e4:c5:dc:c0:3c:3b:0e:
43:4d:ca:3c:c9:2b:52:9d:67:d7:fb:01:7d:31:97:24:25:51:
35:ca:d6:5e:c3:3f:16:a1:9e:9b:5f:f6:fa:cd:64:ff:6f:87:
cc:61:31:44:98:a9:6a:9a:22:ed:2c:69:c1:ba:8a:87:00:d7:
94:88:27:60:d5:40:a4:46:be:5f:1f:9f:39:82:33:ca:cc:a3:
65:8c:fd:c3:bd:35:e7:ba:0c:ff:74:1c:76:ff:7a:a1:07:e7:
62:11:a2:1c:ac:ce:5f:2a:e6:30:79:cd:06:6c:28:44:a8:f9:
85:c4:fe:c5:d1:d6:77:18:65:f4:33:72:77:34:32:41:04:22:
9e:f4:35:fd:f5:6a:de:fb:1e:9d:17:be:12:ca:7b:fb:94:af:
7d:4d:00:3c:e6:0d:cd:58:25:44:0d:66:be:f8:f1:2c:76:5a:
81:80:92:85:04:34:8b:4a:d1:66:97:4c:a5:02:80:81:14:eb:
36:06:22:1e:63:81:a6:c4:43:14:9e:ad:36:c0:da:03:96:cb:
60:8b:1b:c8:98:74:85:c9:7a:3f:97:05:b2:05:27:67:45:16:
3d:fb:79:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:35 2025 by rpki-client