Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
File: E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json)
Hash identifier: WQwi/ay+/qSqUKbpxxywxYlJRyc2tsLJoKncCDHORDc=
Subject key identifier: A4:87:1B:B2:6E:AB:42:6C:6B:FD:72:56:69:44:48:B9:E6:4C:52:D0
Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Certificate serial: 019A71EE7DA94BD760080ED4AA4996F4F13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 08:00:46 +0000
Manifest this update: Tue 11 Nov 2025 08:00:46 +0000
Manifest next update: Wed 12 Nov 2025 08:00:46 +0000
Files and hashes: 1: 9htWy01pg2D2zYDPH366mUte-18.roa (hash: EzJGaZ3hn2rEMiPwCBKqVw/ZKa/ezLWPSIlGniopSlk=)
2: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: KrkF1mPVzLNaSZkcWSsw6ZPAY9a1KEKMm5VklJtuUIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7d:a9:4b:d7:60:08:0e:d4:aa:49:96:f4:f1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Validity
Not Before: Nov 11 08:00:46 2025 GMT
Not After : Nov 12 08:00:46 2025 GMT
Subject: CN=a4871bb26eab426c6bfd7256694448b9e64c52d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:22:97:87:ac:c9:24:c7:9f:de:b7:94:2c:
7b:49:12:60:52:78:24:5f:19:da:33:00:42:51:18:
f1:c1:b3:4f:6a:d2:71:bb:c7:ee:7e:5e:a0:17:85:
55:b2:df:ee:f4:a8:86:44:d9:cd:e0:40:be:02:bd:
6a:bc:3d:71:d6:56:fa:60:21:21:bc:9a:92:3c:d7:
43:b8:e4:8d:d2:69:57:0e:67:23:fd:dc:b4:3c:a5:
0c:79:9d:6d:e4:69:f2:85:e0:84:f3:05:37:2a:4b:
92:c0:07:b8:40:78:ee:37:ed:57:38:d2:de:e4:c9:
85:13:cc:a2:eb:b0:30:2a:d5:31:81:14:8d:71:58:
a0:89:42:3c:65:a2:5b:ae:48:3e:76:7f:0f:46:ce:
7a:07:70:59:cb:c2:50:9d:6b:2a:bc:fa:f3:bf:b2:
70:48:d9:9c:f3:98:98:f0:ad:3e:29:b9:00:01:4b:
d4:37:15:b8:d5:fa:b2:cd:74:fc:07:37:d9:6c:bb:
43:eb:24:6d:11:63:44:45:9b:3b:50:37:82:61:c5:
31:48:07:f9:e8:02:7c:c1:b6:7d:71:0a:f0:fc:7b:
df:9a:46:b4:01:94:2a:5d:cc:a2:ad:13:76:d2:14:
b6:77:a6:75:78:95:34:69:cf:d5:f8:ec:3c:83:99:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:87:1B:B2:6E:AB:42:6C:6B:FD:72:56:69:44:48:B9:E6:4C:52:D0
X509v3 Authority Key Identifier:
keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:43:60:fb:fe:ef:36:c3:79:4a:2a:dc:47:1c:e0:80:e5:22:
96:ef:75:57:e9:aa:31:32:9c:44:26:3c:8f:e4:bf:3b:03:5f:
da:0f:6d:de:b5:83:78:81:0f:7c:74:94:c0:42:c6:e4:76:9d:
3c:73:29:08:44:76:a3:ea:03:94:5e:a4:25:de:8e:d3:1b:4b:
f7:22:ce:99:63:33:35:11:a4:26:08:4e:ee:cf:0e:fd:53:22:
bb:5c:9a:2b:8d:64:8c:a3:18:46:5c:17:56:87:4e:9a:4d:6c:
4b:b2:4c:7f:d5:63:0d:17:5f:2f:83:cd:4e:1b:b9:c9:7e:66:
1c:c6:2c:b9:9b:bf:09:96:1b:da:0e:89:86:c1:ed:3d:4e:41:
c1:ac:15:d1:bc:ed:f4:0c:de:cb:7e:48:5d:5d:21:73:23:9b:
d4:12:8c:ee:b6:0c:7e:52:31:1b:60:6f:0b:76:7f:96:c3:05:
c8:a1:b2:fd:48:fa:88:e9:d5:6d:97:6c:63:46:4f:24:78:31:
7f:f4:a9:54:e5:db:15:68:8b:bd:1b:8a:97:91:b9:b4:fa:ad:
55:93:44:d7:ff:6c:78:cf:91:6a:08:05:3a:78:1d:c6:4f:6a:
6b:78:ef:a8:25:12:98:79:5f:e5:c2:99:71:e8:cc:12:74:7a:
e8:1f:0c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:17 2025 by rpki-client