Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
File: E_8jyrp-AfaB5z36sXQ_9keN3O0.mft (raw, json)
Hash identifier: SIOsb63xFf/BStaJRtPIhkiI/7R13XWq33TsvOQNxeU=
Subject key identifier: 3D:0A:54:CE:BD:82:63:99:B5:52:AA:BB:B6:4E:46:8A:25:67:DA:87
Authority key identifier: 13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
Certificate issuer: /CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Certificate serial: 019A71B79AFF3CFC02ECE91CF351CFFCD64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
Manifest number: 0490
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: E_8jyrp-AfaB5z36sXQ_9keN3O0.crl (hash: Ig+VvryQ/Oe3hKBQFPJto0u91HEKWtrmybCGhT0x7MU=)
2: lJDuBJQ2g-pa95d14zb3BmzZ6y0.roa (hash: PkfDtleZ8MxNB+BT5gtlIpBNxKZcU3c8R+9W8avuRDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9a:ff:3c:fc:02:ec:e9:1c:f3:51:cf:fc:d6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=3d0a54cebd826399b552aabbb64e468a2567da87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5d:dc:95:5e:bd:1b:df:1a:13:04:ad:37:26:
de:98:84:d4:ab:93:aa:d3:be:22:38:64:a8:c3:5d:
84:5e:b2:3f:96:29:9c:3e:90:9b:37:f8:0f:2e:e7:
99:52:d5:d4:8a:d5:06:fe:3d:69:24:73:59:22:55:
39:af:24:42:c6:11:6a:13:07:10:2b:ec:76:5a:d4:
01:a4:fd:a1:5c:3c:d5:ba:4d:c6:13:1a:30:b8:d2:
19:57:5b:32:71:a4:47:39:6b:c4:88:23:73:b9:9c:
2a:b4:69:d5:d8:56:f8:bb:ea:1d:6f:5d:5b:f5:a0:
79:cc:4c:bc:85:74:51:45:4d:94:f3:ef:bd:91:6b:
bc:5b:52:00:54:ad:a8:bf:2a:b0:17:cd:33:7c:09:
98:c8:12:8b:d2:b2:43:46:e7:c6:e5:c8:d2:02:3a:
5e:b6:cc:ae:9f:24:c4:da:6e:d1:a1:d3:59:29:47:
a9:e3:35:9a:f3:ce:60:ed:33:f8:47:95:40:e4:97:
27:a0:ce:12:22:14:7f:c6:e4:06:b9:1c:6e:0d:3e:
4d:6b:13:76:6a:99:a4:5f:c2:47:be:65:10:09:f0:
09:8c:40:bf:55:b1:46:a6:b7:66:8b:4b:48:4b:7a:
e6:41:6b:06:91:5c:7f:d6:88:8c:06:c6:4d:04:00:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0A:54:CE:BD:82:63:99:B5:52:AA:BB:B6:4E:46:8A:25:67:DA:87
X509v3 Authority Key Identifier:
keyid:13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:85:bb:d4:c4:b4:03:eb:11:78:2f:72:2d:29:6c:7c:1f:fa:
7b:90:a2:7c:d9:c5:90:3d:51:9b:74:13:ea:62:6e:88:3f:a0:
d5:de:be:6a:5a:ad:89:ca:10:e7:e7:5c:2b:41:ff:b7:ee:84:
fc:71:9f:f7:67:65:d5:cd:aa:9c:1a:7a:35:dc:3d:17:82:e7:
b5:c9:d7:0a:6c:90:98:f3:01:8b:08:01:ec:08:cd:d3:b7:07:
00:ef:af:f7:22:b9:8e:9d:b4:07:f3:47:b4:3b:95:c4:b3:ee:
30:bf:84:e7:0f:c4:29:a6:f6:a3:14:33:b8:5e:69:16:5b:8f:
6a:15:e0:de:07:b5:bd:dc:bf:98:0d:13:5d:0b:36:ef:88:72:
78:f7:19:2f:76:ca:fe:c0:43:24:9a:4e:f3:27:40:24:f5:10:
72:1c:d7:09:45:50:3e:45:dd:39:f9:57:24:7b:fe:5e:4e:a0:
29:ea:1e:30:45:5b:f7:2d:d0:5d:e9:ff:41:e8:91:b6:b8:43:
94:b0:9b:e6:80:26:73:a3:ff:85:66:78:a4:0f:e8:7e:ec:7f:
3f:0c:e5:f3:8a:fc:3a:84:29:49:06:f8:b1:bd:4a:bb:68:4f:
b5:3b:9b:59:cb:09:14:17:f1:c5:bc:22:13:37:b7:49:16:7c:
37:23:3f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:19 2025 by rpki-client