Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
File: E_8jyrp-AfaB5z36sXQ_9keN3O0.mft (raw, json)
Hash identifier: kR9vjuntF5YfpVd5hulLrEHt0hiY86rsqpd6cLz/Kvg=
Subject key identifier: BB:53:73:E7:E9:BC:EB:83:38:20:0A:74:03:00:52:09:2F:9A:DC:B0
Authority key identifier: 13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
Certificate issuer: /CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Certificate serial: 0199239EB7200F748617DD6FEF3B8CF14330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
Manifest number: 03E3
Signing time: Sun 07 Sep 2025 10:00:27 +0000
Manifest this update: Sun 07 Sep 2025 10:00:27 +0000
Manifest next update: Mon 08 Sep 2025 10:00:27 +0000
Files and hashes: 1: E_8jyrp-AfaB5z36sXQ_9keN3O0.crl (hash: u2ZkiVf1bPdBN/sss540MEjxDMUZaZNmdfP1m/kCkw4=)
2: lJDuBJQ2g-pa95d14zb3BmzZ6y0.roa (hash: PkfDtleZ8MxNB+BT5gtlIpBNxKZcU3c8R+9W8avuRDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:b7:20:0f:74:86:17:dd:6f:ef:3b:8c:f1:43:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Validity
Not Before: Sep 7 10:00:27 2025 GMT
Not After : Sep 8 10:00:27 2025 GMT
Subject: CN=bb5373e7e9bceb8338200a74030052092f9adcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ec:12:b2:9f:bd:23:fd:63:16:43:2d:77:f9:
8f:a1:07:ab:aa:4b:06:20:c8:c8:c2:0f:1f:d3:75:
bb:a6:a5:4c:e5:6c:85:bc:69:56:98:3b:13:15:ee:
f5:98:94:e4:c5:20:2e:63:3a:d6:bf:f3:4c:15:a7:
22:64:b3:06:ed:28:17:5a:8f:39:bf:ad:a6:17:57:
28:fa:89:18:b7:4c:7e:fb:3b:8e:fc:21:8d:b5:56:
79:59:d7:33:3a:44:92:cc:50:56:b9:0c:2e:d7:87:
97:b9:6d:a9:58:38:10:df:b9:46:83:23:91:a7:e8:
a3:15:6a:43:05:57:b9:4c:23:48:dc:98:17:c9:a6:
9b:e5:6a:3b:d7:91:ce:15:db:19:ca:7c:8d:57:6d:
da:d2:a2:89:78:a1:bc:aa:6e:76:a8:7c:3f:bf:b3:
0e:c8:85:30:2b:95:29:36:4e:74:ac:c4:52:05:8e:
c5:50:4f:a6:eb:2c:4d:dc:ea:fc:c6:1d:42:66:cd:
a7:14:1b:09:cd:c4:53:bb:a9:02:18:2a:a9:27:f0:
2c:f9:17:64:91:39:5c:bc:11:be:6e:6a:55:e3:bd:
51:df:65:41:88:b4:fa:97:31:5f:73:2d:a6:b8:1d:
46:1c:aa:d2:22:43:64:18:c3:95:37:aa:c0:63:ff:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:53:73:E7:E9:BC:EB:83:38:20:0A:74:03:00:52:09:2F:9A:DC:B0
X509v3 Authority Key Identifier:
keyid:13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ec:4d:c9:05:35:45:18:98:47:28:5d:c8:d7:a6:7b:55:44:
41:81:88:16:77:40:3c:15:2b:5c:61:15:25:b6:c1:18:8b:06:
e5:a1:bf:8d:cf:1a:9c:4c:31:c7:e5:0b:da:8c:24:13:6b:59:
e4:5b:a0:f1:de:bb:c4:7a:e8:57:69:3a:55:8f:cc:1a:31:4a:
86:60:62:aa:c1:45:a8:b0:39:d7:34:25:40:21:98:39:41:d9:
b2:e7:d5:e6:6e:02:d5:3b:bc:d0:c6:35:f4:43:ad:d4:bc:65:
68:54:e5:f1:31:ce:66:a8:7d:a4:28:84:2b:3b:b2:d9:6f:e8:
9e:aa:37:0a:b1:e0:1c:aa:38:8c:5d:2a:08:03:b2:b3:57:33:
27:f1:53:72:4a:00:a8:a0:a4:cc:ba:6f:63:e1:ff:67:2b:a1:
a6:e8:e0:84:d2:19:e7:47:64:d1:5b:2c:9b:22:b7:dd:68:d9:
dd:dd:b1:21:14:2b:3d:0b:7f:46:4b:5c:3e:22:47:00:cb:ad:
cb:3e:c1:e8:72:94:c3:63:74:6e:4c:39:26:d1:07:78:5c:94:
49:22:d8:a9:95:1f:11:5e:6e:9a:5a:a7:50:7e:90:7b:a6:3d:
47:b9:16:12:4a:8f:43:7d:3b:21:f5:b2:3b:cd:18:89:da:ea:
22:98:a0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:48:38 2025 by rpki-client