Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
File: E5yjeZVTueGA0zREIyMANRNIXi0.mft (raw, json)
Hash identifier: CUdz06+lKZZUraDS26ydqeIDqApRuf1LnzAQX5yluQU=
Subject key identifier: 39:E4:95:C0:9A:96:A0:27:0A:D1:D1:F3:67:B2:2D:B0:6D:BF:33:35
Authority key identifier: 13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
Certificate issuer: /CN=139ca3799553b9e180d334442323003513485e2d
Certificate serial: 019A7225D923036812A4DF20655468B8188D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
Manifest number: 16EF
Signing time: Tue 11 Nov 2025 09:01:14 +0000
Manifest this update: Tue 11 Nov 2025 09:01:14 +0000
Manifest next update: Wed 12 Nov 2025 09:01:14 +0000
Files and hashes: 1: E5yjeZVTueGA0zREIyMANRNIXi0.crl (hash: Dmr2nGrLpn+yHg8U8gGpvPOlHsgEAWzSuHfHewgQ3QM=)
2: VuytbJWnX4HD7PpdwN7icMORJow.roa (hash: BrUMMRwqEQ5pwpgROK+rfe5Glg3t81keS5wtXfQUg74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d9:23:03:68:12:a4:df:20:65:54:68:b8:18:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139ca3799553b9e180d334442323003513485e2d
Validity
Not Before: Nov 11 09:01:14 2025 GMT
Not After : Nov 12 09:01:14 2025 GMT
Subject: CN=39e495c09a96a0270ad1d1f367b22db06dbf3335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:82:de:cc:be:d8:40:15:b7:4f:14:9a:d6:
fa:21:77:0b:49:38:0d:08:08:ef:de:f9:99:93:3a:
85:ac:a8:64:63:e5:96:3d:31:ab:5d:1b:73:72:3a:
42:df:39:c3:27:61:0e:4f:91:f2:a2:02:c7:88:37:
2f:cf:ff:92:65:72:34:83:5d:69:43:3e:d8:b2:11:
a2:05:4d:97:47:28:32:b0:5f:c9:02:94:97:e2:e8:
ea:c5:b6:e3:9c:59:f4:ea:f8:4e:30:07:50:ac:09:
81:97:09:2b:af:a6:f3:07:1c:56:55:9e:50:e5:71:
85:2c:85:fd:0d:7e:4c:75:d7:75:e4:c4:54:0e:52:
20:62:e8:6c:52:8d:8f:f9:af:d8:7f:7b:ae:6e:d0:
2a:77:b5:9e:fd:4a:3a:18:f0:a9:11:09:19:e1:a1:
58:28:40:72:bc:09:4b:7d:0d:44:81:41:17:23:b5:
3f:36:50:65:44:7f:bd:b2:51:38:e1:8d:fd:49:09:
38:a5:54:ab:c0:29:84:43:fc:16:48:24:f4:06:cf:
9a:ca:1b:06:77:2f:f9:7d:85:28:3f:3f:c4:2c:2a:
85:3b:bb:7f:64:c0:6f:95:6f:9e:22:1a:ee:fc:ff:
7d:fd:86:4d:86:05:dc:8e:d7:98:c5:75:e0:fe:59:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E4:95:C0:9A:96:A0:27:0A:D1:D1:F3:67:B2:2D:B0:6D:BF:33:35
X509v3 Authority Key Identifier:
keyid:13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ae:90:bc:a1:9b:8d:94:bd:8c:47:24:01:10:26:f6:06:95:
11:52:08:ab:d5:03:15:a3:07:d4:23:06:73:f8:2a:56:d2:48:
40:15:05:1a:27:e6:60:fd:58:7e:a0:0b:08:24:58:c7:f5:77:
06:0f:42:6a:78:b3:c4:00:38:91:92:54:62:4e:f8:00:36:1c:
e9:08:63:5a:98:a6:44:ac:89:30:46:39:81:fb:4d:e4:7c:dd:
6b:7b:0e:c6:24:4a:cf:59:6d:11:72:68:34:a2:96:39:92:ef:
be:33:01:af:d2:99:75:74:cf:5f:26:58:ab:0b:0b:33:5b:72:
8e:8f:1b:b1:b4:04:0a:a0:6f:06:5d:7c:d5:45:35:87:dc:62:
73:7a:10:a1:d8:d5:07:86:4a:c1:c0:76:4f:1f:54:ef:79:f8:
31:ca:65:5c:a2:03:a0:1a:07:9f:aa:0b:08:14:1b:c3:b5:14:
23:cc:b6:d0:fe:c0:10:f7:a9:77:6d:9e:aa:8f:80:70:6c:2e:
99:02:6a:2f:b8:79:3e:96:71:94:4c:4f:ac:c4:e0:97:c5:4a:
2e:27:2d:30:87:d9:b5:30:8d:b3:fc:00:73:58:05:ca:94:64:
5a:fd:7f:3e:6f:9b:42:97:84:14:f4:5f:39:24:0e:b9:22:7e:
9b:e3:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:48 2025 by rpki-client