Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
File: E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json)
Hash identifier: 3D9kmibcaxO61VYvBaM9wdOFl5ViLOc6gJYGLDTgG4U=
Subject key identifier: AE:1C:E7:81:B4:A0:19:79:49:E2:40:EE:28:46:B1:C5:7B:4D:09:E6
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial: 019A2CD653BA5081A7CB7C7274E1E1CD5FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
Manifest number: 1439
Signing time: Tue 28 Oct 2025 22:00:34 +0000
Manifest this update: Tue 28 Oct 2025 22:00:34 +0000
Manifest next update: Wed 29 Oct 2025 22:00:34 +0000
Files and hashes: 1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: RDSfF4/pfh+g4TWkHVvQz/aNvgslW1FCAJ2JeG5uHmE=)
2: zB_eI0R_E9fHHHjTeKsfbCfUNfE.roa (hash: ojS7UDvnpbti0L0m+Z7X9vfIKPOWqVpCsWT632+KxOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:d6:53:ba:50:81:a7:cb:7c:72:74:e1:e1:cd:5f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Validity
Not Before: Oct 28 22:00:34 2025 GMT
Not After : Oct 29 22:00:34 2025 GMT
Subject: CN=ae1ce781b4a0197949e240ee2846b1c57b4d09e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:2d:4b:9b:fe:f6:14:77:cc:f2:83:ac:8c:
56:15:11:da:a6:6f:93:92:b5:d2:16:1e:ab:62:5f:
4f:fe:df:c0:c5:aa:0d:aa:41:98:6b:e0:e6:73:e9:
5c:09:0a:35:f3:33:41:a9:37:a0:71:46:db:fb:c1:
19:53:5f:da:50:9a:15:58:1e:8c:52:c1:e2:c0:dc:
b4:73:1c:39:03:be:28:dc:88:bf:fb:9c:33:65:28:
93:0a:9a:13:43:0c:42:1f:9f:02:d7:db:5c:e2:f5:
c9:09:5b:ea:4b:e1:98:ff:ba:19:4a:3d:8c:6c:3c:
cf:2f:6f:0f:4f:04:4b:30:69:95:2e:46:4a:c3:26:
29:88:b2:b9:a9:dc:70:8e:84:d8:91:36:c4:8a:b4:
b8:67:ff:53:44:9d:32:8d:19:95:1f:ba:3d:ab:b5:
2b:09:bd:73:a7:37:0b:14:2f:d5:e1:0e:81:75:dd:
26:72:03:41:88:0d:4b:55:ed:f2:b2:31:c7:44:9d:
09:8a:05:41:a3:14:f1:fa:ea:8c:dc:a4:72:37:1b:
31:ec:43:20:31:8c:8e:8e:d0:14:20:eb:d5:8d:74:
ed:d1:fd:ec:85:7b:4d:ec:a4:fc:17:91:4e:2c:79:
a7:10:3c:d6:46:7c:0b:12:d1:e5:d9:ae:2e:67:16:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1C:E7:81:B4:A0:19:79:49:E2:40:EE:28:46:B1:C5:7B:4D:09:E6
X509v3 Authority Key Identifier:
keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:09:1f:a0:ac:3c:34:14:dc:a2:ea:c1:db:16:66:0b:bb:44:
8a:f2:07:80:49:a4:ae:c2:50:97:66:12:07:b5:95:37:99:66:
65:29:19:f1:7f:f8:60:60:91:7a:e6:e9:5e:0a:89:61:97:ac:
26:b4:b1:00:ac:bc:67:1e:2c:c9:d9:6b:74:27:e4:3a:b5:6e:
bb:1b:cf:8e:6c:89:4b:68:f6:9c:85:05:2a:68:73:c7:bb:bf:
eb:bf:35:97:a0:b7:b2:fd:33:bc:5c:e6:4f:93:37:32:db:c7:
9f:28:73:a3:58:03:4e:ee:c5:1b:d6:54:d2:87:8f:5a:c4:7e:
b4:3e:32:73:92:4a:a1:c3:a1:6a:ba:54:58:4c:24:81:98:ef:
cf:e2:e4:a2:74:6f:ba:d3:7f:17:cb:e6:f7:6b:63:a2:c5:52:
de:0e:d6:de:c2:aa:e4:64:ca:78:10:0f:c0:7a:8b:63:f4:7d:
89:7e:9e:c3:e4:fa:f6:cf:c2:bb:db:0c:e9:62:e5:0d:db:25:
82:28:0a:dc:db:c1:df:ca:45:17:e4:49:90:de:a2:41:33:52:
78:43:19:95:be:7a:83:6e:f7:25:6e:98:c2:f9:42:4e:f5:6a:
28:d0:19:a3:fb:ee:98:e5:02:95:07:8f:23:b5:19:86:3e:19:
0a:44:5f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 06:06:55 2025 by rpki-client