Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
File: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json)
Hash identifier: 0fZKu3x97QlrN2hJlReIygYUaqreB4AWq8HyjiQ5onw=
Subject key identifier: 85:ED:8D:50:31:F1:E1:7F:19:C2:6F:7A:07:E6:28:2A:F3:58:90:37
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Certificate issuer: /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial: 019A2B1EEFB66386016D2F0095E2591FCCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
Manifest number: 0DE2
Signing time: Tue 28 Oct 2025 14:00:39 +0000
Manifest this update: Tue 28 Oct 2025 14:00:39 +0000
Manifest next update: Wed 29 Oct 2025 14:00:39 +0000
Files and hashes: 1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: uN5306vbiBuLR/O/JSztxAPfBXvNDC0k0pLm0Gk41a4=)
2: FNssP3Vnl359dcbgHZkufRV_lXA.roa (hash: JifcLzI/Tl7E2mLCjrs1dQqQn1Db6poPn/8XtbADxCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:ef:b6:63:86:01:6d:2f:00:95:e2:59:1f:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Validity
Not Before: Oct 28 14:00:39 2025 GMT
Not After : Oct 29 14:00:39 2025 GMT
Subject: CN=85ed8d5031f1e17f19c26f7a07e6282af3589037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:97:90:0d:94:01:52:22:28:f7:0a:b9:83:
04:bb:44:17:bc:fa:32:41:5e:78:31:c0:bc:97:a5:
b1:ce:1a:6c:4a:46:7f:88:b0:a5:d6:88:64:61:d9:
7a:b4:e6:b9:9b:57:af:00:ec:75:d8:a8:62:0f:b1:
4f:0a:d6:60:b5:65:23:91:98:71:fb:2b:df:be:99:
48:d7:7d:2e:c5:02:ae:39:55:09:75:e9:e4:eb:88:
09:a4:65:ec:f8:a3:78:df:4b:85:be:44:0b:48:72:
1c:ef:1a:ad:ff:5d:3e:c2:2d:4b:da:2a:6f:7f:14:
b8:9e:cf:1d:ce:2d:2a:9b:4d:88:a5:d9:12:f2:9a:
b6:f0:4f:58:5b:c9:c8:3e:1b:23:ec:1f:d0:02:0c:
fe:b7:da:32:9d:f6:0b:8d:b0:b5:19:a0:5c:da:20:
cf:ab:0a:4f:ca:d6:48:6a:75:d1:80:fd:00:d1:98:
64:79:43:ff:7f:56:dc:92:06:9e:aa:77:b7:8f:c5:
3d:ce:c8:54:c5:95:ca:a5:76:6b:36:6a:34:d1:b3:
1b:d3:f1:85:61:58:1e:81:d1:8b:c9:f5:ef:0d:3e:
38:cc:0d:3a:41:c6:fd:d5:16:09:14:17:77:7b:37:
32:23:02:db:07:9f:02:dd:bb:0a:32:2c:86:9a:8e:
79:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:ED:8D:50:31:F1:E1:7F:19:C2:6F:7A:07:E6:28:2A:F3:58:90:37
X509v3 Authority Key Identifier:
keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c4:06:b2:b0:d4:81:f1:8c:bf:65:81:6e:a0:fc:32:3c:45:
40:67:00:d1:e4:9e:e6:26:33:92:b7:73:a1:6f:60:c7:76:89:
56:49:a3:32:0b:56:5f:70:b1:d3:fd:ac:63:f3:6f:5c:a6:2b:
65:e0:cd:f6:f2:88:3f:04:9e:64:55:2a:df:a1:ab:66:0f:4a:
ad:20:96:a4:06:10:66:56:35:09:1d:a5:cb:22:f8:76:12:dc:
2e:44:be:ea:84:a3:2b:90:11:82:3f:c7:00:90:ab:95:d2:d2:
96:1e:f1:5f:49:1d:6a:6c:1a:a6:79:47:34:0e:b0:e0:a4:98:
ed:3e:58:ed:94:74:e6:91:60:4f:9a:76:8a:c8:fc:38:cb:34:
f2:85:b7:d1:e1:74:b6:ab:01:65:b1:45:72:58:14:a1:a0:48:
24:25:d9:d7:44:c8:cb:ad:b9:4d:77:bf:d8:e7:90:77:0d:5e:
08:28:16:27:32:6f:0f:6d:6e:f5:8c:08:36:7a:cf:e7:29:7d:
05:63:1c:ec:c6:cb:41:f7:a7:a0:d2:83:a1:3d:90:e7:49:90:
47:3d:80:2e:01:79:f7:20:39:fd:12:15:eb:6f:73:ed:a5:24:
bd:2c:d3:e1:ef:e2:72:53:25:3b:0a:7d:f9:43:7f:c8:77:bd:
08:82:04:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:08:37 2025 by rpki-client