Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
File: E11E-QKeG110PPzlgR7-Xib4yGI.mft (raw, json)
Hash identifier: AQlAKqauiDrdZ7nhTF5bR+RqIwb+xv1RmIhNnMF++dw=
Subject key identifier: 8A:3C:2A:1B:70:8D:14:34:EA:ED:8D:2C:20:C5:65:38:EF:4B:B8:53
Authority key identifier: 13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
Certificate issuer: /CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Certificate serial: 019A7293CFC1DC476F7F00A3738E30796E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
Manifest number: 0658
Signing time: Tue 11 Nov 2025 11:01:20 +0000
Manifest this update: Tue 11 Nov 2025 11:01:20 +0000
Manifest next update: Wed 12 Nov 2025 11:01:20 +0000
Files and hashes: 1: 8FXx6e-u5uU4oX7I2qEVdoZijzg.roa (hash: wEhTzMM4+HaPiSo3UljIAbk1aEVV4QI7TvJR33027+I=)
2: E11E-QKeG110PPzlgR7-Xib4yGI.crl (hash: jN1Dm+2ZJ95UCW+2oHCPrK6EOWNcVmkRgC92k0JqA9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:cf:c1:dc:47:6f:7f:00:a3:73:8e:30:79:6e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Validity
Not Before: Nov 11 11:01:20 2025 GMT
Not After : Nov 12 11:01:20 2025 GMT
Subject: CN=8a3c2a1b708d1434eaed8d2c20c56538ef4bb853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:95:e1:d5:58:07:ea:b7:85:72:24:26:7f:
01:ca:6d:32:a2:7e:32:99:7e:ac:3f:c0:b9:dc:b1:
32:25:3f:d1:f3:47:87:6d:97:5a:2f:43:85:7c:2f:
7a:fe:bd:3a:42:03:63:53:7c:af:ff:bb:09:a9:e8:
4e:8b:5d:d8:4a:fb:51:a1:db:4e:26:25:1f:08:04:
4e:e4:77:03:b2:27:07:bf:c8:f2:8d:57:5c:2d:f8:
ba:3d:91:8f:11:43:47:91:8b:80:b0:dc:d9:7b:7a:
f4:24:4f:4f:73:0b:17:61:42:5c:ed:d6:41:7f:12:
27:50:1f:93:8f:2f:39:f6:0b:ac:f9:de:7e:54:07:
37:10:32:fd:04:5b:b6:04:b5:de:75:c1:b7:46:51:
9e:2e:46:15:d3:80:32:d1:44:2b:34:e2:23:50:56:
17:9e:1b:53:d9:11:45:c1:9e:cc:39:5c:cb:72:7c:
82:8b:7c:1c:54:7d:51:1d:46:84:84:34:aa:45:ad:
fa:da:25:25:20:13:93:5d:a8:97:c5:32:4e:5a:2d:
3c:05:39:61:ff:31:cc:a2:5c:8a:26:3e:6d:04:9f:
c1:ce:9d:1b:4d:6f:10:bb:de:e4:46:80:3f:26:5c:
9c:88:9b:26:4e:a9:20:af:d1:a3:fe:13:f7:6a:5d:
a3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3C:2A:1B:70:8D:14:34:EA:ED:8D:2C:20:C5:65:38:EF:4B:B8:53
X509v3 Authority Key Identifier:
keyid:13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8c:12:a9:81:78:58:4e:2c:cc:b7:9f:27:02:da:1a:ec:dc:
85:d0:29:cf:b4:d7:27:f3:07:d7:a9:c5:ac:b9:da:c5:62:58:
da:42:49:0e:5f:94:c5:bf:ab:c4:5a:ad:04:9b:4b:4e:a3:24:
09:14:75:9a:f4:94:86:57:24:d7:45:ca:aa:f7:29:93:5d:9a:
ce:fa:7a:83:82:a2:94:73:7c:eb:5b:49:a3:4b:6f:fc:f8:14:
6b:16:cf:81:56:09:c8:bf:d2:36:02:f7:66:b4:00:a5:16:65:
68:ae:9e:98:74:d5:04:65:33:07:fa:ea:e3:37:4d:f5:56:b9:
9f:5b:a9:9b:4f:c2:06:0a:92:e8:6a:2b:15:96:67:73:57:78:
32:8d:e2:55:48:40:34:d8:9e:75:33:a0:59:ae:bf:ac:8a:3a:
e4:10:59:78:b7:a7:57:ea:d0:37:d4:05:3c:64:d8:99:d2:f0:
03:1c:3e:8d:da:38:ad:24:79:98:de:cf:fb:56:4a:16:d3:d7:
7e:a3:a4:57:5b:e1:b4:b0:70:37:82:4c:ae:3a:2f:f5:32:b9:
30:b8:ff:6c:aa:51:81:1f:15:56:a5:a5:5f:af:90:5b:06:b0:
a9:77:37:64:37:08:51:72:33:7e:82:81:61:8a:cd:45:f1:b5:
24:dc:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:32 2025 by rpki-client