Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier: bCWhH8SNgZZsF4XV5uAQH3nnPebuPe2AKRajD5Gr5Ms=
Subject key identifier: 24:0B:13:D7:2C:21:82:82:1C:10:8D:F4:7A:4B:07:0E:F0:55:B9:93
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial: 019A72259ABB399B30DE3022CBC4542DDFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:00:58 +0000
Manifest this update: Tue 11 Nov 2025 09:00:58 +0000
Manifest next update: Wed 12 Nov 2025 09:00:58 +0000
Files and hashes: 1: 0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa (hash: X8YDNwD9PGK+IazmDttNRD5zMBvc8bSCuQ7N4xzf1ko=)
2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: QgSaDz00H1E2WhXosxKuGwWIoqtVTSXdM9KMpIbOMvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9a:bb:39:9b:30:de:30:22:cb:c4:54:2d:df:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Validity
Not Before: Nov 11 09:00:58 2025 GMT
Not After : Nov 12 09:00:58 2025 GMT
Subject: CN=240b13d72c2182821c108df47a4b070ef055b993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:9c:f6:9e:cb:7d:6b:2b:6a:f3:18:64:7d:
76:d8:dd:8f:6f:fc:f3:93:5a:8e:25:92:c4:54:a2:
ff:2e:62:f1:e1:1a:77:90:a3:a0:fc:c8:6b:da:5c:
60:c4:03:ba:87:ec:29:c4:6c:a3:4b:ef:a1:5b:e9:
79:06:c9:85:e8:cd:7d:e1:fa:31:09:f0:dd:42:88:
c9:d2:b7:0c:82:d2:e0:69:19:1a:3a:52:cd:5d:47:
a1:06:69:a3:07:91:47:58:b7:90:8c:9b:1a:72:96:
aa:68:1f:e4:29:59:23:ba:f3:bf:3d:54:f5:15:c4:
0f:c0:d5:fc:5f:ef:93:11:fb:33:6b:65:81:b2:0a:
e6:9e:fe:7f:46:cd:f5:e3:d9:b2:ed:44:ce:e6:ec:
00:79:0a:cf:3b:f1:9f:54:74:b4:73:c6:38:ae:81:
3a:c9:f2:7b:ee:c3:85:35:f8:2b:b0:f8:ea:43:ed:
8b:fc:43:d7:47:2c:4d:49:49:52:f5:24:14:04:0a:
25:2e:bd:26:e6:e5:5e:72:60:78:bc:cb:80:dc:58:
a7:8c:8f:13:9a:4b:03:45:ac:a5:91:6c:17:63:4e:
3f:2c:b8:8f:0e:9e:24:20:ae:27:c6:df:8c:40:c9:
01:a2:d4:8a:9b:23:ae:76:09:64:b8:01:0a:20:42:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0B:13:D7:2C:21:82:82:1C:10:8D:F4:7A:4B:07:0E:F0:55:B9:93
X509v3 Authority Key Identifier:
keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:92:4a:c8:86:d0:55:41:5a:62:13:96:d6:9f:ff:ef:0e:cf:
12:8d:a5:7a:48:29:2c:8b:46:87:5d:4d:34:f9:de:30:6f:5c:
44:83:01:7d:1b:76:36:08:f9:38:95:f8:c9:d7:48:b3:e4:21:
8d:1a:54:a4:64:d7:fd:16:63:a0:e1:4b:40:1e:d9:fc:1c:8e:
e5:27:39:74:79:78:c1:0a:05:74:12:b8:d2:39:02:a5:3b:13:
8a:99:5b:b2:09:b7:d9:1c:76:88:d0:58:72:e0:18:18:4e:c0:
15:c0:88:83:0f:ae:a9:02:35:5d:a7:46:7f:49:5e:76:cb:e0:
6b:7c:3f:aa:c7:f6:6f:b5:51:4c:67:db:05:6c:40:6d:52:5a:
fd:7f:24:08:4e:2a:ad:48:5e:2c:f0:c3:07:c8:53:a7:6e:1a:
6a:cc:fe:e7:b4:bd:04:e9:5c:30:f8:c4:07:3d:7e:cb:24:d0:
df:c1:bc:e8:c0:e5:48:fc:72:64:e6:d4:58:80:1f:c4:84:39:
f2:65:78:4f:ca:3f:ef:90:72:8b:7d:fa:c1:a0:e0:aa:1e:0d:
a6:29:f7:84:e2:32:a6:7e:a5:a7:9e:3b:77:d8:0f:86:a0:f1:
c0:fe:90:98:db:cb:14:10:82:35:95:06:c7:92:34:18:a0:52:
ab:74:b6:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJZq7OZsw3jAiy8RULd/+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDYyMjIwNjQ4ZDZlZWU0MmFjOTJjMzk2YmYyZDFlODFh
ZTY1ZjcwHhcNMjUxMTExMDkwMDU4WhcNMjUxMTEyMDkwMDU4WjAzMTEwLwYDVQQD
EygyNDBiMTNkNzJjMjE4MjgyMWMxMDhkZjQ3YTRiMDcwZWYwNTViOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt+c9p7LfWsravMYZH122N2Pb/zz
k1qOJZLEVKL/LmLx4Rp3kKOg/Mhr2lxgxAO6h+wpxGyjS++hW+l5BsmF6M194fox
CfDdQojJ0rcMgtLgaRkaOlLNXUehBmmjB5FHWLeQjJsacpaqaB/kKVkjuvO/PVT1
FcQPwNX8X++TEfsza2WBsgrmnv5/Rs3149my7UTO5uwAeQrPO/GfVHS0c8Y4roE6
yfJ77sOFNfgrsPjqQ+2L/EPXRyxNSUlS9SQUBAolLr0m5uVecmB4vMuA3FinjI8T
mksDRaylkWwXY04/LLiPDp4kIK4nxt+MQMkBotSKmyOudglkuAEKIEJCuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQLE9csIYKCHBCN9HpLBw7wVbmTMB8GA1UdIwQY
MBaAFBPWIiBkjW7uQqySw5a/LR6BrmX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wYzI1OGEtNTIwMy00M2U2LTk2NzIt
ZmQ5Yzc0OTA2YmFhLzEvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wYzI1OGEtNTIwMy00M2U2LTk2NzItZmQ5Yzc0OTA2YmFh
LzEvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJJKyIbQ
VUFaYhOW1p//7w7PEo2lekgpLItGh11NNPneMG9cRIMBfRt2Ngj5OJX4yddIs+Qh
jRpUpGTX/RZjoOFLQB7Z/ByO5Sc5dHl4wQoFdBK40jkCpTsTiplbsgm32Rx2iNBY
cuAYGE7AFcCIgw+uqQI1XadGf0ledsvga3w/qsf2b7VRTGfbBWxAbVJa/X8kCE4q
rUheLPDDB8hTp24aasz+57S9BOlcMPjEBz1+yyTQ38G86MDlSPxyZObUWIAfxIQ5
8mV4T8o/75Byi336waDgqh4Npin3hOIypn6lp547d9gPhqDxwP6QmNvLFBCCNZUG
x5I0GKBSq3S21g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:19 2025 by rpki-client