Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
File: E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json)
Hash identifier: p6go7CDCmtBJUh6EQGb3yqJE2mWXYTtKcklpi9oiSdU=
Subject key identifier: 73:1A:70:D3:6E:62:7A:2C:AE:3E:4F:43:22:FE:1E:16:C2:7E:B9:18
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Certificate issuer: /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial: 019A71EE5E93B4632841F30F409AD0217896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
Manifest number: 0E07
Signing time: Tue 11 Nov 2025 08:00:38 +0000
Manifest this update: Tue 11 Nov 2025 08:00:38 +0000
Manifest next update: Wed 12 Nov 2025 08:00:38 +0000
Files and hashes: 1: 3ZKIh733NIkz8A90ghZangf0O7w.roa (hash: +/arpwpD8EZM12Zn7hG4BlRv38snttCFSH/eAZhX+dg=)
2: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: XG59wOHeDPOweRpdmnaQ3m/DFpi7xv2A6uAffg5SBpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5e:93:b4:63:28:41:f3:0f:40:9a:d0:21:78:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
Validity
Not Before: Nov 11 08:00:38 2025 GMT
Not After : Nov 12 08:00:38 2025 GMT
Subject: CN=731a70d36e627a2cae3e4f4322fe1e16c27eb918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:87:88:f7:5d:de:5f:e3:17:27:3a:48:4a:
ce:3d:81:ef:f7:3b:d2:81:9a:72:33:b6:3f:ed:75:
ab:f8:2f:95:46:9c:ee:2c:45:a3:f5:c3:b6:35:8a:
94:cd:79:e8:c9:ac:e8:23:a5:de:90:60:65:46:75:
5f:d3:e4:34:56:52:b7:ee:42:d6:55:c3:28:9a:53:
95:d6:92:ff:39:71:b5:ce:66:69:3f:d3:99:ef:21:
4c:e9:c2:bd:9a:db:7f:74:e5:6f:dc:33:d1:74:4c:
13:c5:49:12:f2:1b:03:13:48:ec:64:78:2d:da:19:
1a:24:2d:db:fd:2d:8d:80:7a:6a:59:0d:0a:33:33:
d1:28:57:32:83:04:7e:70:b4:e8:23:4d:bb:58:eb:
14:00:8e:ec:af:b6:36:71:09:2f:7a:ca:45:83:a9:
79:66:d5:c2:b7:e1:aa:0a:39:06:f6:fe:b2:d3:82:
c2:b7:42:08:89:47:83:ef:a0:eb:a9:a7:af:58:f6:
6b:27:24:29:5d:b4:c9:09:65:c8:cb:d3:e3:33:7f:
23:c9:7c:17:82:53:fc:5e:19:55:54:f6:cd:e3:eb:
7b:dd:be:05:ba:99:07:ed:ce:a8:e1:7e:43:21:38:
c8:89:6f:fa:a4:a5:33:52:ef:91:d5:7d:00:4a:e8:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1A:70:D3:6E:62:7A:2C:AE:3E:4F:43:22:FE:1E:16:C2:7E:B9:18
X509v3 Authority Key Identifier:
keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fe:69:9a:34:87:7e:7e:85:0e:60:5b:3e:dd:34:6b:c2:cc:
af:09:aa:43:58:8d:c4:f5:59:de:a3:5b:7b:c9:49:aa:d2:61:
61:96:b6:c4:ad:fa:f9:67:63:7f:99:f1:f8:a1:42:c3:34:66:
49:d7:98:ac:a0:9c:21:95:0c:9a:b7:94:cb:53:72:66:b6:cb:
17:ee:b4:41:7e:ea:61:7b:50:77:17:05:ef:4d:51:4d:21:36:
79:08:b9:9f:40:38:cf:76:90:5b:48:d7:1f:14:24:45:09:01:
3e:cc:61:11:1d:c3:ac:a9:0f:dd:70:5e:50:bb:7d:b5:27:b0:
c8:db:b2:5f:72:42:a9:7d:31:1a:37:2a:d1:a5:f8:01:e5:21:
69:94:31:d4:03:0c:43:63:9e:36:6b:9e:02:9e:0f:ef:93:af:
62:d3:5d:52:98:85:3f:a9:2d:45:01:4c:df:eb:cc:90:43:6c:
5f:7e:86:a2:f4:19:d8:66:e4:97:a0:6c:a6:a5:ae:0f:4f:3e:
04:47:73:8f:00:b1:00:ec:da:ea:e8:8d:c3:da:82:91:56:a2:
7c:77:d4:35:c4:80:63:52:38:e4:d5:58:33:c6:db:53:be:71:
e7:1f:74:ea:fe:13:0d:e2:06:20:d7:f9:d9:ab:c9:22:33:32:
0a:07:6a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:16 2025 by rpki-client