Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
File: E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json)
Hash identifier: SpoVqUcOF8cUJwOGhVadK9TjrSPjTQFMjpCaTjl7yd4=
Subject key identifier: 61:EF:76:A8:B1:F8:AB:FC:FA:56:5E:9F:75:BF:FF:4C:C9:02:2E:59
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Certificate issuer: /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial: 019923D5A83B571D91DC9E8465285D23D340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
Manifest number: 0D5A
Signing time: Sun 07 Sep 2025 11:00:28 +0000
Manifest this update: Sun 07 Sep 2025 11:00:28 +0000
Manifest next update: Mon 08 Sep 2025 11:00:28 +0000
Files and hashes: 1: 3ZKIh733NIkz8A90ghZangf0O7w.roa (hash: +/arpwpD8EZM12Zn7hG4BlRv38snttCFSH/eAZhX+dg=)
2: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: YgBwjj3faq6sMIeNtxNxsOE9Dp2JbBEWij8a/umefMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:a8:3b:57:1d:91:dc:9e:84:65:28:5d:23:d3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
Validity
Not Before: Sep 7 11:00:28 2025 GMT
Not After : Sep 8 11:00:28 2025 GMT
Subject: CN=61ef76a8b1f8abfcfa565e9f75bfff4cc9022e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:97:fd:87:a1:4c:71:89:03:14:8a:58:12:
ec:58:77:9f:f8:61:39:6f:13:16:3d:b3:e5:49:39:
8e:ce:fd:e4:67:d5:5b:57:04:96:23:db:9b:4a:f4:
a7:79:fa:bd:60:b5:65:29:e6:ba:87:7c:da:56:75:
a1:92:a7:40:f2:24:9e:ae:0c:d5:19:ab:37:d7:a9:
f8:ad:65:b4:77:d7:08:e9:5a:60:35:32:7e:6b:c1:
a2:70:d0:f8:60:8a:5f:95:22:f6:7d:f4:b6:86:73:
9d:90:3d:26:4d:aa:f6:6f:cb:aa:bb:a4:36:2a:8e:
11:e0:82:2e:86:36:1d:53:5f:05:d1:a4:5b:d4:eb:
a5:de:7e:93:43:16:7c:4e:67:0a:d5:ec:0f:35:7d:
58:e9:c9:12:51:46:16:82:ee:96:49:b4:d2:1d:5b:
3f:4e:97:52:65:0b:1e:2c:73:48:e4:28:77:6d:9f:
3c:b4:1e:d9:b8:54:c3:b2:1f:ae:dd:de:5d:54:c6:
b3:14:12:ed:4e:f6:af:26:4b:9f:b1:39:43:9a:36:
99:d1:28:47:e5:3c:43:84:9d:c1:01:ab:85:8c:1b:
96:ea:09:fd:68:5a:0e:8d:77:b3:88:37:29:56:4c:
eb:e4:b2:b1:95:f8:7e:de:94:7d:f3:9d:2f:f5:56:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:76:A8:B1:F8:AB:FC:FA:56:5E:9F:75:BF:FF:4C:C9:02:2E:59
X509v3 Authority Key Identifier:
keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:70:fe:36:1b:e3:67:e7:c4:a7:e3:84:df:92:05:67:81:20:
ce:ff:f4:fa:39:00:b3:a0:17:37:6a:0c:9c:4a:3b:15:77:4b:
e3:25:45:af:dd:ab:04:c0:e8:c4:b4:84:8d:57:eb:6b:ce:54:
3e:fe:d5:b9:e8:19:a0:eb:8c:81:97:da:b8:14:c3:04:0b:5f:
ed:c8:07:67:82:e9:87:62:ad:3f:1c:dd:64:b8:5a:b5:1a:d1:
63:5b:02:f5:6d:46:ab:c5:48:79:8c:de:53:ee:a4:37:75:f0:
db:9b:e7:ae:e3:60:d6:bd:09:89:88:de:cd:22:18:3f:16:8b:
14:41:03:4a:fa:14:03:c3:c8:68:d1:71:a8:f3:37:32:e6:a1:
11:03:5f:cb:0b:c9:b2:d5:88:f7:30:55:a7:fb:a6:71:d3:16:
2f:fa:b7:1f:9d:66:a3:c1:b1:5b:58:83:93:8b:97:cf:28:75:
a3:1b:82:3c:cb:e0:64:14:a7:d5:eb:28:cc:d4:88:08:f8:46:
bf:7f:12:62:de:44:a8:82:a9:7c:a5:f0:1b:f3:19:d7:98:53:
6a:76:25:6d:ea:b4:5b:3d:1d:2a:96:f4:47:cd:82:53:e6:65:
8c:da:60:77:d0:86:7a:80:ae:ac:d0:9e:7a:bf:5c:9b:29:47:
79:c3:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:39 2025 by rpki-client