Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
File: 9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json)
Hash identifier: eL4OFO8GKgFO1o3W42HEbqw0zBPzhvFIekX0mX9tyhw=
Subject key identifier: E3:E9:AC:49:AB:C2:15:91:74:A7:67:E6:92:8B:E0:E0:6E:13:4C:26
Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Certificate serial: 019A06DB53AD81C74B1871360381C27F34FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
Manifest number: 3A
Signing time: Tue 21 Oct 2025 13:00:28 +0000
Manifest this update: Tue 21 Oct 2025 13:00:28 +0000
Manifest next update: Wed 22 Oct 2025 13:00:28 +0000
Files and hashes: 1: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: cBpUPVPn9GkYHIgclTS6I36lzG8Oxl4JSLpRwMV3czo=)
2: WPdzOJT4LC_TcCRm8RmxGjX_YK4.roa (hash: wrideVt96yprnS97lOHBi0r+Cs611ZDyctZNvffjpbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:db:53:ad:81:c7:4b:18:71:36:03:81:c2:7f:34:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Validity
Not Before: Oct 21 13:00:28 2025 GMT
Not After : Oct 22 13:00:28 2025 GMT
Subject: CN=e3e9ac49abc2159174a767e6928be0e06e134c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c5:21:ed:28:b8:3c:fa:54:1d:4a:5d:68:de:
75:00:3f:65:e0:db:8f:af:1b:aa:6e:2a:27:4f:27:
df:01:b8:1a:d9:a5:5c:17:c7:8c:2a:9a:bf:f5:c9:
99:16:e0:9e:41:f0:a9:8d:cd:d5:ee:98:6b:a4:08:
e4:44:97:1d:4a:6f:8c:a8:d6:42:14:c3:5c:da:5b:
91:4d:6f:78:59:89:41:fc:1f:c8:20:ac:a1:b8:7a:
12:8a:25:6c:a0:74:61:8e:f4:a3:eb:ed:30:e1:f3:
76:fb:7d:ee:e3:b4:cd:08:c3:a5:38:7c:63:02:39:
b7:be:08:b7:c5:38:31:ba:d6:d8:46:90:91:6e:cc:
b2:84:10:49:1c:83:bd:fa:4e:f3:b4:82:f5:14:52:
6e:64:ec:da:e9:87:52:78:74:3f:c5:bf:a3:8c:38:
c2:da:96:79:e3:3a:8e:07:a2:65:c1:18:6f:e1:09:
c4:f2:59:87:7c:ca:c6:de:64:0b:eb:c1:72:66:d0:
55:6e:89:7b:24:74:7c:2a:e2:6b:fb:d3:a7:73:16:
77:91:ca:04:dd:57:b7:be:8a:80:0d:d9:9a:be:28:
47:b3:6f:33:9f:f7:8c:95:d8:f4:9f:77:e4:b9:8c:
de:18:aa:69:3f:ae:fd:60:ed:ea:48:41:b3:45:fe:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E9:AC:49:AB:C2:15:91:74:A7:67:E6:92:8B:E0:E0:6E:13:4C:26
X509v3 Authority Key Identifier:
keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:91:b2:44:a1:3e:8a:23:4d:9d:92:dd:3d:d9:12:60:68:77:
64:0a:dd:6d:67:b1:9d:22:62:58:0c:88:d4:d6:d1:44:67:6a:
6e:61:00:7f:4a:88:fc:c3:d0:c3:88:15:df:f3:d5:77:6f:59:
f0:69:61:8e:56:bf:ba:14:fa:f4:c0:49:26:8a:99:79:ef:ed:
f3:d7:4c:f1:92:36:20:be:cc:b4:d9:e3:82:25:b0:e0:62:06:
c5:76:e3:36:05:30:25:34:d0:86:0d:d0:79:3a:45:80:df:eb:
24:4a:96:09:29:8e:8b:06:aa:91:f4:be:14:12:3a:47:cd:df:
07:7b:1e:d0:38:8c:9b:78:b2:72:0c:4f:76:93:6f:25:f3:0a:
14:ea:e1:97:c1:2a:21:03:12:e5:a3:7c:79:f0:e9:4d:cd:c4:
15:80:ce:8f:1d:6f:e8:cd:72:c6:a2:f8:d2:39:11:84:a6:38:
6f:31:90:8c:9d:ae:c0:a6:ad:6f:2b:e2:2b:74:be:3a:42:1d:
06:6e:73:b8:97:c3:a7:40:68:83:08:0f:31:c8:59:8c:76:09:
3c:41:5c:93:64:ec:28:51:4b:e9:b9:c5:33:26:1c:89:19:2a:
56:25:f0:bf:39:77:3b:f0:e9:4a:1b:f5:16:ba:d4:71:92:50:
8a:00:c4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:13:22 2025 by rpki-client