Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File: E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier: WixoT4K1qjNfrkwG0Q8XRal7d9EF78XtdL7EmigmHv0=
Subject key identifier: 10:83:BE:99:4F:DC:4D:DD:7D:53:F8:01:BA:2A:0D:B0:6F:5D:48:31
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial: 019A722645623E871BB6BA326AF2A5D3F054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:41 +0000
Manifest this update: Tue 11 Nov 2025 09:01:41 +0000
Manifest next update: Wed 12 Nov 2025 09:01:41 +0000
Files and hashes: 1: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: l1tj1leNE307+1CWqfzP3tjtAiEvIts0qUNEqOamGLM=)
2: i3utctSwXJrSkgd5Tbp5Iqklo-Y.roa (hash: we3OAkuZWKug5XOiU5EwCdxx9AgvZmIQX0TruehoLK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:45:62:3e:87:1b:b6:ba:32:6a:f2:a5:d3:f0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Validity
Not Before: Nov 11 09:01:41 2025 GMT
Not After : Nov 12 09:01:41 2025 GMT
Subject: CN=1083be994fdc4ddd7d53f801ba2a0db06f5d4831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:02:86:32:77:15:94:4b:86:dd:14:d5:98:
2c:07:bb:05:ec:d5:e1:ba:f8:73:ac:b6:6a:78:47:
ec:65:64:b5:aa:00:92:61:31:5d:08:44:0d:36:e4:
13:db:0f:9f:a9:0d:01:ff:06:26:bc:dc:3d:70:88:
a7:24:a9:32:b0:c6:8d:b6:e9:d8:cf:a9:a6:5f:7b:
dd:d8:e3:3a:eb:57:f0:c7:94:18:71:64:1c:ab:ef:
ce:4d:c7:87:a0:31:fb:d0:9f:16:6e:19:4b:d8:6b:
33:31:88:f1:eb:aa:11:08:d7:89:73:28:fd:28:de:
70:3c:68:12:83:02:0a:cc:ed:88:e3:fb:96:5b:e6:
2e:a1:52:26:13:3e:6c:f4:36:db:1d:6a:7b:af:11:
c6:13:96:42:2f:5f:34:ec:46:3c:9b:10:b6:74:3e:
69:ae:03:44:b3:7a:e8:cc:fc:1f:34:17:96:4a:8a:
52:f5:f7:57:f2:91:d9:92:19:15:a5:c0:c9:60:a3:
49:73:7c:3f:65:1c:8a:d6:36:3c:b7:74:aa:5e:2c:
e3:97:a5:2e:73:07:99:25:24:e2:73:6c:59:f7:be:
90:20:a9:20:ea:b6:a7:e9:19:6d:d7:48:a6:73:ef:
31:1d:30:91:e8:97:db:16:ac:74:2c:cb:29:2c:97:
ea:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:83:BE:99:4F:DC:4D:DD:7D:53:F8:01:BA:2A:0D:B0:6F:5D:48:31
X509v3 Authority Key Identifier:
keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e1:5b:a0:f0:ff:b5:d9:d0:b3:0f:9e:68:08:66:6c:65:76:
6a:93:2f:06:55:55:43:77:95:13:2e:cb:09:88:c4:02:3e:2d:
f0:96:4f:55:f7:cc:0b:e9:36:46:82:b3:4a:41:08:40:b7:20:
a9:2e:84:71:b2:c1:88:18:d9:b4:6a:e2:9f:4e:00:39:fe:7a:
b7:cb:e1:97:ee:3f:ed:d9:c0:79:81:04:5a:75:c3:5f:43:00:
6b:f9:91:fe:24:d5:64:48:79:09:50:8b:76:59:e9:5c:a7:ce:
8e:ef:b4:d8:20:c1:cf:96:df:2d:0c:33:c0:a0:8b:5e:41:2f:
99:84:ff:5d:8b:c6:25:e8:83:bc:96:00:93:66:24:21:04:96:
d6:a3:e5:4d:d5:c1:7d:4e:fe:a2:bf:d6:db:ca:30:65:f8:fb:
ff:04:0a:60:42:43:c8:e2:64:bb:cc:d4:13:14:fb:b9:e1:80:
64:91:ae:cd:87:f8:c2:15:46:a5:38:3a:3c:9a:55:dc:3f:b8:
3b:b3:88:e2:28:87:85:a4:0d:ea:85:3b:dc:83:28:00:70:3c:
e3:e4:c1:aa:e3:fb:b7:3c:b4:fb:a4:ef:90:4c:d2:d2:9b:2b:
91:b1:90:e3:92:4e:f4:4f:1d:fb:6c:40:ff:3b:86:d8:a6:6d:
3e:99:27:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:52 2025 by rpki-client