Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
File: E9gEKigBXSfzWx8atzYR6FEbaSM.mft (raw, json)
Hash identifier: K8klpS7yxoxedxGPbSHYoIFdKBi4T4saXL7n0cTQWzA=
Subject key identifier: FF:30:BF:66:82:B6:DC:4F:DB:E2:0C:FF:45:64:97:44:53:C2:95:63
Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Certificate serial: 019A7225C553DA0C9421B3BBCE990BB02DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
Manifest number: 0D62
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: 38mEm2F8Yjh1FOnrSxxmmsrIhfw.roa (hash: UA6RTPbLgtEACOSSNTD3WLGlqG06YwLEPzk3fCMKgmQ=)
2: E9gEKigBXSfzWx8atzYR6FEbaSM.crl (hash: RQIpdhtC0BNcwOi/gX9cwKlJV4a8pWlfl0KLmg4BR0A=)
3: lkxfkXJeUwS4tf9hwfUaHviGSgg.roa (hash: MB/FOS9D0/N7sc26YuesIdJ9X16AAYgiGD6hIoBNyjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c5:53:da:0c:94:21:b3:bb:ce:99:0b:b0:2d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=ff30bf6682b6dc4fdbe20cff4564974453c29563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:16:b3:3c:3f:fd:91:03:13:26:7f:f3:a9:
a4:6a:41:b4:10:72:9a:b4:47:e7:cd:30:96:ae:71:
4b:22:79:48:19:6e:76:f7:7b:63:6c:ce:60:91:76:
d8:82:a4:26:60:0b:52:5a:c9:0f:35:53:26:e6:86:
68:32:6e:21:69:0c:bf:f4:69:40:46:07:c3:92:0e:
df:f6:44:ea:dc:89:b6:01:03:45:a9:0d:a9:15:04:
5f:b1:f6:92:c1:e6:72:61:c6:59:f5:71:47:1d:0a:
59:3b:fc:4a:27:a6:ce:47:0e:1a:0e:1e:ca:19:b8:
62:89:f2:cc:39:cd:51:55:ec:3c:2b:91:a4:33:e3:
2c:47:ec:d8:71:46:57:7b:27:b9:db:5c:f9:2d:90:
18:2a:b6:7a:35:8b:eb:a7:e9:5b:6b:70:fc:8b:81:
1d:fc:46:5f:ef:0f:6a:bf:17:10:66:e3:62:f3:8d:
fb:21:97:f8:49:02:f3:62:e8:65:d7:b2:e0:8c:0b:
3a:c1:37:79:b4:e4:30:67:11:cb:2a:40:69:ce:a3:
55:e4:29:0e:14:cf:26:49:4f:0c:c9:2c:ab:2e:7b:
25:f6:47:96:77:e8:6f:47:6f:e6:61:09:87:3d:9e:
3f:94:eb:22:00:c3:f1:9e:98:95:95:99:77:36:1b:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:30:BF:66:82:B6:DC:4F:DB:E2:0C:FF:45:64:97:44:53:C2:95:63
X509v3 Authority Key Identifier:
keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e3:0a:20:c1:b9:5d:c1:3c:0a:53:ef:41:fd:e8:b8:96:e5:
e1:9d:f2:62:12:68:ba:f2:f4:c7:11:ca:dd:ac:8b:69:65:7b:
fa:ad:2d:14:36:3e:3d:8c:54:71:1e:3f:c0:e5:95:7c:45:85:
72:5d:a1:01:30:1d:da:ab:cb:e4:af:9c:85:f1:54:bc:60:9d:
01:34:83:20:9f:c9:73:da:23:c6:02:a7:3d:64:23:f1:56:4d:
9e:e2:df:d2:da:c7:58:a1:10:ef:1f:89:f2:1a:c5:b1:c3:ce:
20:16:ac:af:42:74:df:5d:06:83:26:03:b2:57:2d:8b:f4:f7:
ce:42:3b:77:93:54:cc:c7:df:96:d8:64:82:96:2f:6f:e0:0d:
3a:26:fd:0d:b3:b6:07:ad:c0:00:79:d5:32:73:9a:92:54:bd:
48:d5:14:d6:0b:13:24:67:4b:d9:b8:fc:65:30:c3:5d:91:05:
2d:a7:7d:59:fa:57:5f:da:68:d9:0c:67:cb:e5:b6:f2:d8:f3:
d0:4b:b4:cc:03:30:32:cd:06:c6:ad:11:cc:10:64:48:9d:3a:
f2:8b:4b:45:05:3d:1a:54:45:72:b8:fe:6d:3c:6a:d9:b8:a0:
75:c7:b3:a5:fc:36:76:e1:68:a5:0f:9b:7c:00:8b:56:47:c6:
0d:d3:9d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:12 2025 by rpki-client