Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
File: e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json)
Hash identifier: xN8eSbnTCXzlmUEgzmOp7DK1o6J33zrZ0gIDn7cN8jI=
Subject key identifier: EE:A3:6E:C7:DB:84:BA:98:50:68:7B:FE:1A:87:4F:49:D7:00:47:50
Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Certificate issuer: /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Certificate serial: 019A7293D993201E050597D31BF49AB0617E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:23 +0000
Manifest this update: Tue 11 Nov 2025 11:01:23 +0000
Manifest next update: Wed 12 Nov 2025 11:01:23 +0000
Files and hashes: 1: _d9TqHUt6Akn4mIp9hun4eZSvDY.roa (hash: E+7eG5ZCI82NV5+vYe7SeDuuzqJipfHrlwV+FyH2KQM=)
2: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: unqKywui2an/106z92BhVXZtQDZCDy4jhGCGkurpPiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d9:93:20:1e:05:05:97:d3:1b:f4:9a:b0:61:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Validity
Not Before: Nov 11 11:01:23 2025 GMT
Not After : Nov 12 11:01:23 2025 GMT
Subject: CN=eea36ec7db84ba9850687bfe1a874f49d7004750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:e4:3e:2a:0c:16:4a:ef:72:1c:2a:2b:6b:
9a:11:58:65:90:02:76:45:01:14:54:d9:72:2b:d6:
b8:70:98:4f:85:12:c3:06:ea:07:64:76:83:0d:cd:
df:e2:58:52:d9:20:98:b0:d1:1d:48:f6:cd:95:67:
6f:4b:1a:64:f1:f7:b7:24:3d:b1:8f:75:27:a4:3f:
04:0d:03:11:9f:a9:a9:55:a8:64:80:40:d1:6a:56:
38:d0:60:a0:b9:bd:9b:b8:0f:48:2e:aa:1e:1c:3a:
1d:8d:84:8f:77:11:64:ae:54:df:50:bf:14:c9:c8:
b0:f6:0f:ab:ae:de:f1:42:b0:71:82:ce:05:f9:e5:
d6:2c:f1:fa:b0:93:33:3d:73:e8:b3:11:f7:b0:41:
45:1a:9d:9f:f2:5e:de:e2:3d:0e:76:69:1f:f9:43:
21:2e:e9:16:6b:5b:73:a3:77:b9:59:a5:52:51:0b:
88:73:10:e4:3d:66:43:c5:d9:9e:f2:bd:54:60:64:
33:56:9c:dd:d2:a3:16:e2:fc:71:e9:4a:cf:75:d3:
77:5e:33:51:ef:22:62:89:32:2d:48:35:e2:93:a3:
4c:41:a2:87:58:7d:58:59:8c:96:fb:e0:2f:8f:99:
2f:0b:14:14:04:53:f8:5e:94:41:ee:77:be:54:c6:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A3:6E:C7:DB:84:BA:98:50:68:7B:FE:1A:87:4F:49:D7:00:47:50
X509v3 Authority Key Identifier:
keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8d:b1:22:3c:9d:42:04:7b:5e:4a:47:fe:60:be:3f:9f:d1:
2a:87:b9:0d:4c:f1:c5:ef:8f:ea:8d:b0:ff:ae:13:c5:e8:bb:
68:31:15:51:92:79:5f:11:da:17:48:93:c1:61:e7:f0:3c:0e:
41:1a:86:44:16:17:1d:35:77:f1:3b:91:cf:b1:7f:d2:ea:7c:
9e:4a:07:c8:f5:3b:76:27:38:1d:63:c1:c7:f3:dd:db:a9:c1:
45:fc:4d:76:80:de:ea:64:d5:0e:f0:2d:67:d6:dd:e0:7b:54:
85:77:6f:d7:bc:ef:80:b2:29:df:4b:fb:a1:25:09:af:8b:72:
45:f2:62:03:4a:e2:24:ce:8a:10:b4:ef:99:7a:d7:24:22:03:
86:7a:f6:08:85:cd:5d:f6:dd:0c:e5:9f:58:49:74:89:4e:50:
91:80:98:7e:3f:16:cf:24:23:e2:e2:ea:67:fe:85:bc:c8:32:
fe:31:30:fe:0a:e4:9c:24:9d:10:32:b7:d0:f3:f4:40:c2:88:
8f:03:c1:42:a2:11:0f:4c:92:71:9f:e0:a9:f1:07:40:63:9c:
d4:da:bf:1f:a1:cb:36:9b:5a:8d:fd:27:34:52:d9:45:44:5d:
51:4e:fa:36:46:af:bd:c8:8a:fb:27:eb:66:c5:7a:16:d9:3a:
66:1f:c3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:06 2025 by rpki-client