Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
File: E8xjCawwp_wBXDNEy8gIYbTFR88.mft (raw, json)
Hash identifier: kSP44y5hJI4Io4nyjzqoT5IiVjjf1Pw90h81Yd1bKO0=
Subject key identifier: 24:D5:69:FF:A6:38:6C:FE:62:7F:17:35:3E:13:79:3B:9E:D0:84:01
Authority key identifier: 13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
Certificate issuer: /CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Certificate serial: 019A71B873FA1E9B3AF0AB163BA86D61417D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:44 +0000
Manifest this update: Tue 11 Nov 2025 07:01:44 +0000
Manifest next update: Wed 12 Nov 2025 07:01:44 +0000
Files and hashes: 1: E8xjCawwp_wBXDNEy8gIYbTFR88.crl (hash: cqDiWVXO/5LHehSmnXP69mufRlqnRE7CdFpHewSBleo=)
2: jzVDE20GlCgVCg-KhJB_QzsLMCg.roa (hash: LaydqvlZJmK18FahUwbjtSgT6W86Q5gZmcNPgCbbqe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:73:fa:1e:9b:3a:f0:ab:16:3b:a8:6d:61:41:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Validity
Not Before: Nov 11 07:01:44 2025 GMT
Not After : Nov 12 07:01:44 2025 GMT
Subject: CN=24d569ffa6386cfe627f17353e13793b9ed08401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:97:bf:ea:29:d0:61:f9:7d:5b:20:a7:9c:
58:6a:a7:04:8c:77:04:b0:d4:bb:66:96:1a:1c:6e:
7f:b7:eb:21:0c:17:06:db:d7:87:ea:49:ac:4b:5f:
b9:70:a3:32:5b:7c:81:8b:98:d3:b9:5a:23:1d:b3:
d2:4d:c3:43:fa:3b:d9:fe:38:7b:7d:49:35:27:46:
cd:fa:27:2e:46:43:b8:5d:53:7a:b9:e1:49:7f:1d:
74:22:55:6c:9f:6e:4c:c5:cc:35:5f:bd:0f:91:64:
7f:9d:7a:0c:e2:25:23:29:df:06:1e:da:34:e5:e7:
6e:13:dd:e2:33:cd:95:32:26:6a:63:26:e9:6c:0d:
32:08:a4:fb:fd:54:30:3f:49:b9:9a:2d:97:4c:ce:
d8:7c:99:bb:18:32:db:ff:ce:fb:21:e9:a2:fc:da:
e6:98:b6:97:49:45:fe:90:e4:dd:0b:d2:3b:68:5d:
f2:2a:d2:f1:a7:5f:c2:70:69:11:3d:ab:78:97:19:
11:7a:f0:00:97:da:8d:66:72:ce:1d:30:60:3c:85:
3c:c8:c6:f3:2f:9a:41:9b:d8:b9:a8:56:00:63:71:
2f:b3:6f:8b:5d:e6:1e:52:24:c6:81:35:c7:f0:26:
c1:19:5e:46:71:90:e9:af:a1:00:61:99:37:68:cb:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D5:69:FF:A6:38:6C:FE:62:7F:17:35:3E:13:79:3B:9E:D0:84:01
X509v3 Authority Key Identifier:
keyid:13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d2:43:45:a0:9b:15:04:1c:99:4a:31:4e:9b:85:c7:09:21:
b4:2b:26:f0:2b:0f:69:9a:35:e8:87:b5:e5:ab:e3:fb:d3:12:
2b:71:b4:9c:79:8d:b2:ae:a8:ed:75:94:46:5d:ea:48:25:13:
cb:fa:99:55:42:c7:c3:b6:ae:93:a2:74:58:1c:84:45:8b:1b:
a2:92:a9:0a:23:32:c4:36:47:80:17:40:89:8b:7f:39:7d:79:
e0:0e:27:72:a0:ff:84:66:47:30:c1:4c:b0:08:1c:f8:17:59:
e2:59:28:82:5c:fd:81:e7:12:01:20:9f:35:ca:fc:ca:91:b9:
20:18:fb:cd:5b:2a:42:31:e2:ca:64:69:1d:13:d4:83:ce:12:
26:ad:ba:61:63:40:3a:ea:3a:15:34:1b:78:e5:6b:c6:34:b5:
cf:97:e0:ee:b2:33:7b:6d:b7:1a:dd:56:7c:9f:43:94:fd:15:
4b:1b:94:a0:14:e9:62:9b:46:9b:ed:07:3a:e5:30:11:8d:73:
e9:dc:e8:8f:14:62:fc:6e:86:e7:8e:e4:43:8b:37:43:a5:3f:
ef:5d:83:0a:2b:d0:1a:e7:f0:8a:7b:e1:78:c5:ed:c0:5a:09:
38:50:c3:f2:2c:da:f0:d6:22:a6:41:66:dd:c4:a9:52:66:54:
f6:36:55:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHP6Hps68KsWO6htYUF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzY2M2MzA5YWMzMGE3ZmMwMTVjMzM0NGNiYzgwODYxYjRj
NTQ3Y2YwHhcNMjUxMTExMDcwMTQ0WhcNMjUxMTEyMDcwMTQ0WjAzMTEwLwYDVQQD
EygyNGQ1NjlmZmE2Mzg2Y2ZlNjI3ZjE3MzUzZTEzNzkzYjllZDA4NDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5GXv+op0GH5fVsgp5xYaqcEjHcE
sNS7ZpYaHG5/t+shDBcG29eH6kmsS1+5cKMyW3yBi5jTuVojHbPSTcND+jvZ/jh7
fUk1J0bN+icuRkO4XVN6ueFJfx10IlVsn25Mxcw1X70PkWR/nXoM4iUjKd8GHto0
5eduE93iM82VMiZqYybpbA0yCKT7/VQwP0m5mi2XTM7YfJm7GDLb/877Iemi/Nrm
mLaXSUX+kOTdC9I7aF3yKtLxp1/CcGkRPat4lxkRevAAl9qNZnLOHTBgPIU8yMbz
L5pBm9i5qFYAY3Evs2+LXeYeUiTGgTXH8CbBGV5GcZDpr6EAYZk3aMvDNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTVaf+mOGz+Yn8XNT4TeTue0IQBMB8GA1UdIwQY
MBaAFBPMYwmsMKf8AVwzRMvICGG0xUfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80OGQ2YWEtYWZkNS00MTY4LWIxMDQt
ZGQzNzY1YzJlZWU0LzEvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80OGQ2YWEtYWZkNS00MTY4LWIxMDQtZGQzNzY1YzJlZWU0
LzEvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9JDRaCb
FQQcmUoxTpuFxwkhtCsm8CsPaZo16Ie15avj+9MSK3G0nHmNsq6o7XWURl3qSCUT
y/qZVULHw7auk6J0WByERYsbopKpCiMyxDZHgBdAiYt/OX154A4ncqD/hGZHMMFM
sAgc+BdZ4lkoglz9gecSASCfNcr8ypG5IBj7zVsqQjHiymRpHRPUg84SJq26YWNA
Ouo6FTQbeOVrxjS1z5fg7rIze223Gt1WfJ9DlP0VSxuUoBTpYptGm+0HOuUwEY1z
6dzojxRi/G6G547kQ4s3Q6U/712DCivQGufwinvheMXtwFoJOFDD8iza8NYipkFm
3cSpUmZU9jZVKQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:19 2025 by rpki-client