Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: 2jPXHdEVaOvIVsKc25sMVFsaREFAreclFPhwhgzIJ4I=
Subject key identifier: 04:2A:22:E9:90:51:55:A5:69:CC:24:F0:09:6D:8A:45:4B:89:7D:E9
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 019A47A91C218CF69AA89708221B7518CDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0D9E
Signing time: Mon 03 Nov 2025 03:00:56 +0000
Manifest this update: Mon 03 Nov 2025 03:00:56 +0000
Manifest next update: Tue 04 Nov 2025 03:00:56 +0000
Files and hashes: 1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: fhgrmImnX76cX17IMbvbPgmSBtNRDfksc3eAMMgucRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:47:a9:1c:21:8c:f6:9a:a8:97:08:22:1b:75:18:cd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Nov 3 03:00:56 2025 GMT
Not After : Nov 4 03:00:56 2025 GMT
Subject: CN=042a22e9905155a569cc24f0096d8a454b897de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:e9:6b:e7:c1:2e:dc:80:ca:07:b5:42:f5:
3b:c8:92:00:9f:40:30:86:4d:46:0e:e8:47:83:32:
7d:75:b3:4e:e2:3e:bc:3b:98:a5:f3:4f:a9:ed:5f:
21:5d:d7:b1:b6:b6:aa:d4:48:c5:42:6c:df:42:37:
a1:ba:45:15:cc:e5:1d:61:6e:74:bb:de:da:ea:e6:
2a:3a:0b:33:f1:7d:4c:4b:eb:9b:e6:64:39:6d:27:
45:ff:ac:c5:98:e7:4f:8a:ce:08:c4:13:0a:dd:2d:
2a:61:11:01:03:78:a3:10:d4:56:d5:4f:59:e2:3e:
53:df:56:a8:ba:2c:98:7f:19:31:32:dc:34:ba:ff:
9b:a6:95:f5:0c:d0:7a:40:29:04:75:50:be:1f:52:
75:94:87:04:71:96:32:c2:3a:40:6a:ef:d4:ab:8b:
b6:90:a3:3d:61:c2:b2:11:53:9c:47:bb:2e:a7:ae:
c8:be:b5:de:02:05:34:b6:49:7c:97:1c:55:50:58:
28:21:51:04:82:5c:57:64:1b:02:a3:70:b5:58:3f:
8c:e9:4c:42:18:50:d0:2c:c0:a6:77:bf:69:95:8b:
e2:a0:da:df:57:5a:18:10:3e:1a:4c:94:bb:aa:b3:
35:91:f9:1d:cd:ae:a5:89:ff:e9:d9:9e:07:a5:27:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2A:22:E9:90:51:55:A5:69:CC:24:F0:09:6D:8A:45:4B:89:7D:E9
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1f:53:73:39:45:14:b4:43:70:e0:43:df:d3:3b:f7:22:d3:
28:08:35:85:ff:a6:99:60:56:17:93:50:a8:25:22:8a:bd:d5:
79:07:17:c5:ac:9d:97:5c:54:b4:be:33:7c:80:b2:00:49:2d:
c1:dc:9d:a3:fa:fe:18:55:60:d8:97:c9:71:c9:76:a4:a8:59:
61:6b:8c:17:24:a7:7e:0d:6a:7c:9b:7d:0b:f2:ca:df:fb:04:
85:d3:b0:dd:a2:74:2a:ee:54:92:3c:d9:06:29:d9:51:a6:2d:
3a:0b:f8:0d:12:fa:1d:a4:28:a5:3c:05:25:90:93:64:8f:b3:
34:04:d5:50:e9:2a:eb:52:50:4a:19:e1:6d:3a:22:f8:a9:b6:
91:16:08:c8:f0:94:81:14:1d:1a:ce:69:43:e5:ce:a7:4f:7d:
eb:46:ca:5b:ea:c4:8f:76:78:c1:3b:76:c1:0c:54:27:db:f5:
4a:84:a9:ca:c8:a2:db:69:49:46:6a:26:32:f3:a3:31:95:4c:
4e:a6:92:be:07:21:d4:7d:aa:d3:b5:2c:a5:0b:2c:bb:0b:65:
1b:45:2e:77:81:7c:09:d1:a3:de:e4:d2:c5:6d:8e:d7:a1:a7:
cf:34:ba:08:80:13:9c:e2:39:42:e6:79:01:30:d6:cc:8a:d8:
67:eb:63:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:42 2025 by rpki-client