Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
File: E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json)
Hash identifier: fVwDMk79oUt6MeOGBa45RkD1ppL0QbBT0CNeahIL1h4=
Subject key identifier: 02:BC:C3:88:1D:F8:10:C5:45:4D:82:E7:DF:E9:0F:01:32:72:52:C8
Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35
Certificate serial: 0199FE105AED0204A54AC31B037C0FECD200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
Manifest number: 163C
Signing time: Sun 19 Oct 2025 20:01:48 +0000
Manifest this update: Sun 19 Oct 2025 20:01:48 +0000
Manifest next update: Mon 20 Oct 2025 20:01:48 +0000
Files and hashes: 1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: iUhtJDl68KrhZtHO8vhD8HNCbxak8VHIaB1D7j1Csg0=)
2: pPGln_tGe3Wb0dePm4ie5BM7xaM.roa (hash: e7lXmv0/qA8zwcIJTP+HZzZQ8eseEaVWqcUevE7q2Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:5a:ed:02:04:a5:4a:c3:1b:03:7c:0f:ec:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35
Validity
Not Before: Oct 19 20:01:48 2025 GMT
Not After : Oct 20 20:01:48 2025 GMT
Subject: CN=02bcc3881df810c5454d82e7dfe90f01327252c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:3e:96:eb:39:ca:6b:98:2c:01:15:80:5b:
e7:5b:2c:b8:36:78:d8:e4:d8:3b:1a:85:d1:15:d8:
52:51:12:33:9c:1e:13:81:64:fd:7b:94:57:6f:4e:
f0:a4:ab:59:7b:50:74:2f:c7:d0:f4:55:51:03:75:
92:07:0a:a0:c8:0e:f3:22:7f:94:66:c1:f8:2c:21:
84:a2:99:71:3b:4e:83:bb:eb:d7:53:98:83:11:dd:
24:ec:a6:ca:bd:6f:fa:23:7a:04:27:d4:d1:e0:e8:
51:b4:d2:58:a4:52:bb:91:a9:3c:62:68:c8:56:fc:
63:25:fb:44:c6:f0:29:67:10:b8:1a:19:c0:4c:b8:
de:64:d8:8f:9e:80:96:9a:26:f9:0f:30:c6:33:8e:
85:8a:7a:b7:cb:9b:25:8e:b8:90:af:63:a4:70:da:
6d:51:27:12:36:17:7b:e4:78:75:24:71:06:85:34:
a4:9b:04:2f:a5:79:20:22:37:ad:66:3b:34:2c:d3:
fb:3d:c5:d5:07:69:5b:1c:39:97:c7:38:e3:1d:f2:
cc:51:eb:69:84:7c:88:d4:38:f5:fc:f7:2d:10:c8:
65:34:89:34:ac:b6:07:3a:28:c7:23:9e:4c:52:20:
70:36:f3:1a:49:0c:69:5b:18:f3:54:0f:94:c2:d7:
40:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BC:C3:88:1D:F8:10:C5:45:4D:82:E7:DF:E9:0F:01:32:72:52:C8
X509v3 Authority Key Identifier:
keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:82:c1:28:d8:2c:16:7d:56:41:d0:d3:b4:e4:f3:43:f3:dc:
77:a7:ad:aa:1a:0e:36:59:a1:4d:ad:71:90:91:be:98:d7:d3:
43:b4:9d:f3:28:7f:45:5b:47:2b:84:6c:d2:53:89:07:25:2e:
f0:a7:a8:cc:d9:6d:e7:43:44:17:84:58:b7:94:54:ea:92:79:
b0:c5:55:82:b4:e1:c4:29:d8:f7:fe:4b:0d:99:32:8d:af:71:
be:38:ba:92:a7:9f:db:f0:18:55:4c:88:de:93:08:b9:2c:ae:
d1:68:92:b4:2c:b7:e8:15:dc:49:40:c9:41:2b:52:1e:3b:29:
57:90:23:07:31:25:7f:6d:a8:0c:01:2a:f9:43:ad:92:6c:83:
da:c4:a2:68:dc:be:fd:5d:3b:55:df:8e:b7:35:62:0c:3d:89:
64:27:ab:b7:ee:99:47:1c:a6:6d:a1:77:6b:dd:d2:b1:b4:3a:
74:47:e5:c5:85:e9:11:46:87:16:c4:21:4a:05:61:24:8d:8c:
be:34:82:01:9b:83:01:e1:4f:8a:45:39:ea:6e:8d:61:a4:a0:
97:ed:c0:5c:75:b6:0c:80:da:ba:70:1f:29:61:2a:88:69:5b:
ae:81:bf:44:ab:31:53:bd:b7:11:0a:60:14:88:cc:55:26:64:
c5:85:6c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:56 2025 by rpki-client