Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
File: E3W0CTjYfNMycmqqSBqnGubphxc.mft (raw, json)
Hash identifier: EgGQmSglPbR5X03UC9QSxpobzNuj3UlVMLp6FZBebxU=
Subject key identifier: F9:50:E5:94:21:40:ED:DD:ED:D6:C2:D1:B6:84:14:6D:3E:26:69:51
Authority key identifier: 13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
Certificate issuer: /CN=1375b40938d87cd332726aaa481aa71ae6e98717
Certificate serial: 0199FDDA205DA88517FFCBEF66F7BE6511AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
Manifest number: 0FE1
Signing time: Sun 19 Oct 2025 19:02:34 +0000
Manifest this update: Sun 19 Oct 2025 19:02:34 +0000
Manifest next update: Mon 20 Oct 2025 19:02:34 +0000
Files and hashes: 1: E3W0CTjYfNMycmqqSBqnGubphxc.crl (hash: SN4DKilyqwS3YYIKjYstrZfd3UkoLWbwqeHBt4aPk9I=)
2: mCL_9-CtuY-87CF98-9c33rXIUE.roa (hash: wOWeLe9RAlzQTuA4jLsQKE3f+PG+mmJoHLvKrWcnYc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:20:5d:a8:85:17:ff:cb:ef:66:f7:be:65:11:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1375b40938d87cd332726aaa481aa71ae6e98717
Validity
Not Before: Oct 19 19:02:34 2025 GMT
Not After : Oct 20 19:02:34 2025 GMT
Subject: CN=f950e5942140edddedd6c2d1b684146d3e266951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:45:bf:76:d1:0e:eb:5d:e1:4c:28:ef:c6:
48:39:15:f1:80:ca:c4:8e:d5:7c:dc:cb:07:b6:49:
ac:68:84:28:04:56:f4:9f:de:67:0f:b4:4e:16:d5:
a4:0e:b2:72:02:99:d3:73:f0:ba:01:b4:56:35:af:
95:90:49:15:7d:a5:5a:be:50:4e:fa:71:be:9b:2e:
fe:73:4c:48:e2:27:d7:2e:62:ef:01:9a:b9:5b:04:
1c:4d:c0:b8:21:32:c8:1b:2b:e9:b3:fa:23:00:d0:
14:c4:fa:7c:ab:9e:47:25:14:bd:04:54:db:e6:14:
e1:b9:e7:e6:c5:97:c3:39:8e:20:1a:b6:f5:63:9e:
a3:81:7b:18:32:00:48:40:b3:7d:55:ef:f0:25:68:
24:2f:1b:d4:d0:b1:e9:ae:7f:9b:80:a8:6c:db:d1:
d4:d6:ac:a6:e3:1e:59:52:5a:c0:b7:c2:f2:9c:57:
77:ac:04:1c:8b:ad:a1:92:a9:99:0c:28:5a:dc:a2:
3c:25:4e:0b:2e:91:7f:3e:37:5d:ce:8f:8a:ef:ce:
e5:0a:dd:9c:7a:cc:46:e6:64:f5:b6:52:57:c2:e2:
8d:af:86:21:d1:46:a3:78:90:19:d8:2b:d6:c9:79:
23:1a:ad:79:56:1b:51:77:9b:81:07:52:fd:c1:19:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:50:E5:94:21:40:ED:DD:ED:D6:C2:D1:B6:84:14:6D:3E:26:69:51
X509v3 Authority Key Identifier:
keyid:13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d6:29:62:15:d7:de:21:a3:40:21:7d:21:95:35:d9:e0:5f:
57:98:c2:23:7f:99:67:05:a8:4e:82:d6:28:a4:2a:42:47:75:
bc:e9:e5:50:a3:a6:75:de:d1:c4:15:fc:24:7d:a1:23:9b:f1:
dc:85:42:87:54:9e:51:e8:51:25:bb:f1:f1:73:02:55:d3:67:
47:cc:a2:81:76:1d:ca:7b:7b:9a:38:16:9c:08:d2:33:ad:15:
81:bc:54:53:a1:51:9a:0d:1e:03:34:d9:8e:c4:cd:95:61:e5:
8e:9c:22:9a:52:fe:7a:59:40:aa:fe:56:6e:1c:c7:12:da:e3:
82:76:ba:ec:64:c4:06:7e:e1:07:73:4f:37:01:d4:bd:05:b8:
6e:19:c5:95:77:58:09:50:2f:56:dc:11:87:16:46:54:ef:0f:
04:e0:ce:fc:41:1c:df:b9:97:aa:95:72:8a:f6:ce:23:35:e1:
3c:e4:b1:b3:9f:a5:85:56:87:3e:66:25:86:fc:f4:35:8c:6a:
2a:ed:11:e2:0b:3a:23:4a:1e:3c:6c:be:b6:d6:24:2e:70:0c:
e9:49:d1:2c:d9:18:f5:36:0b:90:46:5c:dd:ca:ad:25:f3:3c:
c6:50:73:ff:62:2a:19:43:04:74:7e:0d:9e:9a:d3:c5:3f:ae:
2d:24:91:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:13 2025 by rpki-client