Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File: E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier: VC0wgwY8TGxrqbrymAKx0MkG7ap/xDTYsgbJZqnBJrY=
Subject key identifier: 9B:E8:4F:D9:1B:A9:EF:B0:6D:27:AB:18:F6:00:7D:C2:76:8A:C1:E5
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial: 0199FFC72018329366032E0BB3BC529D3C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number: 104D
Signing time: Mon 20 Oct 2025 04:01:03 +0000
Manifest this update: Mon 20 Oct 2025 04:01:03 +0000
Manifest next update: Tue 21 Oct 2025 04:01:03 +0000
Files and hashes: 1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: efVrBczl0r9fdAKzxXuOq54g/HeqUh/V+l9DkHQXIcY=)
2: o33nzDd8Ud4SHUROSKPBqYvsK3I.roa (hash: 0uR5NTZUtirBbDZZiV+z6XYeVClsGx8GOL6f3pU8rh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:20:18:32:93:66:03:2e:0b:b3:bc:52:9d:3c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Validity
Not Before: Oct 20 04:01:03 2025 GMT
Not After : Oct 21 04:01:03 2025 GMT
Subject: CN=9be84fd91ba9efb06d27ab18f6007dc2768ac1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:ad:f8:56:40:8c:7a:86:40:de:dc:27:c4:
ee:9e:2e:09:4d:c2:5e:43:d2:be:87:dd:15:82:f2:
e1:06:25:b9:7f:6d:df:ae:c4:dd:54:97:f0:0e:d4:
b9:cb:73:77:96:7d:6b:30:dd:8c:d0:54:37:e1:fa:
b1:1c:ac:b7:c2:52:b4:71:61:1e:e4:cb:e2:0c:13:
5c:2a:22:6f:67:dd:a8:a2:b6:41:d0:93:ce:2a:68:
92:89:f9:96:aa:ba:e6:74:d8:80:cb:9d:0d:f0:df:
44:ba:04:e8:cb:00:85:32:0c:48:7b:20:7b:52:04:
b9:8a:f9:65:a9:42:b0:ec:fc:38:23:8c:42:cf:f1:
58:29:33:e1:f1:d1:77:4f:e5:04:11:5d:03:99:48:
e0:03:75:0a:68:ff:05:f8:1f:f4:d7:0c:7a:49:6c:
ef:3d:0b:39:ec:57:d7:93:d9:f3:4c:c6:8f:74:a6:
fa:2a:11:1d:e9:9f:c9:e5:51:0d:6a:bd:a2:4b:5d:
78:1f:cb:d6:5b:93:b4:96:ab:7d:53:4e:cc:7b:97:
0a:4a:be:90:8c:ad:a9:b0:b0:49:dc:00:ff:cc:96:
e8:62:48:bd:d5:90:da:b3:5c:ea:a6:f9:59:90:7d:
21:e7:bc:8d:c4:a5:e4:34:48:78:cf:fa:74:7a:b7:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E8:4F:D9:1B:A9:EF:B0:6D:27:AB:18:F6:00:7D:C2:76:8A:C1:E5
X509v3 Authority Key Identifier:
keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2c:fe:9e:c6:ad:bb:f3:e9:ca:ad:e0:5b:df:8c:fa:4f:98:
5e:d5:81:67:ba:1d:d1:45:df:9d:96:cc:65:4d:e6:6a:81:d1:
1b:85:82:6a:68:68:9d:10:34:8d:02:d8:9a:81:e7:1f:e2:d9:
7d:fc:6a:4a:01:3b:8a:ad:8c:e2:c5:cb:b6:59:59:94:e4:3f:
29:d6:e9:19:41:36:a4:f2:89:e0:90:48:43:36:05:ce:cb:1c:
04:1e:03:1f:97:12:b6:38:e4:4b:37:66:d6:3a:26:22:bc:41:
08:1b:1a:ca:7d:89:54:e9:49:35:16:f5:b7:12:43:05:a2:95:
bb:f5:7e:62:2f:ce:3d:1a:5b:0d:06:af:76:c3:58:dd:b7:be:
ef:7a:6a:3b:71:83:36:2b:d5:f3:6d:47:d0:f0:72:78:a7:c7:
7b:a3:bc:bb:e3:24:a5:9a:00:21:fe:31:08:3f:f8:15:75:46:
b5:40:4f:11:cf:01:74:c5:95:24:2f:cb:78:f8:7b:0a:50:46:
92:32:05:35:16:3f:98:2f:b0:53:ab:df:31:ef:99:08:87:b3:
b9:cf:ad:1e:c2:91:85:65:60:7c:b4:f5:18:3c:6f:9e:f6:14:
12:ee:bc:1a:2c:8e:e1:0b:0f:1f:e1:4b:e8:25:be:27:1b:dd:
55:2f:76:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:18 2025 by rpki-client