Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier: OS9Wdx/VXKmUBcnjx6GeH6gy+uVUUqAnQ30Xe6prEz4=
Subject key identifier: 6D:E8:D7:BA:A0:1C:DF:AA:7E:ED:35:52:5A:43:28:B8:7E:F7:B4:F4
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer: /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial: 0199FCC691D947A4C2F8842E37C024635DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number: 0664
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: HS1miPb3wrC1J2LyvaYEk0yPlpOS7IbK918N76Wr8ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:91:d9:47:a4:c2:f8:84:2e:37:c0:24:63:5d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=6de8d7baa01cdfaa7eed35525a4328b87ef7b4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:29:8d:6c:59:0b:7b:c6:a1:55:a9:0b:bc:56:
45:be:46:44:64:a4:f2:b8:71:0a:03:2f:ca:83:23:
cb:86:bd:75:34:60:29:24:b1:14:31:be:79:6c:ee:
0e:3a:ed:e6:ec:56:a6:40:43:03:06:71:07:57:5a:
f4:5b:9a:f4:af:3e:7c:75:d8:0f:87:96:cf:1c:4f:
0f:06:01:ea:e6:ae:8b:7c:28:48:25:99:cd:f3:c3:
2c:a7:40:b6:e6:45:ee:e4:af:97:9d:af:63:2f:ba:
45:5c:bb:57:ef:21:0c:68:91:bc:f8:c0:9b:99:4d:
21:b3:4b:3a:a9:97:9d:5f:37:6a:3d:08:33:5a:bb:
0d:0e:6f:6f:66:70:9b:68:d3:1b:8c:94:6e:1b:c5:
2b:0c:e8:1f:33:08:74:bc:06:1c:9d:ad:0b:08:b8:
06:24:21:60:85:4d:73:de:bd:2a:1a:5c:c9:94:3e:
d4:52:90:62:a5:dd:72:5e:59:bb:85:78:1a:d6:f2:
15:bf:6e:40:76:e4:08:4c:65:4f:6b:f0:50:57:dd:
67:ef:6c:c9:fc:c9:0d:76:07:cc:b4:9c:03:e0:70:
30:69:b2:3c:42:57:51:f1:93:21:fc:f8:ea:30:13:
a7:c1:11:fc:bb:0e:39:51:b8:31:3c:c9:0c:c4:1f:
b4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E8:D7:BA:A0:1C:DF:AA:7E:ED:35:52:5A:43:28:B8:7E:F7:B4:F4
X509v3 Authority Key Identifier:
keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ca:a6:cf:38:0a:22:41:93:4f:7d:98:d6:26:87:2a:92:ce:
18:ef:73:f8:0a:64:dc:08:2c:cd:46:7e:26:14:6a:61:ae:78:
01:6b:d5:4a:d0:32:92:7d:b1:f6:85:c4:6c:cd:c7:20:55:94:
3e:ef:e6:2d:58:ff:9e:07:bd:33:51:a4:33:9c:40:86:f6:00:
8a:f3:b7:35:59:44:61:a2:61:25:82:4e:01:e7:c6:7f:b6:36:
18:73:83:41:42:c4:86:48:f8:4f:d8:ea:84:75:f0:18:bc:8e:
9b:a7:ed:d1:42:27:4f:ca:51:72:1c:49:cd:5f:b9:56:91:7e:
1c:c9:61:cc:ec:6f:8e:ec:04:64:f4:34:8b:61:e4:71:8b:1a:
84:ed:2c:1a:b3:c3:22:b8:cf:c7:09:0b:69:53:47:d6:96:d0:
a4:4e:eb:15:34:23:50:d0:84:12:30:ff:53:b2:88:80:2e:aa:
b1:e1:fe:48:cf:56:fa:82:28:76:c3:b6:94:86:65:ba:f0:ae:
71:40:a6:0e:e9:f9:d5:2d:ff:af:af:f0:1c:0b:57:c6:e7:6e:
da:b1:9a:14:40:be:8b:dd:2e:5f:10:af:72:1f:6d:19:8b:84:
4d:2a:9a:99:f2:f9:7e:c9:4f:dd:bb:fb:54:c2:85:aa:c2:d9:
f6:dd:19:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:33 2025 by rpki-client