
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
File: E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft (raw, json)
Hash identifier: V3L8Z8FurqNLnAGmsydqX+WJIAl19bMuEUr7LTtxv1I=
Subject key identifier: E1:5C:42:26:3A:CD:11:F8:7E:2F:98:9B:B1:A9:72:21:B2:4E:83:AE
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial: 0199FBEAC813F6ADBDD95A929823A93D6775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
Manifest number: 0970
Signing time: Sun 19 Oct 2025 10:01:31 +0000
Manifest this update: Sun 19 Oct 2025 10:01:31 +0000
Manifest next update: Mon 20 Oct 2025 10:01:31 +0000
Files and hashes: 1: 1W5jBhM2asNXAd6Fvn9ZWx6hGWA.roa (hash: 2BmEhsjJ5rUlKnSSBB9lDoAty6aoaTeOv+q+nl7pHv4=)
2: E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl (hash: zH8cH5NECfV4yEwqfZY+T0bFKF0kVG31mFuJn26yV8o=)
3: ZCtSSCWVJN3ZEraOSBb6muqnelY.roa (hash: ANfL3CikAp/rt+byg120TXAfb3FwuafgueHb91UmTFU=)
4: tusGHuemKxJEouTT2Dt00jxkpNE.roa (hash: EY8wTIVVgdpKzSD1Zx8DGd8TDmPVDkE4Wh1dl0CmPFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c8:13:f6:ad:bd:d9:5a:92:98:23:a9:3d:67:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Validity
Not Before: Oct 19 10:01:31 2025 GMT
Not After : Oct 20 10:01:31 2025 GMT
Subject: CN=e15c42263acd11f87e2f989bb1a97221b24e83ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:ff:8d:8b:b5:09:18:fa:a1:99:a4:61:03:
9d:bb:8c:3d:98:95:67:07:01:4d:ad:05:d6:7e:6b:
4e:2d:3f:59:50:1c:23:59:f1:3c:b1:bb:79:68:6b:
06:15:bc:17:4d:98:d8:bf:53:ef:65:14:8e:65:92:
2b:8c:4a:b8:fb:2d:b1:47:03:b7:43:f6:0a:4f:44:
88:8d:5d:79:28:ed:7c:8d:76:92:57:7d:e5:8d:10:
d5:a4:07:a8:b4:67:86:45:f8:ac:ed:1c:3b:b4:71:
74:cc:8c:f8:cc:64:85:13:19:15:d6:a4:33:d4:c7:
22:05:15:bc:d3:8d:30:50:00:e7:54:70:6f:f2:8b:
f3:40:22:15:2c:3f:a9:d8:6d:31:c3:7c:7b:ed:63:
6d:54:83:8c:84:35:02:72:f4:c1:a0:32:ae:87:de:
79:ad:c5:fb:3f:29:2d:62:57:a0:f6:25:d4:6d:e7:
f8:a6:ea:da:4b:e2:e1:2a:4b:9c:9f:88:64:f3:1d:
eb:5d:57:c3:03:e3:b8:fa:dc:ed:ac:c8:b8:80:15:
c6:b0:a8:5c:a8:85:bf:9b:71:11:ed:53:54:c3:0c:
2f:10:17:6e:8a:30:c1:fb:27:b3:7e:c7:d0:5f:aa:
ab:fa:18:46:6c:19:82:bb:e6:f5:88:7c:6a:cc:a7:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5C:42:26:3A:CD:11:F8:7E:2F:98:9B:B1:A9:72:21:B2:4E:83:AE
X509v3 Authority Key Identifier:
keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:41:54:30:2d:f7:b6:ee:d1:f8:7d:f4:8b:1b:93:aa:22:40:
a4:b7:f8:7d:24:5b:31:7f:55:9f:e7:08:cb:89:42:88:eb:b6:
7b:e6:69:f5:de:1f:16:f9:77:1e:ae:30:8b:f7:94:ef:ee:5a:
5d:1a:f7:11:9b:fe:06:fc:fa:81:98:11:8f:fb:2a:73:0e:c0:
d7:21:94:62:df:fb:f3:80:8e:ba:6c:a0:6d:d6:9f:62:39:bc:
de:fa:1e:17:1e:f5:c4:0b:79:7c:e8:9b:a0:c6:00:fe:37:bc:
0e:4d:f7:1a:d6:b9:91:2c:c9:36:ba:0a:95:e8:29:4a:31:2d:
23:14:f4:77:2a:9d:8a:69:42:b7:bc:66:b2:3d:dd:56:3b:df:
cb:df:84:13:c9:45:d4:c1:a5:18:42:64:eb:a9:e5:e0:ff:46:
5c:52:b8:c8:fa:35:f3:26:eb:10:fb:41:8e:dd:56:bc:a3:2f:
0c:e1:61:ce:9d:66:12:b4:cc:d7:b9:da:6c:b9:93:88:d2:0f:
91:0d:8b:ff:b2:b4:f4:96:55:7e:9c:bd:eb:3a:cf:8c:50:bb:
58:32:5e:60:2e:c7:14:29:5d:67:9e:c2:a1:31:25:65:ee:86:
54:35:00:66:70:64:6f:b1:9c:ac:03:3c:02:cd:c1:09:3c:fd:
9f:cd:0e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:25 2025 by rpki-client