Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
File: e-CvRatOV0VvWgpA36hPjYBhBmQ.mft (raw, json)
Hash identifier: sYslrycsifboGDKJg4anC0W2uGfGkjbKmFYPzcCJgxg=
Subject key identifier: 53:D2:DD:28:AC:A7:AA:EA:36:BC:5E:2A:89:9E:F1:7F:A3:48:DA:99
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 0199FFC7DDD011AE6491207BE130576F3338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 04:01:52 +0000
Manifest this update: Mon 20 Oct 2025 04:01:52 +0000
Manifest next update: Tue 21 Oct 2025 04:01:52 +0000
Files and hashes: 1: L3EzGRS_cQiiqxRcr6-IVlPq90c.roa (hash: WyhkbKAlOi0tYeIJPyH0sVoGZlIljn2uVDmX+5Mz2XM=)
2: d3-nUmhWPxilxJYRIxnkrR3tjhI.roa (hash: nCRP7GSY9Gpb6j6rYf+Ya74feBJgqnxBiBarST+uqyM=)
3: e-CvRatOV0VvWgpA36hPjYBhBmQ.crl (hash: eTTv1jxynpIWCF2t+n19M1jJgjDWUW0NrREzWZxoDQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:dd:d0:11:ae:64:91:20:7b:e1:30:57:6f:33:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Oct 20 04:01:52 2025 GMT
Not After : Oct 21 04:01:52 2025 GMT
Subject: CN=53d2dd28aca7aaea36bc5e2a899ef17fa348da99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:8f:fd:83:34:0b:f8:74:38:d2:b8:69:4a:
b6:73:42:38:08:7d:bc:f5:96:d9:67:20:8e:78:93:
1d:f4:c1:5e:33:27:3c:6c:9f:c8:32:c9:95:1f:77:
7f:6c:1a:00:eb:2a:9e:da:23:70:d1:9c:ca:01:59:
f0:51:64:6c:1b:3c:47:74:91:76:6e:66:41:0e:70:
2a:4c:6c:af:2f:df:f6:ad:55:a6:96:73:7c:89:df:
85:f6:dd:29:f6:bf:4b:2d:5b:6c:6a:9a:03:02:19:
a3:4c:ae:b3:6c:b0:e8:84:49:f3:eb:2b:1c:1f:95:
5e:e8:06:27:50:68:aa:31:e6:08:95:b0:c9:e5:39:
f3:d4:6a:88:12:6f:dc:05:5d:1b:b1:61:04:ff:09:
83:11:e6:67:89:92:93:ef:db:07:74:be:19:f4:b8:
33:69:c4:92:bc:30:49:8d:ef:0b:61:7d:36:d6:13:
00:50:59:29:55:f4:9b:3b:ef:38:53:e0:52:ab:4a:
41:63:a9:48:a6:13:01:4e:96:0b:29:7f:f9:b2:48:
d3:5d:95:32:9d:eb:1f:7c:53:ff:99:48:e1:5a:e2:
8d:c6:ad:2e:df:3c:33:39:dd:47:88:f9:13:ce:35:
4c:bf:7f:be:7c:ce:2a:ef:f3:16:ce:bb:55:f8:3f:
8a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D2:DD:28:AC:A7:AA:EA:36:BC:5E:2A:89:9E:F1:7F:A3:48:DA:99
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c0:53:3f:0b:b8:06:1f:df:de:89:2f:48:fb:e5:79:cc:dc:
14:a7:3c:d3:49:3d:82:2f:9c:d9:7e:4a:e3:1f:b2:10:b0:75:
24:e2:96:1b:20:73:49:66:73:a7:fc:d7:fd:24:71:6f:cf:96:
d9:44:77:5c:66:a8:d4:99:db:04:56:fa:27:71:58:03:48:00:
21:ef:cb:8c:8a:b0:1a:40:ed:b9:25:ae:74:27:11:bd:08:89:
d6:cb:84:9e:7a:58:92:dc:03:98:27:af:e9:2d:0a:ff:23:35:
81:2f:68:61:fd:26:04:1f:1a:ab:b9:e4:8d:4b:8c:21:46:f0:
47:e1:70:54:36:86:42:16:a8:6e:be:c1:94:e0:e9:b6:19:a8:
01:1f:6d:da:ca:59:79:eb:18:f3:ed:37:ae:15:50:9f:5e:d0:
6f:4e:af:12:22:8b:76:1e:35:9b:54:9b:d6:f7:e2:45:db:cd:
48:a2:7b:e3:b7:55:05:d0:9d:b5:d0:ab:51:da:5b:03:a7:6c:
c3:10:85:a1:24:82:a8:cf:79:cd:6e:00:50:42:a2:df:fb:46:
32:e5:4b:33:93:54:67:19:52:08:4b:59:ba:03:ea:2a:75:36:
06:76:ff:ea:5f:2f:98:df:4f:18:52:d4:ba:bf:c3:00:e0:39:
6a:ab:d0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:20:45 2025 by rpki-client