
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier: cPZ6dTHMgAc3MqC+B6pklt7kg7Xje2G0ixfCy863uAw=
Subject key identifier: C4:A3:DF:99:53:69:81:98:D1:C2:A5:00:33:D9:33:D0:79:C4:E4:13
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial: 0199FC8F153814EF4BA2F5E82AB9E6738654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number: 0E64
Signing time: Sun 19 Oct 2025 13:00:59 +0000
Manifest this update: Sun 19 Oct 2025 13:00:59 +0000
Manifest next update: Mon 20 Oct 2025 13:00:59 +0000
Files and hashes: 1: iCdHueFJzoeCEXGqlVVm5ScVPLc.roa (hash: WO+D1FK6ZZiW8oMD1xh3ZGMyihQtIz38YWI4KrXD8lM=)
2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: /NAmWsJd3Ys0Xmf2TsmorR2L4pofemoarx2Ma6iqbUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:15:38:14:ef:4b:a2:f5:e8:2a:b9:e6:73:86:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
Validity
Not Before: Oct 19 13:00:59 2025 GMT
Not After : Oct 20 13:00:59 2025 GMT
Subject: CN=c4a3df9953698198d1c2a50033d933d079c4e413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:18:ca:a7:9b:3b:49:dd:f6:26:7f:dd:23:
17:c5:ae:81:17:a9:a6:87:d3:60:b5:15:a8:c9:7e:
1f:3c:55:3b:d3:6d:8e:73:ad:99:54:1b:0e:79:d1:
29:4a:40:e1:12:9b:58:4e:ed:70:fa:b2:67:14:c0:
6d:a5:ea:cc:8a:81:bb:33:75:c8:cd:4c:52:ca:b7:
d1:99:56:b3:d1:c4:08:25:bb:ee:af:88:58:8c:84:
34:72:1b:0b:21:b4:d1:db:23:5b:8d:e8:06:57:e0:
fd:dd:6f:09:9c:b9:93:a9:7e:6e:88:63:46:eb:0e:
f1:10:30:16:75:b3:8a:4f:c2:77:44:d4:32:48:c1:
ff:76:70:63:cd:31:62:a0:71:b7:e5:09:39:da:2b:
12:73:3c:4e:a6:46:f1:b2:ef:02:f4:d5:f8:e0:1c:
74:b8:a3:b6:e7:56:00:a9:da:6f:a6:6d:72:51:d4:
89:d8:39:19:82:a3:b6:a4:b7:f3:95:d5:2a:17:2b:
73:97:a9:7c:4d:ba:79:4e:bd:9a:7d:b9:8d:9b:25:
e4:37:4e:26:a5:26:60:ff:43:02:c4:c1:0d:c5:00:
33:3c:87:c7:14:bc:dc:55:a3:71:28:cd:80:32:13:
a7:c2:25:89:6f:56:c1:19:ef:93:f6:de:db:dd:5c:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A3:DF:99:53:69:81:98:D1:C2:A5:00:33:D9:33:D0:79:C4:E4:13
X509v3 Authority Key Identifier:
keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:38:f9:8d:67:1f:34:5f:80:7d:5c:c5:7e:bc:66:97:fe:d9:
61:f7:1c:3a:d0:fb:72:5e:80:ff:5d:ea:c2:9b:0e:62:fa:14:
3b:67:7c:95:f3:b3:7c:12:85:9c:21:2b:37:95:ec:21:a0:c4:
5e:ca:a7:b4:81:0a:d6:d4:0a:b5:11:d8:e6:63:8a:64:97:64:
81:34:eb:75:30:2c:2e:a2:59:ae:4c:47:de:98:1a:bd:1c:a3:
bd:ec:96:3e:fa:ba:60:d4:de:dc:6e:cd:bb:90:5c:d1:d1:cd:
b8:aa:77:bd:6a:ad:8d:ae:d2:45:24:cc:8f:03:0b:fc:a5:4e:
c6:66:76:de:32:ee:7a:5e:6a:f0:03:54:10:ef:c3:1f:f7:f8:
40:62:ca:0a:ed:8a:fa:3e:66:25:44:8e:cd:c1:6a:60:4e:4e:
50:3e:03:f0:11:6f:01:41:cb:1d:87:e0:91:ca:21:a3:01:83:
42:5b:f4:62:b4:28:da:a7:11:9e:78:ae:c0:7d:7f:7d:c9:b7:
c7:a4:76:4f:37:3c:83:ac:c3:5a:b8:8d:0f:08:ed:dd:40:71:
aa:92:a1:41:8d:92:dd:d5:3c:0c:f6:19:a6:36:07:b1:c1:2b:
eb:19:f4:de:6d:34:fc:35:d8:93:bb:43:a5:9a:ba:6c:bf:25:
b9:c4:a9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:23 2025 by rpki-client