Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: TE/xBPkEqMsKxrzpYl03wywuW/Rdz6EjU7yyxXm/0xk=
Subject key identifier: B5:37:AF:0F:6C:9A:0C:ED:F4:6C:C9:72:61:31:92:6A:E5:7D:D8:8B
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 0199FC218D030B281D3965C2F98B65DA61C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 045F
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: kBeYcZ5jCL3UCmsXy9wfZy+kWPFE0xGGd3wKN+md/dE=)
2: v2AeKCE4a1-7pESC9ltKNw8Jhlk.roa (hash: mbnYBoINyXxAJJIHqSAZZfEa8QgzUqoulxmBdaMTgUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8d:03:0b:28:1d:39:65:c2:f9:8b:65:da:61:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=b537af0f6c9a0cedf46cc9726131926ae57dd88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:24:a7:3a:c6:f1:0e:79:d4:c2:06:dd:0a:
38:eb:58:0f:33:46:02:75:96:cd:e4:89:f6:48:ca:
8f:a6:a2:ab:c7:00:06:39:36:50:92:76:d8:53:b9:
87:2a:66:dd:63:8e:1b:9c:d9:15:f2:7d:7f:75:2b:
3e:f9:29:d5:fc:21:75:36:df:7b:d4:e6:a6:37:03:
11:45:e3:64:50:54:94:c6:4a:ab:70:dd:30:5b:e9:
81:6c:ba:cf:3c:c2:4e:a6:80:df:d9:d8:45:96:ee:
36:0a:cb:17:4a:74:16:ee:68:b8:97:02:8b:44:9e:
08:0d:96:55:15:05:ca:f1:0b:7e:72:84:fb:8f:f2:
2e:3f:68:bb:b8:26:63:39:4a:66:b2:1e:6c:ef:cb:
26:c3:e7:23:47:a4:b7:11:e7:8c:9b:7c:e0:3d:79:
de:1f:90:85:da:5f:52:70:18:65:27:e4:f9:30:b0:
68:0d:05:a7:d2:dd:d6:ce:9a:6b:9f:ac:9c:8b:58:
e1:19:47:b1:7a:ee:3f:3e:ad:74:75:93:fe:72:a7:
f1:4e:b4:12:20:af:cb:f2:b9:1a:b6:52:ed:6e:b4:
cd:eb:3e:e6:40:c6:e2:0e:5d:6c:32:98:47:65:72:
73:8b:76:2a:6d:1d:dd:d8:92:b0:bc:f1:ad:68:4a:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:37:AF:0F:6C:9A:0C:ED:F4:6C:C9:72:61:31:92:6A:E5:7D:D8:8B
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6d:ee:3e:56:98:d6:8b:df:70:7d:bc:39:18:ab:82:c7:7d:
b7:b7:b8:10:f5:fb:22:80:bf:62:6a:40:29:c1:63:7b:79:c7:
90:c4:49:59:87:5d:ec:72:80:45:6b:f6:93:23:76:82:72:1a:
e5:dc:1d:c1:94:c0:a2:0d:ad:14:5e:75:98:61:91:76:28:67:
0e:24:8d:65:f5:a8:46:fa:87:0d:47:06:db:5e:15:2f:69:e5:
3d:0c:35:db:3f:b6:97:5e:2b:05:af:c5:35:67:96:b6:c2:e1:
19:a0:8f:f9:05:80:10:c3:3a:ac:d9:30:43:65:92:95:30:e6:
1b:05:ac:4a:d8:ce:c4:b1:cf:31:e2:c2:45:9c:e0:1d:4a:8f:
69:41:01:38:21:ab:81:a0:eb:00:a3:01:82:12:4b:a7:fa:48:
b6:63:6a:a2:a6:31:38:9f:c5:b7:3c:24:99:94:64:6c:5b:39:
ed:f9:51:75:9c:e9:b2:cf:86:f3:65:aa:09:14:c3:f4:55:9a:
bc:9c:39:5c:91:8c:ca:63:90:d7:29:b8:7f:13:1e:2c:1a:32:
db:62:d5:6b:c3:af:98:91:09:7d:5a:bb:5d:d7:d3:e4:04:2d:
65:24:37:75:7c:80:c4:96:e3:c3:be:78:29:63:62:4f:23:6b:
36:5d:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:06 2025 by rpki-client