Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: vXSPCiAqGHLC2SjEj9nFbsPfmEJD47R9n3L7Lrl9iGE=
Subject key identifier: E2:FA:BB:4E:1F:3A:A3:B8:11:D5:F6:70:76:0D:7E:A6:A8:9F:99:22
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 0199FBEAAE14AF83CFB8E8C01AB560CAC504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: arlKXT6Kh2KQBXBLv0bpFxvMnKhKqnuOTnPCVzbl+4E=)
2: gdCbju7iq0jqbnL3F15jB2y6w9k.roa (hash: 5imVu9OgEC0LpB68Uf/xLlkHKg4D35cIEP4G8Ci0Msk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ae:14:af:83:cf:b8:e8:c0:1a:b5:60:ca:c5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=e2fabb4e1f3aa3b811d5f670760d7ea6a89f9922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:dd:de:30:28:c9:cb:91:31:03:74:cd:51:
b2:82:3f:6f:4d:bd:00:65:6e:d1:c5:79:59:9f:93:
da:e8:18:90:0b:33:60:71:cb:be:6b:12:ff:65:c4:
ea:4d:10:86:59:ab:94:ef:d0:b5:61:92:f8:17:02:
7e:7c:03:5e:35:ad:0a:a1:0b:f4:1a:b8:d9:4d:ee:
1f:91:ee:32:f7:de:c9:c9:73:94:70:44:47:8c:cd:
1c:d8:c0:bd:39:e9:75:f3:14:7e:f8:a1:e5:ab:6e:
4e:27:36:aa:3d:9a:22:1a:10:10:70:bb:d8:a0:17:
dd:c7:01:3c:60:cc:57:c7:d3:79:20:f8:f3:5b:4c:
a0:d7:1f:5b:52:76:8b:5e:b4:51:34:8b:29:d5:1a:
ae:15:26:79:c8:60:48:14:40:7e:ef:78:28:d7:73:
b3:37:61:dd:df:84:83:35:bb:e0:e4:02:04:f4:be:
96:e4:b4:3d:67:ad:1f:90:ec:f5:95:0c:5f:9d:17:
99:49:9b:4f:75:c1:7d:70:4a:3a:3b:ff:d9:c4:68:
e4:0b:e6:fe:c5:83:d0:cc:39:9c:cb:82:e2:a3:51:
e1:d2:e8:66:15:67:8c:97:02:f1:cd:a6:0c:c0:63:
dc:08:20:28:14:53:ae:e7:de:d8:8f:1d:82:5e:09:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FA:BB:4E:1F:3A:A3:B8:11:D5:F6:70:76:0D:7E:A6:A8:9F:99:22
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:fa:2f:f9:2c:f4:d8:d4:76:4e:1b:29:78:52:1f:d4:5e:a3:
c9:55:4e:55:be:e4:7a:0c:30:dc:14:54:6e:6d:8b:80:42:31:
eb:c8:9e:2b:c3:10:3e:18:8f:79:df:d9:94:0f:7f:02:c8:65:
0c:ea:09:06:6b:0a:3b:b5:fa:d8:bc:f2:4e:b6:18:d0:52:00:
f7:58:e7:16:7a:6e:c2:12:49:71:36:38:ae:ff:43:a6:2d:55:
12:18:b0:20:70:85:88:4f:75:f3:94:c9:7d:1e:23:dd:c5:15:
e2:8d:b4:77:05:e4:42:e9:c6:6e:ca:eb:13:2f:c9:9c:d8:08:
e2:c1:ae:a1:5b:3b:43:ba:64:81:4c:17:37:72:ec:bb:b4:2b:
aa:4f:a0:fb:77:79:69:15:bb:79:7c:7d:ca:f2:8a:77:2a:e7:
2f:51:c6:bb:75:9a:60:b6:38:03:9a:91:ba:6f:ec:95:a4:46:
99:af:b1:54:16:ae:50:6c:ea:27:c5:04:c1:0d:76:c2:e7:d7:
76:ed:ff:31:48:3a:34:e3:34:98:67:e6:ab:eb:a8:e9:d8:a3:
56:7e:31:d7:13:82:a9:04:6f:c2:25:d6:70:49:b7:54:e9:4f:
32:f2:09:ad:9d:3d:da:5e:d0:4d:59:c0:6a:6e:bc:b6:22:3a:
84:c4:a6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:20 2025 by rpki-client