Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
File: e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft (raw, json)
Hash identifier: rYuvMVHIC1PKb6x6pH9KpRc1URK4jQk1TQc4YPyqIWk=
Subject key identifier: 54:8E:04:80:77:B2:84:D0:B7:8C:3D:3D:86:A3:F6:C1:35:1C:D0:01
Authority key identifier: 7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69
Certificate issuer: /CN=7b7873f89c2a985327ea7996267423a7751c6169
Certificate serial: 0199FFC75ABBDB3A83D4752329F442DFF28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 04:01:18 +0000
Manifest this update: Mon 20 Oct 2025 04:01:18 +0000
Manifest next update: Tue 21 Oct 2025 04:01:18 +0000
Files and hashes: 1: e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl (hash: ZfZcsPItZlxODUzU0UuXGP+Lw1OVoe6kjPYkdURsPlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:5a:bb:db:3a:83:d4:75:23:29:f4:42:df:f2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7873f89c2a985327ea7996267423a7751c6169
Validity
Not Before: Oct 20 04:01:18 2025 GMT
Not After : Oct 21 04:01:18 2025 GMT
Subject: CN=548e048077b284d0b78c3d3d86a3f6c1351cd001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:46:f1:32:f5:62:1f:7d:74:f2:8f:ee:db:
3e:b7:dc:ed:7f:63:f0:23:07:91:c9:f2:ca:6d:75:
8d:5f:5c:a1:e6:45:95:f0:e3:81:3b:e2:95:86:ac:
db:4f:46:95:4f:e8:95:e7:aa:ac:eb:4f:05:f2:dc:
f4:f7:d4:b7:2e:48:01:f7:0c:8c:7f:8b:21:3c:a8:
ae:60:78:b0:a0:ba:6a:15:73:16:da:3c:a8:a2:ac:
c6:fc:72:ed:f6:a2:6b:85:55:b9:45:f7:ab:78:6d:
72:a1:44:73:74:64:e2:f1:6c:35:9d:8c:7b:2d:77:
1a:72:38:4a:97:31:9a:f7:d7:9b:7c:10:25:27:c3:
5d:d6:c6:6a:03:e1:96:35:f3:90:83:34:40:b6:17:
52:6f:f5:e4:02:d9:59:0f:74:04:91:4c:ec:69:7a:
04:6e:7b:92:7a:36:ef:33:34:55:8f:a9:c9:79:c3:
43:c8:df:f5:f2:b4:4b:e4:4e:41:ba:ec:f0:41:f3:
26:83:c0:d0:44:1c:c0:6c:42:55:f5:36:7a:1a:27:
dc:0a:ab:7b:66:36:45:b6:44:38:db:08:db:88:6f:
9b:0c:18:98:d7:7d:b7:c0:8f:af:9a:3d:ea:5a:8d:
54:64:40:21:e3:e1:0f:74:e9:f6:02:8c:70:aa:56:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8E:04:80:77:B2:84:D0:B7:8C:3D:3D:86:A3:F6:C1:35:1C:D0:01
X509v3 Authority Key Identifier:
keyid:7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:8d:3f:25:0a:f8:b9:f0:86:b2:21:3a:3d:df:ec:c1:ba:55:
70:28:c0:98:b1:de:e9:bb:9c:76:25:d0:82:dc:2c:43:f8:c2:
6d:1a:5b:1f:be:89:d9:5b:26:bc:11:b4:c0:14:91:b6:93:f8:
ea:80:28:8a:5a:b3:f6:ba:28:3f:d1:ff:07:8e:82:e1:cd:d3:
7d:82:f4:5e:4f:c9:7b:ca:37:b2:b4:ca:48:30:c0:0f:b8:6d:
76:a3:b6:07:70:01:f2:05:c4:6a:10:d7:90:cf:ee:f9:0a:f2:
14:33:cc:fd:4c:92:6f:99:7a:c2:02:c4:eb:31:ca:73:3b:69:
0a:a3:4b:af:82:dc:42:0e:32:89:e6:b1:6c:1f:c2:e7:21:ab:
1c:16:da:db:66:5b:4e:cc:ca:1c:ca:b8:e1:81:8f:90:02:2e:
53:bf:5c:05:08:6e:d7:61:6b:9e:d1:6e:51:0d:2e:a5:f7:4e:
fb:1a:92:04:82:2c:cf:32:f6:3a:b5:46:56:48:ba:2f:fd:99:
32:e9:7a:b0:75:d1:17:4b:50:9c:d6:ac:6e:ff:62:67:51:b8:
cc:30:e0:e0:87:2e:0c:c9:4f:d2:e6:ea:c8:93:28:3e:d3:51:
81:16:b4:e3:d3:79:b0:15:d2:7d:bb:33:8f:c0:bd:d8:6b:8c:
d0:88:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:19 2025 by rpki-client