Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File: E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier: rTx6Wc6OwRISV4CbTEl68cBomSX4zF3JS/fS11WPY6I=
Subject key identifier: 1C:00:DD:14:EA:C8:38:1D:A5:FD:2D:54:F5:BE:4D:C0:EA:E6:97:F9
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 0199FCC6B7D637E955433166572BE3A021FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:45 +0000
Manifest this update: Sun 19 Oct 2025 14:01:45 +0000
Manifest next update: Mon 20 Oct 2025 14:01:45 +0000
Files and hashes: 1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: PA35agHmgmkkbqLyz9r6i1YS4AlMITrkID+uc8ITtR0=)
2: GRNWR16Ds5mVAEzQkJ8f4EpHdoA.roa (hash: OkjXTbnHRtbFuWzt8SkmqNTl7djjfQ2D/Z/mnZbORFo=)
3: mp_GHNV3oXauSfYTml7M5-B_SzE.roa (hash: o6TxNWrAQ4DmV0/jzWqCauUXKEHG2x6UUHTMIwvWqGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b7:d6:37:e9:55:43:31:66:57:2b:e3:a0:21:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Oct 19 14:01:45 2025 GMT
Not After : Oct 20 14:01:45 2025 GMT
Subject: CN=1c00dd14eac8381da5fd2d54f5be4dc0eae697f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:a1:67:3e:2d:cf:75:a5:ee:b0:5f:be:26:
61:69:eb:22:00:e2:88:6f:1c:45:17:d1:6b:65:a9:
d5:81:cf:f5:07:9f:a9:e7:fa:99:f3:bd:37:74:f6:
47:46:32:25:92:47:0c:00:62:1e:97:76:4a:24:09:
d6:d3:05:5b:17:ad:5f:93:d6:b9:1a:ef:3e:55:ae:
e7:7f:f7:e3:43:67:a7:b9:08:dd:7d:b6:46:31:b2:
f8:9b:ea:e6:61:91:37:ce:b1:d9:a5:4d:5e:2f:6d:
37:49:f7:3e:8d:6a:6e:d5:7c:24:17:88:27:82:81:
69:f2:69:e8:2f:25:46:c4:2a:81:a1:f0:39:a9:bc:
e4:4c:c9:37:b1:6d:a3:95:91:f8:1b:3c:b1:ae:f4:
d9:7d:80:62:c1:ba:72:ff:93:c6:b1:b7:91:7e:10:
b5:61:90:1c:c2:f0:4f:ff:9e:88:ec:0d:fe:de:3c:
ab:1d:f1:98:5b:34:c0:b6:eb:5b:a2:b5:40:e5:fa:
6c:dd:61:0e:b3:e7:47:d5:e4:7f:79:25:93:56:37:
26:52:a3:c9:14:0d:07:40:5d:46:82:67:de:dc:6a:
4b:b5:a0:c1:9e:ec:3a:12:15:b4:d4:a0:45:29:86:
71:19:fa:42:1d:de:da:1b:09:e7:6d:9e:ad:ec:78:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:00:DD:14:EA:C8:38:1D:A5:FD:2D:54:F5:BE:4D:C0:EA:E6:97:F9
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:56:b8:be:ff:9d:7f:95:47:59:07:af:e3:1c:7b:66:85:4d:
9e:48:64:68:17:4e:ce:f0:ec:74:47:c9:a2:ec:dd:47:84:ab:
91:69:22:bb:f7:7c:38:05:37:7b:56:ec:f5:a8:10:ea:77:30:
43:56:07:83:07:eb:01:21:36:26:49:92:93:46:35:cb:e2:70:
a0:54:8a:fc:2c:bf:f5:59:13:75:0e:27:cd:81:ba:02:81:9c:
5e:5d:cc:63:99:60:02:f3:5f:41:4a:f8:b7:b4:0a:74:74:c2:
87:ab:fa:50:fb:ca:93:aa:6b:c3:7d:84:e4:25:27:13:c2:ed:
af:69:7d:f0:08:52:98:6d:e4:0c:b4:b4:47:24:37:13:71:5f:
f2:1f:94:1f:46:1f:94:46:54:57:49:d0:04:60:e4:b8:c4:20:
15:c0:10:77:3b:b0:1c:30:4b:4e:9f:61:f4:f0:a8:9a:6a:20:
4b:32:b0:b3:c7:00:e5:72:ea:45:e7:cd:07:e1:ca:a8:0b:fe:
45:0a:e1:83:2c:d2:01:51:2d:e2:67:db:3d:a5:51:58:d5:9d:
18:e2:83:04:85:7e:42:ae:cc:90:cf:dc:ed:4f:7f:93:f5:4f:
75:12:c4:2e:67:d0:a1:e0:fb:c5:94:f3:f2:a8:37:37:51:95:
67:f7:78:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:56 2025 by rpki-client