Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier: 0pkpb8pGpcaXa4xl7kZZAS7b2imi+5tzbF6tIeSmfj4=
Subject key identifier: 53:7B:86:5A:24:11:F0:61:ED:44:8E:DB:A5:04:72:7E:4E:C3:0B:5D
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer: /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial: 0199FFFE9A468A7012FAA757D373DF925AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 05:01:39 +0000
Manifest this update: Mon 20 Oct 2025 05:01:39 +0000
Manifest next update: Tue 21 Oct 2025 05:01:39 +0000
Files and hashes: 1: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: NsngrQM6ukIRu2KR0ySMGGMit0+Gi0N/dY1xmdUsE8c=)
2: QCvbSuskCQwLxFQrUoOouHi3diY.roa (hash: sXGvHwha1X8v4xaWgUMHB+2ZrDbhHWTJfZknYl2gSe0=)
3: dWbs3GSCk40VoHUjYwOcmy7b-Zk.roa (hash: B1PLAXt5mt+DEIRs6h0vcjXyP629Yb4hYyTjCDjQz0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:9a:46:8a:70:12:fa:a7:57:d3:73:df:92:5a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
Validity
Not Before: Oct 20 05:01:39 2025 GMT
Not After : Oct 21 05:01:39 2025 GMT
Subject: CN=537b865a2411f061ed448edba504727e4ec30b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:58:92:4f:92:70:5b:3e:88:f7:7a:0b:b9:
b9:2b:ad:fe:5e:5b:84:5a:d0:0c:0e:c9:dc:50:fd:
ff:09:ec:bd:fa:34:3d:47:3e:f2:7e:7d:b3:d5:63:
7c:eb:97:fa:96:2d:f6:bc:38:91:5d:cb:0f:45:d6:
3a:a2:09:c7:0e:a0:de:f2:5b:14:7e:46:2f:e9:2b:
10:02:a2:ee:c7:4a:9f:1d:94:14:96:55:88:65:ed:
f5:b9:71:fb:eb:16:79:60:2e:67:c0:69:61:97:7e:
cb:81:55:9e:5d:f9:7a:ee:27:23:fa:06:4b:3c:67:
61:c4:bf:ca:01:fc:85:6d:55:d0:c8:84:c5:12:a2:
db:f7:15:46:dd:5e:b9:cf:ea:52:2c:5f:e8:c6:a9:
1e:93:54:37:ee:82:4b:cc:83:e4:ba:ea:78:a9:4f:
1c:a7:b3:d3:eb:cf:d5:da:35:42:28:89:20:ab:c1:
6b:e9:ab:2a:51:33:70:e9:f2:75:6b:c6:f5:48:2b:
03:4c:78:ad:db:4f:23:af:7a:d5:0c:83:6f:90:aa:
80:49:69:1f:bd:c1:b7:88:4d:3c:83:87:bb:c1:48:
cc:ca:00:1e:18:5f:ca:5e:6b:21:22:d0:13:26:b2:
2c:4f:5e:86:59:a4:4c:a4:c7:32:e9:5d:42:6d:f2:
c8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7B:86:5A:24:11:F0:61:ED:44:8E:DB:A5:04:72:7E:4E:C3:0B:5D
X509v3 Authority Key Identifier:
keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2e:10:0e:33:b7:cd:86:a6:df:cc:9a:ea:68:6c:3c:58:25:
b2:ff:7b:02:f2:ca:05:8a:41:ac:bd:ae:8f:e3:b4:10:f5:25:
92:3c:b7:c7:ab:14:a5:09:a4:6c:67:d5:b5:7c:1c:dd:72:f2:
8d:ed:8a:61:35:66:a7:0c:3a:3f:83:8c:f5:10:f8:b6:b3:5d:
7a:57:a7:0e:bd:09:21:cd:fd:49:6f:6f:2b:ab:d0:37:6d:02:
b9:d4:07:3b:4c:06:fd:75:f9:3e:21:47:24:bc:d9:66:5a:05:
91:d9:10:19:a8:86:38:85:c2:79:c4:ce:0f:93:f0:99:a4:00:
2f:54:8d:15:24:d3:85:94:9b:29:1b:73:4b:04:b8:f8:ba:9e:
98:80:d8:ff:ff:ba:c0:df:14:ef:00:df:46:65:46:29:03:cc:
b7:9d:cc:7d:f6:ee:25:99:99:49:4e:16:42:05:8e:e2:67:ab:
c7:e7:9f:be:29:0a:77:70:53:05:4e:90:71:2e:c1:9d:7e:71:
03:64:96:ae:63:33:ae:92:a0:82:70:6f:94:4f:05:08:cf:75:
4c:e1:d0:e9:7c:3e:33:a2:6b:89:85:75:a8:65:60:80:8d:95:
52:a8:a0:1b:fc:76:63:a8:43:07:f0:69:a2:57:62:cf:37:77:
97:dd:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:15:04 2025 by rpki-client