Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier: X1mkWsrUBVhOcxGxx71oSWWJwFQ8k1vGrLPCnVCIRWc=
Subject key identifier: F2:BD:DC:A9:CB:33:6A:F8:63:E9:E8:99:71:2E:EA:BE:98:6E:B3:7B
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial: 0199FCFD217B751185897304111679CEAA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:11 +0000
Manifest this update: Sun 19 Oct 2025 15:01:11 +0000
Manifest next update: Mon 20 Oct 2025 15:01:11 +0000
Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: BXy1sDVXWCsNPN6m6xxPEkKNUDh5zfShIOs9imHw0WQ=)
2: H9WDvc0OfXB44k8OyrV2kgiLuzs.roa (hash: ECy836T53R0CEG1VyCTCAvl+zi+aWOuz45OEcMa+89w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:21:7b:75:11:85:89:73:04:11:16:79:ce:aa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Validity
Not Before: Oct 19 15:01:11 2025 GMT
Not After : Oct 20 15:01:11 2025 GMT
Subject: CN=f2bddca9cb336af863e9e899712eeabe986eb37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:7c:f5:8d:95:53:f5:56:09:7d:f1:ba:32:
2b:8f:fb:c7:d3:3e:aa:fc:7c:dc:1b:56:4c:03:52:
fe:f8:37:18:b4:07:12:09:e0:b6:35:40:d6:c9:dd:
a6:41:ce:34:20:e1:e1:78:b3:ba:9f:f0:2e:a9:b4:
e5:79:62:21:4e:7d:30:a8:d1:26:ec:1d:bc:89:23:
ec:31:4c:a0:08:2d:a9:6a:72:f1:08:fb:ad:47:94:
96:f2:e1:cd:da:dc:71:db:c0:89:54:32:7c:a3:c2:
4e:ef:9b:7f:63:5f:55:80:7a:20:2f:74:33:d8:3d:
44:cf:f3:49:a2:38:b7:cf:b1:1b:d6:31:da:43:fe:
18:06:1f:98:e2:6c:b2:f1:21:e9:ca:c8:2b:7c:6b:
b9:ae:72:b4:ed:c9:54:ac:6d:05:61:f3:67:ed:80:
57:ad:dc:f2:1f:6f:38:09:44:83:be:d6:f1:18:00:
d9:98:db:49:64:70:04:7c:5c:77:9c:c8:aa:d3:f8:
84:18:de:09:47:43:70:28:52:3d:40:7a:2c:7d:24:
ed:99:ce:a5:f4:19:cf:68:be:ea:98:fd:91:56:37:
5b:2e:93:92:0d:5c:0a:ed:42:ef:ab:f4:ce:59:ae:
39:74:90:9d:01:9b:da:0d:64:ce:1e:7f:28:39:83:
ed:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BD:DC:A9:CB:33:6A:F8:63:E9:E8:99:71:2E:EA:BE:98:6E:B3:7B
X509v3 Authority Key Identifier:
keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bc:63:74:d2:db:84:a7:e3:5a:7a:14:7c:48:5e:4d:df:d5:
19:35:8c:57:7c:22:8f:93:a1:12:a3:50:39:e0:ea:45:aa:ee:
de:e8:94:c0:38:c8:14:09:15:a4:48:74:af:9a:20:e9:a8:6b:
6a:37:b6:09:ca:89:5a:89:e6:a6:86:32:f4:44:be:e5:25:a2:
48:99:1b:fb:6f:10:1a:af:e0:6b:98:fa:26:62:83:54:a0:aa:
82:0d:ab:5d:76:18:fc:90:86:94:cc:00:89:40:2e:2e:7d:d7:
7b:76:85:88:4a:87:66:fa:0d:ba:29:e2:b2:40:f1:0c:2b:27:
e5:96:56:4c:8f:68:67:c9:16:40:3d:c2:2f:33:be:7d:af:24:
64:96:d9:be:21:51:0c:b6:1b:d4:d3:07:d8:71:9d:cb:0a:de:
6f:9f:44:e3:37:22:6a:e1:33:87:a2:5a:33:22:6c:81:28:34:
e9:45:fa:34:4f:a0:11:84:59:b5:42:5b:b9:1b:4e:09:98:4e:
ef:0e:6a:51:86:77:84:5a:83:15:c8:a3:3a:00:a2:86:f4:1e:
8e:d5:56:76:51:32:61:37:dd:64:ad:e2:7e:c7:4d:4a:fa:8e:
e6:ca:e9:b9:df:6f:b3:d5:5c:7a:e3:56:28:dd:23:cb:53:1c:
f4:23:04:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:30 2025 by rpki-client