Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier: pJjMQ1VgQmQNDZ82ss/YFp0Fo5K8WQ9G7zthXYUDfSc=
Subject key identifier: 72:D1:1A:8F:76:09:E8:08:BB:4B:4A:8A:CE:31:4D:0A:FF:41:56:20
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial: 0198D583F71D23AF1DBE2E92325656189BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:52 +0000
Manifest this update: Sat 23 Aug 2025 06:00:52 +0000
Manifest next update: Sun 24 Aug 2025 06:00:52 +0000
Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: aNtk9F5Rv+G54Kq/dH0NXzcWUsbIBjlE/xo71ot3S70=)
2: H9WDvc0OfXB44k8OyrV2kgiLuzs.roa (hash: ECy836T53R0CEG1VyCTCAvl+zi+aWOuz45OEcMa+89w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f7:1d:23:af:1d:be:2e:92:32:56:56:18:9b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Validity
Not Before: Aug 23 06:00:52 2025 GMT
Not After : Aug 24 06:00:52 2025 GMT
Subject: CN=72d11a8f7609e808bb4b4a8ace314d0aff415620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:01:09:b5:9e:e9:b6:8f:c9:8b:90:6b:4b:49:
84:92:2b:70:b2:f9:c2:94:6e:ed:f4:05:3b:d6:ce:
b7:69:b9:c7:90:5d:45:f5:39:c4:9d:25:1e:e0:ed:
ef:e2:78:26:6e:d4:cc:a7:a5:f8:f0:87:2b:f3:1a:
cc:76:87:09:f9:47:61:f8:fc:59:5a:1c:6f:ac:ab:
3f:b7:27:eb:22:3b:77:83:aa:3d:22:eb:e9:15:56:
ae:69:9c:75:48:8c:e1:e7:fb:35:80:fd:a9:fb:66:
4f:df:bc:a5:75:86:00:fb:9b:67:e0:26:0d:5b:fe:
c6:89:b8:6e:a4:f7:f7:e0:7d:00:aa:03:95:12:f2:
7c:1f:03:85:32:f2:c9:af:31:ec:82:1a:5a:0f:b0:
dc:67:75:19:4f:dc:c6:f2:ab:28:be:99:94:4c:46:
b9:b2:59:bf:6a:80:23:3f:ae:96:e3:25:01:8b:34:
fd:4b:94:66:97:de:b8:ae:e9:ec:ee:6f:d2:2e:c0:
bb:7b:e1:91:70:cf:0c:5b:98:b7:86:a0:2a:e5:30:
8b:0e:2b:51:8a:e1:07:ad:61:3f:ff:0f:21:36:20:
08:86:4a:b7:0b:cd:67:6b:d6:54:0d:ef:81:d1:97:
e3:18:63:0a:d5:23:f1:9b:95:40:27:ea:ec:6e:0c:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D1:1A:8F:76:09:E8:08:BB:4B:4A:8A:CE:31:4D:0A:FF:41:56:20
X509v3 Authority Key Identifier:
keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6e:69:ba:40:fd:ee:ba:fd:52:1c:a5:b2:4a:09:79:ef:ad:
b0:5d:8f:89:7e:08:89:fe:c8:51:a0:c2:ea:11:70:44:3d:0c:
1b:d7:7f:aa:96:a4:87:8b:ac:1d:cf:dd:36:44:c5:ea:f5:51:
7f:a7:84:e0:19:03:06:76:85:6d:41:ee:76:25:38:e8:b2:4e:
e8:87:23:73:d8:1f:c8:80:b0:a4:15:71:49:d9:a1:a9:57:5b:
7a:0c:90:79:ed:3a:24:93:e7:0f:c9:cf:c6:23:ee:95:72:7a:
70:eb:07:19:f0:fb:19:cf:0d:48:1d:20:40:2e:0c:d0:59:5e:
be:e2:d0:80:4b:2e:98:16:10:8a:66:fe:c4:da:1b:0c:84:1a:
d9:13:97:3b:f4:74:bb:ff:bd:50:93:20:b4:e2:aa:33:45:97:
c2:28:c2:a1:58:7a:39:a5:8d:cf:09:e8:f7:54:ed:1a:ed:c4:
77:09:52:77:b0:9f:ab:3a:06:91:2a:67:51:2c:a9:a6:ea:76:
ca:33:50:67:19:8b:45:8b:1e:dc:e6:cc:38:a6:66:af:08:69:
3b:7e:50:5a:e4:11:02:a0:d1:d1:9c:a6:88:d2:29:e0:f5:3b:
01:ea:28:d2:30:0f:b6:8e:97:c1:19:49:69:33:2d:49:2f:3d:
29:5d:44:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg/cdI68dvi6SMlZWGJvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2UxMTAzNzc1Nzg1ZDAxMmZjOGRkYWI0YzAyYWMwMzc5
MWI5ZDQwHhcNMjUwODIzMDYwMDUyWhcNMjUwODI0MDYwMDUyWjAzMTEwLwYDVQQD
Eyg3MmQxMWE4Zjc2MDllODA4YmI0YjRhOGFjZTMxNGQwYWZmNDE1NjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwEJtZ7pto/Ji5BrS0mEkitwsvnC
lG7t9AU71s63abnHkF1F9TnEnSUe4O3v4ngmbtTMp6X48Icr8xrMdocJ+Udh+PxZ
WhxvrKs/tyfrIjt3g6o9IuvpFVauaZx1SIzh5/s1gP2p+2ZP37yldYYA+5tn4CYN
W/7GibhupPf34H0AqgOVEvJ8HwOFMvLJrzHsghpaD7DcZ3UZT9zG8qsovpmUTEa5
slm/aoAjP66W4yUBizT9S5Rml964runs7m/SLsC7e+GRcM8MW5i3hqAq5TCLDitR
iuEHrWE//w8hNiAIhkq3C81na9ZUDe+B0ZfjGGMK1SPxm5VAJ+rsbgwmLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLRGo92CegIu0tKis4xTQr/QVYgMB8GA1UdIwQY
MBaAFBN+EQN3V4XQEvyN2rTAKsA3kbnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYt
OGJkY2NjZTVkZmU4LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYtOGJkY2NjZTVkZmU4
LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO25pukD9
7rr9UhylskoJee+tsF2PiX4Iif7IUaDC6hFwRD0MG9d/qpakh4usHc/dNkTF6vVR
f6eE4BkDBnaFbUHudiU46LJO6Icjc9gfyICwpBVxSdmhqVdbegyQee06JJPnD8nP
xiPulXJ6cOsHGfD7Gc8NSB0gQC4M0FlevuLQgEsumBYQimb+xNobDIQa2ROXO/R0
u/+9UJMgtOKqM0WXwijCoVh6OaWNzwno91TtGu3EdwlSd7CfqzoGkSpnUSyppup2
yjNQZxmLRYse3ObMOKZmrwhpO35QWuQRAqDR0ZymiNIp4PU7Aeoo0jAPto6XwRlJ
aTMtSS89KV1EZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:43 2025 by rpki-client