Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File: E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier: GF+ctnQEH2FUWoOmOOnYPG3gWNOt/HhvUCiMHdjOxK4=
Subject key identifier: C1:CD:ED:42:3F:04:A6:86:33:D5:30:F2:32:2E:36:3E:AF:E2:51:6D
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer: /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial: 019A096EEB67396F912216906BDE91830448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number: 141C
Signing time: Wed 22 Oct 2025 01:00:55 +0000
Manifest this update: Wed 22 Oct 2025 01:00:55 +0000
Manifest next update: Thu 23 Oct 2025 01:00:55 +0000
Files and hashes: 1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: /YO9AFYAeIxBWIdxVGirCwg3nGFoNEQzWded9SpyyJQ=)
2: jr4b-Rf0xfPafQWq2uvd9nWvLEg.roa (hash: Xv/PqNN2xhkW4QGTc+jzafFg6jr4IL/yGvEj1fBOV08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 19:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:6e:eb:67:39:6f:91:22:16:90:6b:de:91:83:04:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
Validity
Not Before: Oct 22 01:00:55 2025 GMT
Not After : Oct 23 01:00:55 2025 GMT
Subject: CN=c1cded423f04a68633d530f2322e363eafe2516d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:ab:ef:b6:26:5c:ef:c8:f1:dd:60:59:d0:
60:20:cc:16:99:2a:a9:68:a5:91:b2:25:fb:08:8e:
5a:5a:7e:8a:ca:10:d8:97:66:91:17:6d:d0:9e:83:
78:e0:57:f5:ff:e6:34:31:bc:6b:3e:44:15:0c:a7:
f1:aa:c0:7c:c7:93:0c:7e:11:9c:d4:08:1a:cf:90:
97:a0:04:f0:20:2d:38:48:e5:62:b1:38:ad:c3:1e:
a5:d5:55:a9:78:2d:e1:c8:aa:4f:fd:9c:85:fc:22:
c3:ae:8e:ac:38:40:d9:24:57:66:cb:e7:b5:a0:5d:
93:a8:88:b5:61:d5:92:f5:1d:b4:b3:d3:ac:03:b2:
da:e6:c5:5d:79:85:11:1e:0d:04:73:af:de:33:eb:
98:91:c7:4d:fb:92:f6:0b:22:e0:4d:26:73:12:5e:
6e:d9:9c:77:27:00:cb:2e:06:62:94:de:c3:75:ef:
6a:c2:25:88:f0:d6:89:84:62:f6:95:b5:a3:2a:97:
9f:29:a6:f7:ce:37:91:67:20:ec:2b:90:ff:4c:13:
b6:10:fb:ec:80:69:c3:da:a4:60:45:f2:d2:46:84:
98:9d:d9:2d:74:a4:7f:47:8a:fb:58:04:3a:2a:bb:
ff:54:70:f8:20:77:8a:0c:e7:bf:f9:76:98:df:0e:
d5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CD:ED:42:3F:04:A6:86:33:D5:30:F2:32:2E:36:3E:AF:E2:51:6D
X509v3 Authority Key Identifier:
keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:41:b5:19:51:21:f1:31:d6:71:e9:a5:be:86:9c:40:b0:ea:
da:b5:07:1c:af:b6:60:32:69:40:c6:03:10:6c:7a:65:7e:95:
f4:78:fd:53:f4:55:3c:dc:f1:3e:c2:ef:3c:97:e7:95:82:16:
64:69:0a:ab:0b:5a:ae:88:d0:e7:69:7a:a8:bc:16:27:14:4a:
87:9c:07:c7:56:ba:69:7a:d7:dc:44:f0:84:4d:6f:83:a3:10:
ed:85:ea:29:42:ed:20:c7:eb:5b:40:fe:d3:50:ba:e6:c8:45:
9c:e4:e8:be:23:a0:66:a0:0a:51:d7:15:fb:12:d4:02:58:f9:
7f:40:2a:42:9f:43:01:c5:04:73:27:d0:66:27:e0:94:1e:81:
2c:f5:68:f9:6a:0b:99:d5:23:8c:1c:c8:30:41:66:8d:38:20:
db:3d:23:de:f8:85:bb:0d:7d:16:0d:b5:c4:b5:ed:d4:72:be:
29:d8:5d:7f:c2:fa:66:d4:86:b1:14:d2:05:0d:0b:16:0e:0b:
54:7b:a3:8c:f2:f0:06:5a:73:2d:55:a3:bc:19:03:8c:25:f9:
cd:8d:7e:f7:bb:f8:3a:6f:2f:9c:46:a7:01:92:75:a3:5a:18:
8d:50:37:d8:20:80:f9:3b:b1:7c:f4:78:03:4f:a3:a5:fa:c7:
22:d3:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 03:12:57 2025 by rpki-client