Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
File: E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json)
Hash identifier: NkO/hKD5PESSXr6TfHuIrU1RImnudtmnx7EAld74pf4=
Subject key identifier: D7:F5:A0:42:E0:52:4B:50:7B:F2:CD:7E:AD:C8:4C:91:8A:87:82:8A
Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35
Certificate serial: 019961A28067E57D3065BBFBFFB61E273827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
Manifest number: 15EB
Signing time: Fri 19 Sep 2025 11:01:03 +0000
Manifest this update: Fri 19 Sep 2025 11:01:03 +0000
Manifest next update: Sat 20 Sep 2025 11:01:03 +0000
Files and hashes: 1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: UXs7qDxyDBF7fYqHFVuPqQoQSyxw79meeZhzCMhklv0=)
2: pPGln_tGe3Wb0dePm4ie5BM7xaM.roa (hash: e7lXmv0/qA8zwcIJTP+HZzZQ8eseEaVWqcUevE7q2Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:a2:80:67:e5:7d:30:65:bb:fb:ff:b6:1e:27:38:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35
Validity
Not Before: Sep 19 11:01:03 2025 GMT
Not After : Sep 20 11:01:03 2025 GMT
Subject: CN=d7f5a042e0524b507bf2cd7eadc84c918a87828a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:41:df:ef:4d:b9:19:8a:b6:21:d9:e0:0d:
92:cb:ee:3c:47:5a:2c:12:ee:87:14:85:26:71:3a:
22:91:dd:90:9d:ca:22:21:ce:0a:cf:6f:30:5e:8d:
7c:b3:51:c7:bc:54:7e:e4:41:a0:9f:fa:d9:80:7b:
c1:97:db:0e:4a:61:9d:bd:d2:14:79:00:c7:5e:2a:
32:df:06:8b:34:e9:08:cd:14:95:a9:59:6e:e4:15:
f0:dc:ea:c6:f5:42:25:84:bf:14:44:2c:59:a8:dd:
af:8f:46:67:cd:d3:45:6b:5d:63:09:06:9b:a3:a1:
be:7f:9a:88:f1:6d:78:5a:89:5c:3c:35:ea:e0:c7:
d3:d7:37:99:56:6d:d1:15:7f:55:80:a5:22:c9:ae:
d5:14:61:db:1b:87:a9:39:3c:29:f6:4b:60:ca:d6:
ec:f9:bd:c3:6c:ac:33:0b:e9:6d:4f:22:97:e0:6b:
b1:50:00:c7:b7:13:ba:77:86:5e:43:9c:16:55:cd:
f0:d9:2e:52:e2:e9:da:dc:9c:ef:6f:2b:a6:98:d2:
6d:c2:c9:cd:1e:b3:fe:ee:36:0d:69:0b:09:fb:ef:
5c:84:51:64:4f:90:32:ce:b4:d3:f6:26:fa:48:9b:
15:4b:00:d7:53:23:2a:1f:06:6b:dc:82:52:a2:6d:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F5:A0:42:E0:52:4B:50:7B:F2:CD:7E:AD:C8:4C:91:8A:87:82:8A
X509v3 Authority Key Identifier:
keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:06:d2:9e:7d:1b:20:32:6e:92:21:de:9a:1f:c2:c0:65:56:
92:61:17:5a:ed:09:1d:eb:d8:5b:2e:90:f2:ec:80:bd:44:31:
8c:f9:76:b7:f4:a8:21:a7:5b:9a:3b:66:71:d4:ce:4f:f6:e7:
cc:26:74:80:8a:f9:75:b4:24:8b:65:50:88:26:70:0d:a6:65:
89:f2:52:ae:9a:c4:98:0d:78:20:8a:80:d8:71:90:95:41:3d:
a3:e2:0a:e8:28:a9:4d:dc:2e:1b:52:ea:0a:23:64:d7:f5:21:
f3:fb:cd:2c:87:55:17:1f:02:b6:4b:ff:f6:e8:52:e1:52:10:
d7:e2:6c:01:01:a2:97:94:24:9c:de:d5:bf:d4:0f:12:5c:19:
12:e8:e0:c5:37:aa:23:9e:33:c4:7b:70:f7:13:c9:4c:bd:20:
3d:2e:b2:e8:28:cd:02:75:6c:86:38:c0:19:90:d9:e2:2f:02:
bf:af:03:32:5d:77:62:2e:63:a2:7d:31:88:e9:a7:8a:7a:01:
05:b5:1e:ae:b7:ea:d2:c1:22:f3:26:4b:ab:4e:b0:93:e4:38:
7b:81:b5:2f:e9:9e:7a:ba:0f:e6:04:7a:d9:9c:47:a6:6c:b2:
3b:1a:d4:dd:27:e9:1c:95:f6:39:91:93:36:46:b6:3b:c3:eb:
a3:65:28:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 17:02:16 2025 by rpki-client