Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
File: E0vH5v379zjSP8XuXlrLUr77wFE.mft (raw, json)
Hash identifier: nsI7sQu/mXezczcapC3aK++0DiWzYN5SJhTEcthBlm0=
Subject key identifier: 3E:77:8E:F6:2F:A5:8E:9E:FE:4A:F8:C3:01:4B:ED:68:E1:E2:39:9D
Authority key identifier: 13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
Certificate issuer: /CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Certificate serial: 019A72CA4BC77742614390C4420172A73413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
Manifest number: 1663
Signing time: Tue 11 Nov 2025 12:00:51 +0000
Manifest this update: Tue 11 Nov 2025 12:00:51 +0000
Manifest next update: Wed 12 Nov 2025 12:00:51 +0000
Files and hashes: 1: E0vH5v379zjSP8XuXlrLUr77wFE.crl (hash: 36ECHPA8tax1tBLlwO6pnKgax6hQ973lenUON79Bp9I=)
2: NqA4au-1_FHTNTD3PbPf44VlPQw.roa (hash: tZmyHlgbPB86inFat8ThR1i4AUrklKSpxKPNfScJNO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:4b:c7:77:42:61:43:90:c4:42:01:72:a7:34:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Validity
Not Before: Nov 11 12:00:51 2025 GMT
Not After : Nov 12 12:00:51 2025 GMT
Subject: CN=3e778ef62fa58e9efe4af8c3014bed68e1e2399d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:34:dc:f4:7e:52:83:d2:be:d4:af:ce:b3:
71:30:09:0c:48:b0:ef:2f:56:ad:7f:b7:f4:42:79:
48:f8:f0:04:92:d2:aa:b9:17:5b:dd:2f:bf:ab:11:
f1:8e:b5:41:b1:ca:2c:ea:e1:f0:cb:2c:ce:51:3e:
78:e8:59:96:54:0e:69:03:86:e7:c3:fd:7d:99:5f:
f5:9b:55:dd:66:81:20:a7:2b:3d:b6:61:c0:25:87:
11:a4:fa:49:56:19:59:51:0f:1f:3d:0c:aa:da:d8:
40:b1:1c:28:9d:bf:4e:55:37:32:99:90:0e:01:bc:
94:3d:5a:2e:fb:4c:02:90:32:b1:46:fe:ad:b3:1d:
ae:2c:29:7c:72:9b:ac:2d:62:90:49:f4:32:05:8f:
52:7e:05:d4:19:f4:6f:44:77:0c:ab:6b:2b:d8:35:
5b:06:23:13:6a:b3:af:0a:1a:6b:0b:b1:67:4c:64:
ba:f2:7f:37:09:52:72:a1:89:e6:ca:3e:04:46:4f:
14:58:02:0d:19:12:8a:cc:56:f1:6d:9e:d3:8d:b5:
3f:6c:a6:0a:8c:62:95:80:60:7b:90:a1:a8:b7:a1:
06:93:23:8b:57:7a:d3:1a:68:be:0f:46:00:23:5b:
5a:cb:1a:50:c6:f1:7f:b4:23:e9:6d:68:11:fd:18:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:77:8E:F6:2F:A5:8E:9E:FE:4A:F8:C3:01:4B:ED:68:E1:E2:39:9D
X509v3 Authority Key Identifier:
keyid:13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ce:4c:98:4b:f4:fa:64:49:df:bb:46:7e:95:01:e0:38:c5:
f1:95:f1:51:13:24:ed:fc:7b:d7:4a:42:e2:7a:3f:42:52:cf:
12:60:46:55:47:03:b5:11:df:d6:bb:9a:b0:8d:68:b2:f2:42:
fd:4e:70:ff:8c:4e:ef:41:fc:92:e9:35:22:a4:9c:37:0a:c9:
c0:45:e5:3e:26:1c:03:5b:a8:d3:69:ff:93:eb:a7:90:6a:a0:
58:e0:17:22:fe:58:02:d0:38:0b:5b:58:ce:99:26:58:0a:5c:
5a:84:94:09:ea:e3:62:8e:6b:d7:44:5a:cb:4a:fc:38:56:12:
d3:c8:1f:96:45:47:25:fd:d5:f2:f8:72:8a:27:b3:84:21:16:
a2:8a:a2:80:e7:a1:49:82:66:ec:01:69:9f:6c:65:b4:88:b4:
76:0a:53:c1:2a:a9:2b:82:e8:7f:71:9a:9d:ee:cd:29:00:99:
3c:4a:6b:31:31:41:a0:4c:12:db:ba:64:e6:51:21:33:ff:f8:
bb:e7:05:68:e9:da:e4:d2:76:22:fb:22:6d:c0:82:02:82:64:
2e:6f:9f:80:99:a9:7c:4d:24:28:7e:18:d5:96:cc:1f:c4:98:
de:2b:e6:7f:00:ca:ba:e2:d3:22:cd:3f:31:fc:81:15:60:7c:
1c:95:4f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:30 2025 by rpki-client