Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
File: E3W0CTjYfNMycmqqSBqnGubphxc.mft (raw, json)
Hash identifier: VYoH7/N7b4cw4oR+mNHVRAutG0WGfIqca3D3uThX05o=
Subject key identifier: 73:43:CD:DB:E3:01:13:49:A0:AD:C6:2D:F0:21:B1:96:B0:CF:FD:A4
Authority key identifier: 13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
Certificate issuer: /CN=1375b40938d87cd332726aaa481aa71ae6e98717
Certificate serial: 019A71B77F70BDC857ECF6F0A8CCEC47555B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
Manifest number: 101D
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: E3W0CTjYfNMycmqqSBqnGubphxc.crl (hash: p8XDDiFeB67i9BCWfi2tFUW3yy/kBbj/PUsH+WScpT0=)
2: mCL_9-CtuY-87CF98-9c33rXIUE.roa (hash: wOWeLe9RAlzQTuA4jLsQKE3f+PG+mmJoHLvKrWcnYc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7f:70:bd:c8:57:ec:f6:f0:a8:cc:ec:47:55:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1375b40938d87cd332726aaa481aa71ae6e98717
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=7343cddbe3011349a0adc62df021b196b0cffda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a2:da:7b:bc:03:91:a7:af:56:93:69:ad:83:
16:7f:b9:4f:ea:d7:68:c3:98:c1:dd:1b:f6:06:08:
6e:ac:96:48:3e:12:f5:39:bb:de:59:d6:e6:78:91:
42:4e:30:b2:63:59:50:fe:e6:58:86:36:9a:db:b2:
31:33:b5:73:1b:81:5d:62:d6:d2:ba:53:6c:44:16:
5e:88:dc:1f:cb:c1:9b:02:20:5a:b1:cb:9a:01:3a:
0d:6c:91:f4:a2:02:1c:2a:fd:8a:e8:94:bb:08:91:
c3:00:18:e9:a4:32:86:9c:b3:ac:e3:0e:64:76:0c:
26:48:81:0d:5e:11:9f:54:27:65:1a:b0:32:02:be:
9e:e1:4b:28:f0:5e:57:b3:74:3e:d5:de:74:71:18:
f5:fb:6b:b9:38:98:99:d2:55:aa:d1:f5:ce:11:76:
80:f3:d3:48:74:8b:77:2c:a9:9d:d0:90:7e:cf:4b:
07:b0:9b:2a:87:1b:93:ef:c2:84:cb:33:63:4e:6c:
ee:fd:f8:99:77:6c:22:d3:0c:15:ac:09:92:6e:ee:
20:67:78:e1:fb:57:35:d3:89:d8:3a:4e:0f:b1:6e:
b1:8e:11:b7:d3:bf:ac:88:e3:5d:a3:c5:43:93:06:
0d:7f:91:ff:84:67:05:ff:0e:9a:ba:59:c7:bf:f7:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:43:CD:DB:E3:01:13:49:A0:AD:C6:2D:F0:21:B1:96:B0:CF:FD:A4
X509v3 Authority Key Identifier:
keyid:13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ad:06:b7:0b:24:73:4b:b2:ff:f3:18:8c:4d:b3:68:a8:ee:
f2:cb:35:cf:91:7a:75:f8:5e:e2:e7:5b:d2:83:02:a8:be:2b:
6d:b2:2e:f1:06:6d:a4:e1:ca:34:13:36:1a:1c:d6:c1:7a:6b:
fe:58:f5:41:27:12:6d:29:82:f7:2a:43:51:4e:96:80:5e:31:
d5:d5:68:11:d0:d1:71:a6:2d:6b:46:8e:1f:a1:9b:b9:cf:f6:
24:c8:20:48:52:ed:98:f2:28:a0:e1:8b:c5:b0:7f:16:a7:70:
3e:17:b3:db:8b:f9:de:ac:87:da:d6:a2:d7:51:0c:7b:a6:9c:
ca:18:00:5a:85:02:7d:7e:ab:04:55:80:93:f3:ec:fc:3a:26:
33:15:4d:16:fd:88:e5:9f:dd:7b:c5:16:55:74:22:45:c6:ef:
dd:cb:ab:d3:d1:d0:b2:d8:50:7b:e4:68:a0:ab:42:f8:c0:e9:
43:4d:4f:e8:c7:0f:a3:28:58:8a:3b:c0:90:1a:02:df:53:28:
15:2c:57:db:26:44:99:92:6d:7d:20:d2:7f:6c:aa:cf:90:f6:
cd:89:0a:2c:92:e4:a6:d7:a5:58:e8:97:20:5e:b5:af:41:ce:
d8:d9:cb:cd:16:87:33:5d:ff:83:ee:40:32:09:4d:b9:66:b7:
77:c7:0f:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt39wvchX7PbwqMzsR1VbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzViNDA5MzhkODdjZDMzMjcyNmFhYTQ4MWFhNzFhZTZl
OTg3MTcwHhcNMjUxMTExMDcwMDQyWhcNMjUxMTEyMDcwMDQyWjAzMTEwLwYDVQQD
Eyg3MzQzY2RkYmUzMDExMzQ5YTBhZGM2MmRmMDIxYjE5NmIwY2ZmZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aLae7wDkaevVpNprYMWf7lP6tdo
w5jB3Rv2BghurJZIPhL1ObveWdbmeJFCTjCyY1lQ/uZYhjaa27IxM7VzG4FdYtbS
ulNsRBZeiNwfy8GbAiBascuaAToNbJH0ogIcKv2K6JS7CJHDABjppDKGnLOs4w5k
dgwmSIENXhGfVCdlGrAyAr6e4Uso8F5Xs3Q+1d50cRj1+2u5OJiZ0lWq0fXOEXaA
89NIdIt3LKmd0JB+z0sHsJsqhxuT78KEyzNjTmzu/fiZd2wi0wwVrAmSbu4gZ3jh
+1c104nYOk4PsW6xjhG307+siONdo8VDkwYNf5H/hGcF/w6aulnHv/dAGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNDzdvjARNJoK3GLfAhsZawz/2kMB8GA1UdIwQY
MBaAFBN1tAk42HzTMnJqqkgapxrm6YcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNXMENUallmTk15Y21xcVNCcW5HdWJwaHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOWFlMWEtOGU1Mi00OGQzLWE1OGQt
YTI1MGRhMTNkNjhhLzEvRTNXMENUallmTk15Y21xcVNCcW5HdWJwaHhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mOWFlMWEtOGU1Mi00OGQzLWE1OGQtYTI1MGRhMTNkNjhh
LzEvRTNXMENUallmTk15Y21xcVNCcW5HdWJwaHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxa0Gtwsk
c0uy//MYjE2zaKju8ss1z5F6dfhe4udb0oMCqL4rbbIu8QZtpOHKNBM2GhzWwXpr
/lj1QScSbSmC9ypDUU6WgF4x1dVoEdDRcaYta0aOH6Gbuc/2JMggSFLtmPIooOGL
xbB/FqdwPhez24v53qyH2tai11EMe6acyhgAWoUCfX6rBFWAk/Ps/DomMxVNFv2I
5Z/de8UWVXQiRcbv3cur09HQsthQe+RooKtC+MDpQ01P6McPoyhYijvAkBoC31Mo
FSxX2yZEmZJtfSDSf2yqz5D2zYkKLJLkptelWOiXIF61r0HO2NnLzRaHM13/g+5A
MglNuWa3d8cPzA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:39 2025 by rpki-client