Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File: E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier: MgAE/6LzIcV96aO3ovrnEb4BCjeu/JsPYC2ijQwu6bw=
Subject key identifier: A7:9C:D5:42:F7:CB:2F:25:17:40:5C:BE:F3:B6:5A:9B:19:AB:42:DB
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial: 019A73A6A154B23CCBEF6DB1947BFFB3740B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number: 1089
Signing time: Tue 11 Nov 2025 16:01:31 +0000
Manifest this update: Tue 11 Nov 2025 16:01:31 +0000
Manifest next update: Wed 12 Nov 2025 16:01:31 +0000
Files and hashes: 1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: KuPh4bEqR2+A+RJZ8fpG8g45w5nOllhmHThRe5gEi2k=)
2: o33nzDd8Ud4SHUROSKPBqYvsK3I.roa (hash: 0uR5NTZUtirBbDZZiV+z6XYeVClsGx8GOL6f3pU8rh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:a1:54:b2:3c:cb:ef:6d:b1:94:7b:ff:b3:74:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Validity
Not Before: Nov 11 16:01:31 2025 GMT
Not After : Nov 12 16:01:31 2025 GMT
Subject: CN=a79cd542f7cb2f2517405cbef3b65a9b19ab42db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:bc:46:9c:67:97:97:64:b6:d9:60:a0:14:
76:56:42:5f:be:1b:c4:c0:48:f4:32:30:58:5f:6d:
90:fe:91:ee:c2:41:e5:12:21:32:54:2a:1c:c8:f8:
d4:49:54:ea:21:f4:76:7b:a4:8d:10:61:b7:20:58:
7d:4a:3d:81:12:ec:ca:f8:84:94:1e:24:a3:b0:d5:
70:a8:6e:4e:68:a7:bb:23:a1:bd:50:38:75:28:4b:
1b:3b:d7:49:c1:20:98:d9:3c:28:73:f7:f8:39:9e:
2b:38:10:76:5a:e8:91:9f:e5:43:ad:13:5b:c7:46:
6e:62:8b:4a:14:7e:10:8e:a7:a9:6c:65:db:4a:a0:
69:dd:fd:af:d8:1d:e9:40:45:89:88:ea:c9:82:01:
02:28:4e:44:62:d1:37:76:4e:63:10:c9:54:34:6d:
43:c5:00:d9:d7:29:58:ee:8a:35:24:7b:ab:01:22:
d6:b3:ca:d3:6f:4c:76:f9:fc:48:1d:6b:31:c9:bb:
55:28:ee:1d:a6:d8:04:95:af:e2:39:58:8f:ed:d3:
a3:18:3f:a5:00:ff:ca:50:fa:b0:69:2d:a7:fd:ab:
61:06:05:ec:44:f0:dd:0d:fe:41:ff:75:d7:5d:10:
b8:ae:87:13:fc:9b:57:88:65:c4:c9:81:c6:1c:2d:
61:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:D5:42:F7:CB:2F:25:17:40:5C:BE:F3:B6:5A:9B:19:AB:42:DB
X509v3 Authority Key Identifier:
keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f3:1d:cb:0f:3a:a5:de:de:3c:54:2e:80:18:ea:93:6a:50:
f1:47:c4:61:1f:03:e3:1f:d1:75:4f:2f:d6:a8:ac:86:05:49:
69:2b:42:9e:d7:9f:8e:fb:45:ff:99:e0:c5:ec:88:38:55:19:
c1:7a:96:ce:50:eb:2c:8d:db:34:d3:3b:7f:23:13:15:38:c8:
87:38:c7:83:c0:3e:1d:cc:06:f8:38:77:31:f9:f9:0a:52:26:
4c:b7:27:46:ba:4e:90:fe:73:d7:d2:10:e0:22:93:2d:a7:f2:
33:2f:be:d3:56:d5:92:e8:0c:20:d9:4e:2a:88:a5:41:75:75:
de:d1:5a:9a:1a:97:20:cf:51:eb:92:36:5c:09:e6:31:21:54:
97:70:3b:11:cc:af:64:ca:2e:e5:28:df:c2:0d:a6:a2:e6:cb:
3a:58:67:e8:2d:ed:00:45:df:98:23:69:53:86:44:07:f0:51:
95:b9:dc:6b:f9:df:6c:4f:68:29:c4:99:84:b3:ba:df:f3:ee:
35:e1:dd:20:f2:fb:c5:66:fd:00:77:4c:07:c1:79:06:be:8d:
cc:19:d5:99:ea:2d:b1:fd:26:3c:44:c0:0e:70:e5:d9:95:a9:
26:a5:d2:5f:f9:0b:fa:36:87:fb:a1:84:f0:05:cb:f0:55:8a:
69:85:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:10:17 2025 by rpki-client