Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier: 132lln3opfn6J33a6z+lj6BwJYp+rKFj3CIuZmecUZw=
Subject key identifier: B1:69:9E:C9:44:A4:0A:E1:C4:AC:2B:41:9D:05:F4:28:54:35:13:DC
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer: /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial: 019A7293E5D125BBA633B4652D0135F1B613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number: 06A1
Signing time: Tue 11 Nov 2025 11:01:26 +0000
Manifest this update: Tue 11 Nov 2025 11:01:26 +0000
Manifest next update: Wed 12 Nov 2025 11:01:26 +0000
Files and hashes: 1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: jNs/5OiehnRcXLfKCepABkfA4e9EMBxh4CzOxuSTDgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e5:d1:25:bb:a6:33:b4:65:2d:01:35:f1:b6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Validity
Not Before: Nov 11 11:01:26 2025 GMT
Not After : Nov 12 11:01:26 2025 GMT
Subject: CN=b1699ec944a40ae1c4ac2b419d05f428543513dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a0:98:73:d0:92:39:56:00:19:ee:46:2f:c5:
ae:63:e5:d3:10:d2:4c:15:14:32:01:db:98:24:78:
de:85:c3:d2:ad:fc:7b:5e:1c:15:9a:4b:ed:d7:83:
9d:df:45:ed:7f:a2:16:f1:5f:1e:e0:98:55:39:c0:
d3:dc:cf:a5:45:a6:31:e9:70:b5:fb:b2:52:24:05:
4f:ef:81:7c:fc:65:e7:bb:be:fc:e5:53:a7:5e:8f:
10:df:8a:38:69:c7:0f:6b:61:b7:fd:2d:4e:1c:c8:
c4:11:fb:0d:fa:8a:c8:66:bf:e3:b3:c6:23:3a:ad:
fe:3f:28:d5:e3:6e:71:57:fe:d4:ff:cf:48:19:e5:
18:db:23:e9:5a:79:8a:a5:83:2a:aa:12:4e:2b:90:
f4:f0:de:46:23:ad:bc:cd:a6:1d:8c:27:09:3c:8b:
39:0f:65:91:5a:cd:8b:72:63:f8:8d:10:96:11:69:
bd:30:f0:02:09:09:f8:1f:79:d3:51:03:13:bb:3f:
b4:e9:5f:d6:a4:89:99:6f:f9:3f:06:cf:0a:f5:45:
65:ed:a6:ed:88:3e:1e:f6:f5:6e:77:de:b3:d4:e1:
e2:9b:c9:b0:02:a1:7c:11:54:3d:6e:e7:4d:1d:e4:
f4:e5:ce:1b:09:4a:31:50:2a:71:c0:ad:88:9c:83:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:69:9E:C9:44:A4:0A:E1:C4:AC:2B:41:9D:05:F4:28:54:35:13:DC
X509v3 Authority Key Identifier:
keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:13:ab:8e:d7:cf:3f:87:3c:11:cf:50:25:38:4d:5c:ce:43:
ed:3c:58:ad:2f:ac:78:80:38:56:ea:22:54:fb:4d:06:43:dd:
a2:1f:34:c9:f4:b0:b0:db:7e:42:47:13:17:7b:13:1d:c5:6b:
9b:d8:9e:3d:53:fc:c4:dc:73:84:67:a8:84:e2:21:b6:f7:99:
a2:83:99:29:cd:86:8e:43:69:9b:60:c5:f9:71:3b:72:f8:08:
17:38:1e:db:6d:20:67:2e:27:67:2e:fb:f8:61:fe:bd:93:0c:
8a:55:af:7c:6e:96:6a:9b:57:00:04:7f:aa:d3:b2:4d:ae:3b:
02:c1:bb:a3:7d:25:58:f1:46:93:22:76:e9:46:71:55:14:d1:
bd:bc:bd:fe:36:df:db:26:a8:d3:82:cc:7c:d9:87:6b:26:56:
fd:66:23:ef:86:19:a2:51:fd:00:00:e2:30:e8:b6:1e:f3:b4:
f3:6e:63:e2:04:24:aa:be:54:c4:b9:fe:a1:87:a0:1e:0f:8d:
c4:29:70:a9:fa:16:d2:9f:4e:c5:4e:83:54:e4:36:d8:a3:b8:
84:10:5e:6c:01:fa:aa:59:25:df:59:87:1d:e1:39:95:48:1b:
5d:35:16:fd:d8:d5:f1:cd:1c:38:58:ff:3c:2a:00:d8:0d:7f:
07:4e:12:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk+XRJbumM7RlLQE18bYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzQzZDMwN2E4YjcyYWM1MzJmNGNkODgzZjBjOTQyYmFk
MGY0YmUwHhcNMjUxMTExMTEwMTI2WhcNMjUxMTEyMTEwMTI2WjAzMTEwLwYDVQQD
EyhiMTY5OWVjOTQ0YTQwYWUxYzRhYzJiNDE5ZDA1ZjQyODU0MzUxM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qCYc9CSOVYAGe5GL8WuY+XTENJM
FRQyAduYJHjehcPSrfx7XhwVmkvt14Od30Xtf6IW8V8e4JhVOcDT3M+lRaYx6XC1
+7JSJAVP74F8/GXnu7785VOnXo8Q34o4accPa2G3/S1OHMjEEfsN+orIZr/js8Yj
Oq3+PyjV425xV/7U/89IGeUY2yPpWnmKpYMqqhJOK5D08N5GI628zaYdjCcJPIs5
D2WRWs2LcmP4jRCWEWm9MPACCQn4H3nTUQMTuz+06V/WpImZb/k/Bs8K9UVl7abt
iD4e9vVud96z1OHim8mwAqF8EVQ9budNHeT05c4bCUoxUCpxwK2InIMmpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFpnslEpArhxKwrQZ0F9ChUNRPcMB8GA1UdIwQY
MBaAFBN0PTB6i3KsUy9M2IPwyUK60PS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83ZTE1YzgtOTYzMS00ODM3LWEwNWQt
NDc3ZDFlOWE0MGI4LzEvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC83ZTE1YzgtOTYzMS00ODM3LWEwNWQtNDc3ZDFlOWE0MGI4
LzEvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxOrjtfP
P4c8Ec9QJThNXM5D7TxYrS+seIA4VuoiVPtNBkPdoh80yfSwsNt+QkcTF3sTHcVr
m9iePVP8xNxzhGeohOIhtveZooOZKc2GjkNpm2DF+XE7cvgIFzge220gZy4nZy77
+GH+vZMMilWvfG6WaptXAAR/qtOyTa47AsG7o30lWPFGkyJ26UZxVRTRvby9/jbf
2yao04LMfNmHayZW/WYj74YZolH9AADiMOi2HvO0825j4gQkqr5UxLn+oYegHg+N
xClwqfoW0p9OxU6DVOQ22KO4hBBebAH6qlkl31mHHeE5lUgbXTUW/djV8c0cOFj/
PCoA2A1/B04SUQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:43 2025 by rpki-client