Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
File: E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json)
Hash identifier: k5YyHEfOj/maXOjQ0CJUiQbWI7dSLvw2NINUe6x6wp4=
Subject key identifier: 04:A0:CD:F4:ED:EC:EC:94:33:35:D2:5C:BF:26:C1:2F:77:14:70:09
Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
Certificate issuer: /CN=13701ebe06799de0969899205150e532deffe7b5
Certificate serial: 019A232E386FEA65664D38D10411F466FF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
Manifest number: 031F
Signing time: Mon 27 Oct 2025 01:00:22 +0000
Manifest this update: Mon 27 Oct 2025 01:00:22 +0000
Manifest next update: Tue 28 Oct 2025 01:00:22 +0000
Files and hashes: 1: 8gVvFm91f0RDawryW7l9gKrlwps.roa (hash: QofxAMe0K3ECuRtwFP3oD9RJD1otx3XwH2YFtNZT6bY=)
2: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: Krepk7zq/0P0HhTv7DQxVs4s7Fwe98+akCXP5prsMO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:38:6f:ea:65:66:4d:38:d1:04:11:f4:66:ff:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13701ebe06799de0969899205150e532deffe7b5
Validity
Not Before: Oct 27 01:00:22 2025 GMT
Not After : Oct 28 01:00:22 2025 GMT
Subject: CN=04a0cdf4edecec943335d25cbf26c12f77147009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:50:6a:91:0f:d1:99:9b:ba:0b:42:ff:b3:ca:
d8:a5:03:1f:db:4a:88:59:47:9f:35:d5:d3:42:3d:
19:6f:60:db:50:87:92:29:bf:5b:16:cc:67:a6:61:
0c:42:cc:11:dd:2f:14:57:22:15:f2:93:f2:77:25:
99:9f:ce:33:c5:f1:ce:f7:e2:24:3b:31:b1:de:93:
02:58:7f:95:e2:bb:7b:7c:1e:4b:d9:8c:8a:7f:23:
6a:77:0e:49:84:f5:9a:9b:c3:71:1e:71:63:31:bb:
48:c5:2b:58:c3:22:4f:76:ba:09:89:08:42:17:be:
56:9b:2e:7e:c5:ad:e2:88:8f:35:f1:5d:e3:a0:b2:
8a:6f:02:cc:ea:1f:7d:9c:2f:e0:81:cc:16:d1:44:
20:7e:c7:d1:79:9f:e4:89:f1:db:16:69:e7:44:f6:
32:b2:ed:91:30:30:62:50:e5:a4:02:16:98:a3:65:
46:18:3e:e3:4a:fc:8d:7e:0c:a4:71:ae:45:02:54:
77:fd:9a:df:68:0a:08:7e:3c:51:cd:20:04:d3:e1:
cd:59:45:92:f2:3d:04:45:16:97:c3:4d:30:1c:bd:
cf:a0:6c:ab:2b:64:ec:ee:1d:7c:ff:ab:62:4d:4f:
d7:14:66:ee:d8:44:c7:ff:a3:48:8b:ba:ca:45:eb:
a3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A0:CD:F4:ED:EC:EC:94:33:35:D2:5C:BF:26:C1:2F:77:14:70:09
X509v3 Authority Key Identifier:
keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b0:b2:c5:08:03:88:a3:81:e5:ba:3a:56:2a:d4:61:6a:42:
55:87:bc:83:cc:aa:50:19:38:61:b1:d8:8e:eb:28:af:52:d0:
cb:1b:b6:1f:f2:0f:8f:0c:c0:70:d9:ce:80:85:aa:7b:93:89:
5f:fa:ed:3d:62:8a:63:b2:f9:3e:38:2b:27:9b:f2:df:b2:4a:
37:c4:0a:7c:ba:4b:06:84:e0:29:f6:2f:ec:9c:d4:0f:92:30:
c0:2d:3b:fb:b2:25:6f:a7:08:06:e6:b0:94:72:f5:89:ad:17:
5a:75:b7:60:4e:9b:26:24:a4:0c:a8:1f:e5:ee:b6:fa:3a:f6:
2c:11:6d:a4:e0:53:17:4c:91:6c:50:c8:0b:b7:11:6c:e4:57:
a2:8b:cb:81:c5:da:5b:db:d3:ff:11:5f:b1:89:98:cf:b0:47:
a9:a0:48:f4:01:04:3b:c8:35:50:1a:7d:c6:17:e2:08:21:4b:
0c:31:dc:26:c2:19:ce:10:f7:f6:4c:3b:6d:ac:69:3d:e0:3a:
cf:92:b1:85:8f:80:77:2d:4f:d0:7f:28:2b:46:af:dc:1f:5a:
31:07:f8:12:b8:6e:a2:98:e8:20:78:54:b8:69:38:0c:77:d3:
04:76:42:0c:31:f4:3c:c4:e6:0d:30:d3:ce:65:e6:90:65:67:
72:8f:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:26:44 2025 by rpki-client