Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
File: E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft (raw, json)
Hash identifier: H4z0aTqKwjRH9avkhkvpKkXsiFNpmVaCgjkOE4c45Go=
Subject key identifier: 85:32:93:00:D6:A1:15:B2:49:77:F9:D9:CD:F3:C0:9B:F4:08:5B:AD
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial: 019A1CBECBC819D4A4E1F8505D97DDB88D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
Manifest number: 0981
Signing time: Sat 25 Oct 2025 19:00:57 +0000
Manifest this update: Sat 25 Oct 2025 19:00:57 +0000
Manifest next update: Sun 26 Oct 2025 19:00:57 +0000
Files and hashes: 1: 1W5jBhM2asNXAd6Fvn9ZWx6hGWA.roa (hash: 2BmEhsjJ5rUlKnSSBB9lDoAty6aoaTeOv+q+nl7pHv4=)
2: E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl (hash: 38q3jl62kzXsLq1onSth2aI7SEm8jBc/GERR9yjQeAQ=)
3: ZCtSSCWVJN3ZEraOSBb6muqnelY.roa (hash: ANfL3CikAp/rt+byg120TXAfb3FwuafgueHb91UmTFU=)
4: tusGHuemKxJEouTT2Dt00jxkpNE.roa (hash: EY8wTIVVgdpKzSD1Zx8DGd8TDmPVDkE4Wh1dl0CmPFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:cb:c8:19:d4:a4:e1:f8:50:5d:97:dd:b8:8d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Validity
Not Before: Oct 25 19:00:57 2025 GMT
Not After : Oct 26 19:00:57 2025 GMT
Subject: CN=85329300d6a115b24977f9d9cdf3c09bf4085bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:cf:76:1e:7a:60:a4:32:a0:0c:fe:5c:1e:
d9:d4:e6:87:e7:2d:bf:20:8e:e0:55:c4:01:c5:9f:
5c:90:f6:a4:55:70:d5:8c:e1:b3:e9:d3:cb:bd:51:
ae:43:24:fd:a6:c0:a1:08:6e:a9:43:de:40:74:6c:
4e:b3:cb:e6:7d:9b:4b:f7:4f:ee:70:1e:da:93:c6:
ca:48:d6:cf:a5:6f:63:87:c1:7b:0e:11:58:4e:3d:
64:24:2b:b3:e2:05:f2:c2:30:04:74:5a:d3:83:f8:
68:8c:e2:84:17:e8:74:e1:06:34:e8:2f:11:2b:9a:
07:ea:8c:b7:48:0b:05:d4:7b:3c:c7:07:ac:c9:fd:
cb:b3:79:7a:47:6a:db:4a:af:21:a7:71:f3:c8:c6:
69:70:99:54:cd:d6:01:68:70:88:db:3f:d8:37:57:
88:ff:4d:a1:93:06:c8:05:b6:27:f8:02:5c:1f:87:
3f:94:f2:51:52:8f:83:e6:cd:94:4d:fe:e2:45:a6:
ba:c1:14:6a:a2:c2:f9:7d:32:c5:a6:3d:fb:bf:16:
24:ea:30:c1:22:fc:67:e6:6c:b6:b5:aa:73:62:b3:
64:36:09:4f:f0:d1:c7:6c:a6:fd:41:43:ad:56:e8:
5e:61:84:60:09:8a:0e:d7:f2:1d:6c:32:be:33:e8:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:32:93:00:D6:A1:15:B2:49:77:F9:D9:CD:F3:C0:9B:F4:08:5B:AD
X509v3 Authority Key Identifier:
keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b5:da:11:40:89:53:3b:47:af:f6:14:4e:f4:db:f3:21:52:
ee:df:73:76:e1:43:d7:3b:16:3b:71:95:cb:9e:7f:72:a3:9d:
b1:31:b7:f7:62:be:d2:1c:1a:ef:70:48:c7:62:e2:fa:3c:0b:
34:93:ae:61:8f:a6:a8:7f:f4:4d:fa:c9:58:56:59:3c:6b:39:
bc:b8:c1:ee:f6:61:4b:d3:85:bf:83:79:49:a5:17:8a:d7:fb:
be:ac:22:a6:84:62:73:e7:50:ac:00:c8:e2:47:3a:b6:bd:d7:
fc:a2:50:19:ce:76:e2:f5:d3:dd:e4:36:c2:dd:cf:d2:77:b4:
11:51:b4:94:8a:a5:90:b5:97:e5:b7:0c:cf:4c:d4:bc:4b:ed:
70:e3:7d:f1:7d:4e:5d:15:79:4d:81:ba:75:d9:53:e3:8f:d6:
4c:fc:89:10:9e:79:ba:40:1b:dc:2f:30:48:43:91:a6:16:ac:
2b:d4:ba:92:e2:56:c8:04:81:fe:ee:3e:d4:af:a1:19:f5:c0:
9c:9a:cc:44:ba:e2:c7:0e:49:6f:89:99:34:3d:24:43:30:72:
20:2a:d6:37:8d:67:e2:bb:33:9e:29:e9:f1:09:17:20:55:b2:
58:3b:a6:e6:ea:ad:3e:42:53:b0:4c:b8:33:67:d7:a4:9a:90:
dd:ee:7b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:04:44 2025 by rpki-client