Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
File: E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json)
Hash identifier: wJYtupRENfy3X5nqrNBClw27QAtriM60sc2f1kdyBLA=
Subject key identifier: A5:01:25:1B:95:70:90:54:44:07:37:AA:F7:DA:E3:21:FB:AE:5D:4B
Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
Certificate issuer: /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Certificate serial: 019923D613BB227ECC7C8CF6D10CB0C3B3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
Manifest number: 0542
Signing time: Sun 07 Sep 2025 11:00:56 +0000
Manifest this update: Sun 07 Sep 2025 11:00:56 +0000
Manifest next update: Mon 08 Sep 2025 11:00:56 +0000
Files and hashes: 1: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: eL+BCkkDCPsFPX8crXeGIX54ri8tE4trtbIy2tnk2RM=)
2: JAqvgN4KkkWNoe1vrMrVsDBqmfE.roa (hash: QG1yL1zcYsT8fBEaDP08SL61cVF4WfYEKH5BAPzFTBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:13:bb:22:7e:cc:7c:8c:f6:d1:0c:b0:c3:b3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Validity
Not Before: Sep 7 11:00:56 2025 GMT
Not After : Sep 8 11:00:56 2025 GMT
Subject: CN=a501251b95709054440737aaf7dae321fbae5d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:bd:42:fd:54:cf:23:1f:15:3e:ed:a0:c4:
5b:5f:27:24:08:d5:b4:3b:e8:80:83:7a:f7:8e:ee:
a6:e5:50:6e:a7:62:e1:19:c1:4e:8a:92:f6:8c:57:
28:ef:82:bb:d2:bc:01:81:6e:49:72:87:78:55:6f:
a6:02:a1:41:2e:4c:21:32:0f:f2:56:f7:a1:bc:be:
4e:95:b5:0c:23:6e:43:3b:22:9e:c8:62:6c:18:e8:
29:c3:63:94:50:7a:58:00:8a:f8:ae:68:21:a8:e9:
6f:91:2c:53:c5:56:29:aa:9a:11:7f:7a:b2:00:da:
e0:30:71:f8:6b:75:9e:d6:80:d1:2d:f9:ff:71:99:
cc:3b:e4:1c:53:23:83:d2:ab:cd:84:9a:44:79:5c:
a4:3b:d0:01:44:0d:8b:23:fc:1b:08:2c:f4:1a:7d:
62:0c:69:0c:16:fa:52:bc:d9:60:00:52:4a:a3:32:
3d:14:45:6e:43:95:61:bb:8c:3a:c1:b7:ec:6f:df:
38:19:52:e5:01:4f:72:01:00:ad:22:ea:c8:dc:83:
34:ea:52:6e:90:ee:a3:4e:f6:5d:81:af:16:45:bb:
ff:ad:39:96:2d:54:41:14:51:54:b4:b6:fc:d2:b2:
ae:65:d3:98:f0:08:48:a5:60:fa:34:b0:bc:4e:df:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:01:25:1B:95:70:90:54:44:07:37:AA:F7:DA:E3:21:FB:AE:5D:4B
X509v3 Authority Key Identifier:
keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:65:2d:65:09:44:47:2c:7a:3f:53:2b:16:ae:77:70:d4:7d:
5a:ef:e5:22:c7:7a:42:36:9f:fe:35:19:c7:e3:d8:c8:fb:3e:
7a:bf:a5:29:2d:f2:e6:68:d7:bb:d2:0d:3e:50:ae:a8:50:c4:
ec:48:79:03:64:f6:57:57:ab:b3:7e:b0:8a:49:10:9c:6b:1e:
e0:1a:da:38:22:85:e3:2d:87:d0:e1:29:84:02:58:cd:a2:89:
a1:a0:dc:a3:97:1b:55:04:36:cb:31:ee:a6:7e:f5:4e:13:e7:
00:31:12:59:25:cc:ae:74:ab:b9:ff:b5:2d:1e:45:45:39:6c:
3d:00:25:85:4d:78:a9:a1:d1:99:a9:72:78:9d:99:02:4f:c8:
56:77:dc:16:52:a3:05:2c:73:eb:f1:16:ca:6f:7c:57:ad:fc:
52:20:bd:f1:4f:67:83:c2:ff:ef:97:09:97:91:c6:eb:4d:a9:
9d:ee:4d:93:ff:d7:eb:35:f7:83:19:75:65:cb:0d:5a:7d:cd:
fa:30:ed:7f:73:17:06:e4:4f:f1:58:f5:3f:4b:ed:7b:87:80:
73:62:54:5e:fd:7b:b0:2e:46:21:40:9e:25:a9:46:b5:8d:0b:
8d:a5:0f:1c:1d:6d:16:a5:00:ef:46:ed:77:2c:1b:1e:49:ad:
13:07:1c:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1hO7In7MfIz20Qyww7P8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzVhYTVlMzdjNDJmN2RlYjdmM2IwZTk2NzBiZjU5YTJh
Y2E2YjUwHhcNMjUwOTA3MTEwMDU2WhcNMjUwOTA4MTEwMDU2WjAzMTEwLwYDVQQD
EyhhNTAxMjUxYjk1NzA5MDU0NDQwNzM3YWFmN2RhZTMyMWZiYWU1ZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDC9Qv1UzyMfFT7toMRbXyckCNW0
O+iAg3r3ju6m5VBup2LhGcFOipL2jFco74K70rwBgW5Jcod4VW+mAqFBLkwhMg/y
VvehvL5OlbUMI25DOyKeyGJsGOgpw2OUUHpYAIr4rmghqOlvkSxTxVYpqpoRf3qy
ANrgMHH4a3We1oDRLfn/cZnMO+QcUyOD0qvNhJpEeVykO9ABRA2LI/wbCCz0Gn1i
DGkMFvpSvNlgAFJKozI9FEVuQ5Vhu4w6wbfsb984GVLlAU9yAQCtIurI3IM06lJu
kO6jTvZdga8WRbv/rTmWLVRBFFFUtLb80rKuZdOY8AhIpWD6NLC8Tt+18QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUBJRuVcJBURAc3qvfa4yH7rl1LMB8GA1UdIwQY
MBaAFBN1ql43xC996387DpZwv1mirKa1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZTk3ZGQtZTcyMS00MTkyLWI4YjQt
ZDRiNzI1ZDA2NzZjLzEvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZTk3ZGQtZTcyMS00MTkyLWI4YjQtZDRiNzI1ZDA2NzZj
LzEvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGUtZQlE
Ryx6P1MrFq53cNR9Wu/lIsd6Qjaf/jUZx+PYyPs+er+lKS3y5mjXu9INPlCuqFDE
7Eh5A2T2V1ers36wikkQnGse4BraOCKF4y2H0OEphAJYzaKJoaDco5cbVQQ2yzHu
pn71ThPnADESWSXMrnSruf+1LR5FRTlsPQAlhU14qaHRmalyeJ2ZAk/IVnfcFlKj
BSxz6/EWym98V638UiC98U9ng8L/75cJl5HG602pne5Nk//X6zX3gxl1ZcsNWn3N
+jDtf3MXBuRP8Vj1P0vte4eAc2JUXv17sC5GIUCeJalGtY0LjaUPHB1tFqUA70bt
dywbHkmtEwccFA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:46 2025 by rpki-client