Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: 7aoKAxFhVJ7xUqfNQvE/w92QPU9SbPtUU7jVO9s9DjE=
Subject key identifier: 02:A9:B6:9B:B0:A5:78:49:64:FE:5B:2A:98:56:E4:1F:83:CA:A7:BE
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 019A18E24EE658058E37467DC021A8E7B885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 1683
Signing time: Sat 25 Oct 2025 01:01:15 +0000
Manifest this update: Sat 25 Oct 2025 01:01:15 +0000
Manifest next update: Sun 26 Oct 2025 01:01:15 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: fUJ1QiaO9vt5tnsmHJoqnPIR5kA0okczBhR0tpUqxl0=)
2: gdCbju7iq0jqbnL3F15jB2y6w9k.roa (hash: 5imVu9OgEC0LpB68Uf/xLlkHKg4D35cIEP4G8Ci0Msk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e2:4e:e6:58:05:8e:37:46:7d:c0:21:a8:e7:b8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Oct 25 01:01:15 2025 GMT
Not After : Oct 26 01:01:15 2025 GMT
Subject: CN=02a9b69bb0a5784964fe5b2a9856e41f83caa7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:eb:1d:69:10:75:ca:bd:a9:93:39:b4:10:67:
f8:64:4b:30:f9:4e:55:a1:d2:43:d3:f3:fb:a5:4a:
a2:26:7d:4f:c6:f0:03:d5:49:e7:6d:0d:e5:ff:fb:
d6:69:74:ca:a2:2f:f2:fd:0e:36:01:83:0c:c7:42:
47:ec:bd:4a:9b:4b:da:0d:97:e1:78:81:39:7e:9c:
62:b2:aa:d5:44:54:cf:a9:74:80:d9:16:e6:4e:a8:
cf:cb:e0:ca:93:34:5b:a5:dd:14:06:91:3d:98:c0:
b2:83:ee:cc:65:76:45:82:ff:0e:c0:3b:2f:82:fc:
40:ac:89:88:ef:0d:d6:ca:ea:74:36:ae:76:45:1a:
71:a5:52:df:90:6a:54:8f:b3:c1:53:bc:42:e3:d7:
94:8d:38:ff:12:57:66:f9:9c:69:e7:b8:66:e0:bb:
8c:5d:4a:9a:f5:ae:2f:d2:f2:97:84:76:08:fe:79:
5e:f9:30:5c:3f:e5:9a:62:ef:a1:67:b5:b3:7d:85:
90:2b:6d:b3:34:e8:2a:0b:0e:eb:e8:39:ce:3d:42:
d0:6f:62:ad:0c:d2:3e:17:7d:e1:85:72:43:0e:6f:
28:c6:62:4e:91:52:9d:52:5d:55:bc:22:88:6d:b0:
bf:2d:bc:24:a5:62:d6:66:96:a2:e7:49:99:7a:25:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A9:B6:9B:B0:A5:78:49:64:FE:5B:2A:98:56:E4:1F:83:CA:A7:BE
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a7:98:0d:05:a9:af:6c:d0:aa:c0:8d:14:48:4f:be:4b:93:
7b:6d:8f:b8:f7:46:24:fb:19:24:2e:67:21:18:cc:e2:9d:82:
8a:ec:60:ae:6b:64:47:6a:10:12:23:52:e2:da:20:2a:48:5a:
4b:50:0b:b3:41:24:cb:cc:86:98:93:8f:0e:0f:b4:1a:8f:57:
a8:e5:35:a6:cd:cb:fe:0f:5a:ca:c4:c2:79:85:82:df:1e:a8:
33:36:56:11:b1:0c:11:df:a3:75:0f:f0:ca:25:fb:a8:05:8d:
41:53:3f:df:64:aa:1e:87:ca:a7:3d:ab:0f:66:59:96:62:5e:
65:b7:46:78:5e:37:5e:41:5c:65:cb:e3:05:8a:7d:7e:79:e8:
ef:f6:82:42:14:da:ce:69:ea:c4:f5:a6:56:f1:40:f0:21:b4:
35:1e:66:3f:92:33:f1:02:0c:c7:96:20:cb:0c:12:0b:99:4b:
a4:34:90:38:76:c2:02:50:a8:b2:a8:ef:67:2d:0a:41:f7:e9:
ab:f9:0e:93:da:29:33:51:25:96:cc:77:a9:29:a0:72:f3:ce:
09:50:61:f8:47:52:9e:3b:75:aa:63:91:39:57:0e:f1:40:6e:
44:c0:0a:ca:0f:70:7f:53:43:45:50:20:9b:8c:c3:7f:9f:f8:
91:cd:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:21:43 2025 by rpki-client