Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File: E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier: i7s73g1HFLL5IFN8MXRVIJZh+S21gfYeBde0YUdWVhY=
Subject key identifier: 5B:54:CF:89:F1:AC:52:BF:E6:05:6B:12:23:E4:94:09:3B:F0:A9:40
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 019A0C38CAA5F1216A3CBC0327F670F0FF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number: 16EB
Signing time: Wed 22 Oct 2025 14:00:39 +0000
Manifest this update: Wed 22 Oct 2025 14:00:39 +0000
Manifest next update: Thu 23 Oct 2025 14:00:39 +0000
Files and hashes: 1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: 5UsIEhYh6AvSpSFOu38Y4c5mdekDbT2aFRzqdV/nJzQ=)
2: GRNWR16Ds5mVAEzQkJ8f4EpHdoA.roa (hash: OkjXTbnHRtbFuWzt8SkmqNTl7djjfQ2D/Z/mnZbORFo=)
3: mp_GHNV3oXauSfYTml7M5-B_SzE.roa (hash: o6TxNWrAQ4DmV0/jzWqCauUXKEHG2x6UUHTMIwvWqGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:38:ca:a5:f1:21:6a:3c:bc:03:27:f6:70:f0:ff:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Oct 22 14:00:39 2025 GMT
Not After : Oct 23 14:00:39 2025 GMT
Subject: CN=5b54cf89f1ac52bfe6056b1223e494093bf0a940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:5f:b6:17:1f:63:82:2d:43:87:05:ee:0a:
25:94:54:9f:00:25:68:59:ec:71:86:a7:7a:17:06:
3a:8c:83:98:53:84:f0:33:a2:15:47:47:8a:97:49:
23:4c:7e:6d:22:3e:a9:2f:bd:b7:0b:43:25:de:ed:
32:1e:6f:74:3e:7d:b2:11:b4:68:7c:d1:f3:ad:da:
9c:50:b9:25:63:51:1f:ad:09:19:8c:b6:44:6e:2f:
43:d1:4d:07:52:f7:ec:77:1e:97:30:59:b3:cf:ad:
b8:73:c2:c3:89:2b:9a:10:23:de:ae:6e:03:e9:be:
31:3a:0f:ef:be:f8:f8:6e:0c:b2:a9:c6:50:ce:fa:
71:e5:d7:fc:ef:06:51:46:f1:d3:89:0d:fb:91:c0:
d2:8e:23:ed:3a:ae:07:c4:9e:b4:57:96:d7:5e:d9:
2c:08:ee:89:68:93:b9:29:4f:1f:42:d8:90:51:d2:
b0:e9:41:94:c3:27:c1:f7:db:77:78:ba:39:bd:9d:
d0:d1:bd:74:cc:c2:67:00:44:14:42:01:b7:07:81:
79:d4:fa:18:72:8b:eb:4f:ae:b1:f9:36:97:4c:cd:
4e:ae:ed:d2:44:b8:ae:40:79:82:52:29:3c:22:27:
78:e8:0d:1c:0c:24:99:d3:7c:05:cd:06:5a:6e:b2:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:54:CF:89:F1:AC:52:BF:E6:05:6B:12:23:E4:94:09:3B:F0:A9:40
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ea:f5:b6:e7:80:9c:f9:f7:5d:fa:ca:68:f6:7d:5e:bd:2a:
22:bb:4d:26:a1:e4:a2:83:cf:c0:11:00:9b:90:e4:9e:22:b4:
62:2c:25:6e:07:3d:40:f5:69:63:64:99:eb:7f:72:ef:cd:fb:
8f:72:56:03:d5:9c:d4:ac:48:be:86:f2:75:fd:34:ef:cb:82:
a7:29:c2:5a:28:53:c7:87:a4:31:0f:5b:91:68:9f:e6:5f:90:
d1:70:a4:b1:48:2a:88:96:29:4d:95:af:93:c4:11:2a:90:d0:
f7:26:09:bc:f2:80:c1:e2:0a:2c:b4:f3:25:75:48:a6:8f:1f:
47:06:c0:4b:fe:ec:57:c3:ce:7b:b7:d9:98:c2:64:63:38:84:
c8:25:ca:fa:87:eb:f3:ba:da:ac:d1:16:9d:be:b9:cc:4a:14:
0b:e1:be:35:a5:84:24:be:d1:e0:27:8f:d7:ca:b3:46:41:40:
f8:9f:ff:f7:08:4a:f5:5a:c9:21:ec:ee:91:f4:d2:fe:20:db:
3a:3a:2d:28:8d:14:b9:cd:9c:58:30:57:fb:78:19:a9:4b:cb:
1c:7a:12:5c:b8:7b:8c:1f:23:8e:7f:ca:82:fe:89:3b:2d:1e:
73:96:0a:b3:88:a9:d6:91:2f:40:19:eb:44:15:e9:08:d0:ec:
5e:2b:d0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:52:37 2025 by rpki-client