Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File: E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier: 85kEiV2oIweQcJy2Wj+VKVfdZJSIF4kDBaAlwiQgFtQ=
Subject key identifier: 31:19:3C:B0:14:DF:45:85:4D:CB:90:7D:CC:8D:F7:5A:8A:27:4A:78
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 01991DD5B734B0947855A30A2C23B035176D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number: 166E
Signing time: Sat 06 Sep 2025 07:02:49 +0000
Manifest this update: Sat 06 Sep 2025 07:02:49 +0000
Manifest next update: Sun 07 Sep 2025 07:02:49 +0000
Files and hashes: 1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: BIM/1xHi/RvCEFvG/nFcWv++U6/YT16deR0GPF/es4M=)
2: GRNWR16Ds5mVAEzQkJ8f4EpHdoA.roa (hash: OkjXTbnHRtbFuWzt8SkmqNTl7djjfQ2D/Z/mnZbORFo=)
3: iDJMZTn0ZQsbFebdZO8EqvngV-M.roa (hash: DFTmsPgWe97cJSGWeErnYcp9qELmEJE971RJTfF9FUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 07:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:d5:b7:34:b0:94:78:55:a3:0a:2c:23:b0:35:17:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Sep 6 07:02:49 2025 GMT
Not After : Sep 7 07:02:49 2025 GMT
Subject: CN=31193cb014df45854dcb907dcc8df75a8a274a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:29:13:d4:23:02:27:de:1a:4f:a7:28:61:
a8:2a:bb:eb:39:b1:89:af:bb:ae:5a:b5:98:21:1b:
79:5f:ea:cb:1b:52:7a:72:41:49:f9:5f:01:d7:24:
68:d9:db:64:14:af:91:72:19:0b:31:89:69:52:ed:
98:7b:78:79:19:26:89:a3:cd:32:f8:5c:45:e8:f0:
8e:2d:bf:2c:50:76:ff:ed:1b:1d:6d:35:50:0c:74:
27:3f:c1:58:85:7f:fe:6b:55:f6:22:88:72:85:76:
16:78:f1:7d:ff:01:76:18:37:41:fb:e3:6e:75:ca:
01:d4:27:22:49:7e:c5:70:e5:24:77:7e:b8:33:d1:
d0:9f:c2:99:cd:13:a6:3f:7d:0b:f3:87:01:bd:b5:
58:f7:fe:11:b5:40:b9:d2:c3:cc:ed:e8:39:3c:5c:
f2:9c:31:6b:44:a4:9f:d2:a9:ba:3f:91:04:ca:25:
a9:1c:84:72:7f:21:2b:8c:f4:14:fa:ff:f8:29:9d:
a1:ff:21:f6:bf:a6:31:28:1e:6d:36:69:c9:08:bf:
cd:de:5d:b6:4b:9f:e5:9b:d6:5c:89:7e:7a:c4:c7:
08:61:d9:0b:31:e5:a1:9c:77:4b:eb:98:b9:1b:56:
47:22:5e:19:c2:30:cc:d4:2a:c8:37:10:fd:ab:49:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:19:3C:B0:14:DF:45:85:4D:CB:90:7D:CC:8D:F7:5A:8A:27:4A:78
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fb:b5:55:a0:ca:ea:9b:b4:ad:72:64:3b:79:0d:d3:1d:a4:
e2:f9:b0:8b:a2:17:f0:c7:46:90:ff:8b:ea:ac:b6:00:7e:7b:
3c:3b:57:30:0a:35:01:d1:b5:ac:a9:4f:39:6c:bb:34:be:85:
0e:d2:56:b0:9d:fa:cd:f8:63:bd:9f:8d:be:ef:69:67:2b:4d:
cb:d4:15:d4:23:e9:96:ff:01:15:2f:3a:09:b5:b0:ca:d9:03:
84:0a:2a:5f:eb:83:5c:11:e1:ba:d9:78:d9:ac:ee:a1:36:27:
16:6d:86:19:af:3e:46:4e:39:f1:fb:32:55:60:92:10:50:7c:
46:ca:eb:a5:f8:27:87:6d:66:6d:b6:e7:57:e7:1e:6d:96:bd:
14:45:24:55:89:48:46:24:70:87:3d:8a:61:cd:17:3a:a2:28:
9f:f8:bb:e4:b9:9e:09:ae:21:b5:61:22:e2:b9:d0:3e:25:f7:
ad:c0:e3:1c:25:69:38:45:a9:51:7c:c2:6f:35:e4:ce:f8:00:
a6:50:3e:01:cc:69:29:83:e6:ab:77:31:c7:db:56:f0:b4:ef:
27:5f:7d:b7:95:1f:0a:1b:dc:db:70:97:ea:5b:29:fd:cf:01:
7e:8e:1f:4f:78:7d:4e:c8:f9:7a:74:c5:c5:b3:79:0f:40:ed:
1b:7a:29:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:48:13 2025 by rpki-client