Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: ORLviuy9G2AiiCOEQPJzFQTc6Cimbe950ho6YIwMGnA=
Subject key identifier: 0A:64:BB:39:AE:6A:73:E5:D8:FA:7A:88:D0:1E:4E:F2:75:DA:DB:68
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 019A255408E0B951691BF67E22539F677235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 1651
Signing time: Mon 27 Oct 2025 11:00:55 +0000
Manifest this update: Mon 27 Oct 2025 11:00:55 +0000
Manifest next update: Tue 28 Oct 2025 11:00:55 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: IZFs9kXCIxleISlghyexMZNOeKNOYSM7JwqYykGpJxc=)
2: bPbl9DKxYJUxR3ZUVzukhGWYurM.roa (hash: FAnYMWhXeH8TjI8m2ivn5nzVc0hLKvZ4QbjQQh/aekU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:54:08:e0:b9:51:69:1b:f6:7e:22:53:9f:67:72:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Oct 27 11:00:55 2025 GMT
Not After : Oct 28 11:00:55 2025 GMT
Subject: CN=0a64bb39ae6a73e5d8fa7a88d01e4ef275dadb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:c6:dc:d4:f0:5b:37:86:72:22:2a:ae:e1:
9d:7c:04:67:31:d6:8e:2f:28:6a:ae:60:43:ff:48:
97:b6:ab:ca:77:29:b4:d0:0c:32:a6:83:d6:4f:d4:
e8:0e:f4:1f:67:e0:9b:6d:f1:83:7c:10:2f:50:4c:
15:8b:f6:ae:0d:18:0e:8a:2a:9a:02:df:52:da:c7:
e2:24:93:37:a3:74:a8:cc:9c:e7:f9:b5:f9:d5:b2:
41:c0:97:ad:b8:3e:29:cd:b9:a4:35:51:74:2c:19:
7b:d3:78:4a:00:22:18:0b:1d:20:e3:ec:10:9d:10:
ed:52:fa:70:19:b1:0c:5f:80:84:94:8a:9c:a2:0f:
6e:1a:a8:02:d6:3b:2d:31:c4:9d:46:b8:5c:6e:f2:
48:87:16:a5:6b:29:c7:77:ad:ac:9e:24:df:d3:7d:
09:28:99:1e:0a:c9:15:99:e7:0c:fb:b3:86:17:26:
5a:23:b3:fd:53:be:01:52:ac:be:80:09:2e:32:bf:
51:d1:4e:ab:3f:d1:b1:13:da:7f:fd:a6:08:44:88:
2b:01:57:ad:55:9e:59:8c:b1:e8:6d:62:d4:26:df:
bf:f1:c0:53:a9:83:87:cc:00:b6:b6:53:27:ca:90:
70:57:01:e3:5d:67:aa:67:69:25:fb:bd:0e:72:66:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:64:BB:39:AE:6A:73:E5:D8:FA:7A:88:D0:1E:4E:F2:75:DA:DB:68
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7d:c3:7d:4b:59:9e:88:85:05:dc:c9:f8:d6:39:23:7b:45:
31:3f:65:fe:87:05:d8:ce:03:e1:20:cf:95:f8:e8:d8:43:9a:
60:8f:4d:35:70:c9:9d:b4:7e:58:df:c7:34:31:00:5e:73:9d:
b9:4c:d1:76:55:ec:e0:b2:c8:89:2d:3d:24:be:e7:7f:e0:9f:
f3:8c:00:a5:09:22:f3:b4:d8:18:02:d8:ba:3d:fe:de:e0:58:
b9:8e:9e:f1:5c:92:af:af:80:58:09:28:1a:6c:27:f9:5d:c6:
2f:7c:b2:bb:66:f5:aa:9e:b7:71:87:cb:5c:b5:dd:84:cc:12:
c7:8f:89:21:0d:2b:8e:8f:bc:6e:98:1e:cd:01:39:2d:72:85:
f2:4a:dd:43:44:7f:fa:d8:3a:ff:d4:a3:d0:72:bf:01:b7:45:
7f:e4:79:e0:14:df:56:90:27:eb:08:cd:34:ce:79:c8:85:54:
49:f6:46:b5:9b:39:fe:3e:7a:07:73:83:67:5f:7c:7d:99:00:
49:c2:94:42:bc:c9:25:77:de:78:c0:ee:00:ff:41:1c:b8:27:
13:ef:81:c2:eb:ff:53:62:1d:72:b7:e9:58:5c:87:bb:32:e7:
09:cd:a7:86:ec:ae:02:4e:06:16:b3:ca:f9:12:f6:1e:ea:e0:
ae:a2:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:40:02 2025 by rpki-client