Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier: lHMQR7T2iqNyUGPBDO0jix/MzAdhI/fKy0ANYn2qPYQ=
Subject key identifier: A2:8A:C8:B3:0F:CB:A2:18:8E:58:31:F6:E7:33:18:DA:FE:AC:66:6B
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer: /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial: 019A4B4ECED452B06194AC0CA38E4062F317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number: 170A
Signing time: Mon 03 Nov 2025 20:00:47 +0000
Manifest this update: Mon 03 Nov 2025 20:00:47 +0000
Manifest next update: Tue 04 Nov 2025 20:00:47 +0000
Files and hashes: 1: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: y72F7CijVvv0R3RPo9uk+/fzgwS31zzMs/P/ggvshfg=)
2: QCvbSuskCQwLxFQrUoOouHi3diY.roa (hash: sXGvHwha1X8v4xaWgUMHB+2ZrDbhHWTJfZknYl2gSe0=)
3: dWbs3GSCk40VoHUjYwOcmy7b-Zk.roa (hash: B1PLAXt5mt+DEIRs6h0vcjXyP629Yb4hYyTjCDjQz0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:4e:ce:d4:52:b0:61:94:ac:0c:a3:8e:40:62:f3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
Validity
Not Before: Nov 3 20:00:47 2025 GMT
Not After : Nov 4 20:00:47 2025 GMT
Subject: CN=a28ac8b30fcba2188e5831f6e73318dafeac666b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:b6:3f:15:ae:96:dc:db:98:2e:ab:3b:c6:
19:d6:68:b6:62:a5:86:af:c3:d6:b2:c9:3e:dd:16:
89:ef:77:cd:d0:e4:a4:26:65:a6:23:ae:25:d0:1a:
20:92:1f:4d:8c:3c:a3:ed:69:4b:db:37:e4:5e:b7:
7d:12:9b:8e:82:ea:04:44:11:fa:b2:79:84:9f:f8:
ce:b1:89:a1:9b:e0:ac:7b:1c:db:72:1f:92:20:95:
50:24:dd:e8:9a:62:c4:a3:a9:26:13:ff:82:b4:7f:
4c:36:eb:09:2b:50:5b:6a:17:e4:4e:84:51:dc:a2:
ab:44:44:36:15:2b:5a:cc:94:77:18:88:a3:c3:8a:
f0:18:03:df:d6:0f:51:a3:0c:7f:dd:f7:dd:dc:f7:
4a:04:5f:28:e6:d1:ab:4f:df:a2:0e:21:6d:0d:84:
47:ea:2c:a1:50:32:c2:a4:03:af:fb:27:78:a4:18:
cf:94:6c:30:9e:54:ea:fd:50:8c:4b:d6:11:70:e2:
09:0f:20:3a:ef:4d:ce:29:d8:36:d6:01:45:f1:43:
b8:fe:dc:86:75:d7:13:a2:3c:6b:e7:f6:da:0a:9b:
73:a8:a7:52:d1:8e:46:14:f7:77:e4:cb:8b:20:85:
25:3c:8e:ee:d7:a2:65:e0:1e:4f:20:a1:86:57:2a:
55:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8A:C8:B3:0F:CB:A2:18:8E:58:31:F6:E7:33:18:DA:FE:AC:66:6B
X509v3 Authority Key Identifier:
keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a0:4c:e8:cd:f6:9e:50:26:1f:64:29:bc:87:96:d8:da:74:
6d:74:0b:80:39:44:0f:bb:54:9b:c4:51:77:3c:20:b1:8b:52:
18:df:3a:53:4c:1f:ed:cc:87:68:24:76:06:ca:48:22:64:53:
5e:6b:ef:91:db:aa:aa:fc:13:d9:b1:a6:67:c3:06:e2:04:02:
8d:d2:ba:5b:eb:83:72:4a:16:3c:40:46:91:ab:96:21:89:fb:
07:ae:46:4d:3e:96:cf:42:7e:6e:cb:57:bc:30:e2:0e:52:46:
b1:7e:ce:65:c7:9e:cd:03:93:ad:e1:06:aa:6b:0b:66:2a:ed:
51:52:9b:f1:15:9c:fa:9d:d2:6f:1f:36:f8:4b:34:d3:ed:ce:
ff:86:4c:9d:9d:e4:07:78:59:a6:14:ec:c7:3b:8d:81:c2:96:
dd:c6:62:5b:e8:11:49:84:21:25:27:69:23:6c:96:04:3d:48:
ba:f8:25:0b:35:ef:63:68:26:1c:d7:5b:8a:58:f0:e8:de:e2:
1f:45:66:3d:3b:da:77:ea:d0:bf:4f:ae:81:52:6e:23:31:96:
b8:73:12:79:f3:99:87:01:3d:f3:6c:fb:3e:15:cd:dd:db:a4:
ef:af:c6:78:8e:a3:29:7a:98:38:34:22:ae:1f:94:18:8d:08:
d0:2b:45:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:20:51 2025 by rpki-client