Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier: QJYA62W5TYkU5SUqsbi03OUQk/hmqapgv34q5+NIe6Q=
Subject key identifier: 82:C5:6D:1D:00:7F:33:1F:F6:F6:12:36:FD:4B:F0:FF:3D:00:F3:AD
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial: 019A70DC350F42980285BA19C579132923DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 03:01:10 +0000
Manifest this update: Tue 11 Nov 2025 03:01:10 +0000
Manifest next update: Wed 12 Nov 2025 03:01:10 +0000
Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: SqnYOKYMm5l6p78Shu+IiukWYW60xD3uS9V1Y/xt4p0=)
2: H9WDvc0OfXB44k8OyrV2kgiLuzs.roa (hash: ECy836T53R0CEG1VyCTCAvl+zi+aWOuz45OEcMa+89w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:35:0f:42:98:02:85:ba:19:c5:79:13:29:23:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Validity
Not Before: Nov 11 03:01:10 2025 GMT
Not After : Nov 12 03:01:10 2025 GMT
Subject: CN=82c56d1d007f331ff6f61236fd4bf0ff3d00f3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:35:2d:cb:46:13:a0:cf:2e:dd:6e:f1:2a:
14:72:c1:b5:3a:d4:55:52:00:13:a5:77:f0:51:0c:
82:d8:5b:9c:de:6b:72:e9:0e:d7:fe:29:c3:b5:29:
58:56:ca:ae:87:72:66:27:78:e8:3e:7c:13:6c:e7:
f9:62:61:2a:bb:4d:21:57:57:e3:82:24:73:45:b5:
6a:83:ce:96:55:73:82:9a:84:91:50:14:86:6e:e4:
a1:22:ee:99:98:03:ab:ac:6b:47:86:44:00:b4:89:
25:34:fc:e8:48:f6:45:5b:96:b8:3d:8a:9b:de:00:
1c:51:2e:dc:ed:19:1d:04:11:b6:3a:81:65:82:15:
59:65:c0:6f:f6:92:e0:62:e9:24:a0:4b:70:69:94:
0b:02:c3:4b:d8:03:de:21:d4:7f:b3:cf:3f:a0:f1:
07:ff:5e:64:9d:10:4a:1e:c5:9e:86:d3:54:7c:1e:
9f:8d:90:b4:e2:03:46:75:09:cb:5d:fa:a2:3c:90:
a1:e1:0f:e0:60:66:a8:f6:5a:f2:34:50:3a:02:de:
97:ab:83:e5:58:e9:e0:be:28:f9:17:95:42:13:0b:
70:0d:dd:51:23:e2:77:ce:ea:48:94:5c:60:de:b2:
f6:84:ff:98:8e:9c:47:cd:d8:99:4d:20:a0:3d:ec:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C5:6D:1D:00:7F:33:1F:F6:F6:12:36:FD:4B:F0:FF:3D:00:F3:AD
X509v3 Authority Key Identifier:
keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:88:05:ce:21:8f:c7:32:7b:62:2a:d0:88:37:73:c5:a4:cb:
b9:38:9a:d8:72:39:84:74:67:26:4b:f6:4c:31:02:3e:4e:6d:
88:42:99:53:4c:a0:3a:42:77:4b:0a:3a:b7:bd:4c:6c:75:c1:
03:52:62:c6:64:f8:db:06:93:cc:be:1b:ee:16:43:eb:35:89:
dc:2a:bf:55:eb:18:31:cf:39:03:e9:dc:7d:14:ff:93:db:f6:
be:4b:2c:77:f4:ea:76:20:41:ae:2f:06:96:31:44:db:41:ee:
15:3e:7e:d2:c2:00:6c:c9:bf:d3:e0:4d:25:0e:5c:04:0c:20:
79:16:a0:c2:3e:e0:70:b9:ee:97:17:1a:af:95:2c:b5:3e:1c:
43:d1:d5:27:cb:60:3e:21:77:2d:ec:e6:18:87:42:e3:59:e6:
56:8b:94:43:eb:e3:ab:a7:13:de:9e:4f:1b:cd:ba:95:69:f6:
1e:2b:ee:18:33:d7:55:b2:71:f4:61:83:fc:ce:65:be:88:e0:
2a:86:43:7a:da:2e:bc:bf:8c:d5:53:2b:13:79:5f:d9:b6:99:
62:11:d6:0f:2e:84:03:6e:24:94:9a:63:c9:ba:54:5b:08:34:
2c:ae:4f:36:bb:3a:50:09:d4:7e:be:8d:32:2c:00:0b:48:da:
f2:fb:13:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3DUPQpgChboZxXkTKSPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2UxMTAzNzc1Nzg1ZDAxMmZjOGRkYWI0YzAyYWMwMzc5
MWI5ZDQwHhcNMjUxMTExMDMwMTEwWhcNMjUxMTEyMDMwMTEwWjAzMTEwLwYDVQQD
Eyg4MmM1NmQxZDAwN2YzMzFmZjZmNjEyMzZmZDRiZjBmZjNkMDBmM2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDA1LctGE6DPLt1u8SoUcsG1OtRV
UgATpXfwUQyC2Fuc3mty6Q7X/inDtSlYVsquh3JmJ3joPnwTbOf5YmEqu00hV1fj
giRzRbVqg86WVXOCmoSRUBSGbuShIu6ZmAOrrGtHhkQAtIklNPzoSPZFW5a4PYqb
3gAcUS7c7RkdBBG2OoFlghVZZcBv9pLgYukkoEtwaZQLAsNL2APeIdR/s88/oPEH
/15knRBKHsWehtNUfB6fjZC04gNGdQnLXfqiPJCh4Q/gYGao9lryNFA6At6Xq4Pl
WOngvij5F5VCEwtwDd1RI+J3zupIlFxg3rL2hP+YjpxHzdiZTSCgPey0owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILFbR0AfzMf9vYSNv1L8P89APOtMB8GA1UdIwQY
MBaAFBN+EQN3V4XQEvyN2rTAKsA3kbnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYt
OGJkY2NjZTVkZmU4LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYtOGJkY2NjZTVkZmU4
LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnogFziGP
xzJ7YirQiDdzxaTLuTia2HI5hHRnJkv2TDECPk5tiEKZU0ygOkJ3Swo6t71MbHXB
A1JixmT42waTzL4b7hZD6zWJ3Cq/VesYMc85A+ncfRT/k9v2vkssd/TqdiBBri8G
ljFE20HuFT5+0sIAbMm/0+BNJQ5cBAwgeRagwj7gcLnulxcar5UstT4cQ9HVJ8tg
PiF3LezmGIdC41nmVouUQ+vjq6cT3p5PG826lWn2HivuGDPXVbJx9GGD/M5lvojg
KoZDetouvL+M1VMrE3lf2baZYhHWDy6EA24klJpjybpUWwg0LK5PNrs6UAnUfr6N
MiwAC0ja8vsTDw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:28:24 2025 by rpki-client