Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
File: _e3ZOtbKqmCtSfD5N32Kq_h34ts.mft (raw, json)
Hash identifier: 0u8ZSTEIwXD7s1jeSt5aSWSujHSuH6c8hlKnnW5MWUQ=
Subject key identifier: 89:C5:B7:78:31:0D:5A:F2:A1:A6:FE:34:19:0B:95:25:8C:62:B5:FD
Authority key identifier: FD:ED:D9:3A:D6:CA:AA:60:AD:49:F0:F9:37:7D:8A:AB:F8:77:E2:DB
Certificate issuer: /CN=fdedd93ad6caaa60ad49f0f9377d8aabf877e2db
Certificate serial: 019A4EF570F48DE5550F72DA2CC80FEC060A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
Manifest number: 088C
Signing time: Tue 04 Nov 2025 13:01:39 +0000
Manifest this update: Tue 04 Nov 2025 13:01:39 +0000
Manifest next update: Wed 05 Nov 2025 13:01:39 +0000
Files and hashes: 1: _e3ZOtbKqmCtSfD5N32Kq_h34ts.crl (hash: o09dJnYwO03fZl1HA2dJm0XnPp1Ib5IGKnkZMXSbmFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:70:f4:8d:e5:55:0f:72:da:2c:c8:0f:ec:06:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdedd93ad6caaa60ad49f0f9377d8aabf877e2db
Validity
Not Before: Nov 4 13:01:39 2025 GMT
Not After : Nov 5 13:01:39 2025 GMT
Subject: CN=89c5b778310d5af2a1a6fe34190b95258c62b5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:10:8d:cc:19:37:c5:ca:10:6c:cc:5b:ff:c3:
6b:78:37:35:df:ff:7d:24:b3:2a:65:0f:f7:cd:52:
c1:7c:ea:1b:9b:9c:21:10:e3:bb:17:0f:00:23:88:
20:1b:05:4f:4f:02:cb:54:91:bd:af:a0:2c:77:7d:
c0:8a:f7:42:5d:55:05:43:1c:cb:56:16:cf:4e:66:
1b:02:b8:b2:24:52:68:8b:d3:fc:3d:79:83:d2:ee:
89:23:29:19:fb:e1:d5:fe:7f:ad:33:78:1f:17:32:
68:c3:a5:ed:a1:75:83:44:db:6e:e0:62:7e:e8:63:
4f:23:81:29:08:98:b8:26:27:00:5e:a3:34:0b:54:
76:a1:6d:20:fa:ae:50:3d:32:8d:6c:58:6e:ed:11:
39:e3:68:b9:83:19:90:ac:98:7d:2a:2b:bb:04:ba:
d0:97:60:d9:d2:f3:0e:52:34:dc:80:ab:ec:fb:5e:
61:4c:c2:83:e6:21:4d:43:62:b5:1d:df:c4:32:0f:
ba:21:5f:0e:72:27:5f:f4:0c:4e:52:24:c6:f9:4a:
25:ef:03:78:b8:ac:0f:2c:f1:f1:a4:fb:dc:e9:35:
a7:87:88:ae:82:20:2e:0e:19:33:26:bc:b1:c2:03:
fb:e7:ee:b9:24:fd:7b:60:7b:57:55:91:76:9d:e5:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C5:B7:78:31:0D:5A:F2:A1:A6:FE:34:19:0B:95:25:8C:62:B5:FD
X509v3 Authority Key Identifier:
keyid:FD:ED:D9:3A:D6:CA:AA:60:AD:49:F0:F9:37:7D:8A:AB:F8:77:E2:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:96:1f:fa:2d:22:8f:bd:94:7d:d6:40:a4:59:4d:6b:4b:5c:
ac:a5:40:33:14:52:49:a8:3e:34:fd:91:5a:e1:1a:d7:bd:8a:
0c:ad:85:bd:b7:a6:ca:9e:a9:a7:8e:3f:b7:ae:d2:53:88:4a:
7c:78:a2:14:fa:8d:77:76:90:21:7b:4a:75:ed:d8:b2:08:c0:
7c:6c:5d:0c:4a:0a:39:4e:08:b2:c1:72:48:f1:54:fc:0a:6b:
87:08:db:95:7b:92:1f:1f:c5:e0:39:d2:95:95:f9:a2:3f:61:
d8:b6:66:47:ab:02:39:bd:4f:c1:ef:43:de:a1:35:7b:25:b7:
4c:6c:a2:8b:b4:73:92:c7:89:77:f9:db:d1:27:07:32:2e:09:
46:0c:06:47:fa:30:c7:d1:47:50:c2:91:f0:46:30:0a:79:1e:
a3:e7:17:7b:41:ba:cf:60:b3:b9:25:7a:29:21:c9:86:a1:a8:
7c:cc:a4:0e:27:88:b8:9b:7c:e5:c0:5a:bb:4c:17:db:2b:23:
ce:61:e0:3d:13:99:ff:7a:47:24:ab:f4:0c:c2:2c:ba:88:4d:
ef:fd:1a:64:24:2f:74:c6:23:3d:70:5e:84:27:68:63:74:1c:
2e:bd:3b:b4:9c:07:a5:61:86:4a:e7:9b:fa:36:bc:89:d4:d8:
6b:99:98:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:11 2025 by rpki-client