Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
File: E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json)
Hash identifier: JTd4CS3St+wvkSLaI76HFAfQyEEqUusbAASmZK0I2jM=
Subject key identifier: 43:DC:3A:01:60:AE:4E:6A:4B:AF:D1:F0:9F:5E:37:3B:79:FD:BA:D4
Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35
Certificate serial: 019A5119A1C7140B365357355EFF73CD3301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
Manifest number: 1667
Signing time: Tue 04 Nov 2025 23:00:25 +0000
Manifest this update: Tue 04 Nov 2025 23:00:25 +0000
Manifest next update: Wed 05 Nov 2025 23:00:25 +0000
Files and hashes: 1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: +cnFGa7UTKeuS08JQH8mTALk9Lm3uavFM6L8yyWcNak=)
2: pPGln_tGe3Wb0dePm4ie5BM7xaM.roa (hash: e7lXmv0/qA8zwcIJTP+HZzZQ8eseEaVWqcUevE7q2Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:a1:c7:14:0b:36:53:57:35:5e:ff:73:cd:33:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35
Validity
Not Before: Nov 4 23:00:25 2025 GMT
Not After : Nov 5 23:00:25 2025 GMT
Subject: CN=43dc3a0160ae4e6a4bafd1f09f5e373b79fdbad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:76:2c:42:10:e8:f5:2d:49:08:7a:23:bc:
b8:c3:eb:8b:b7:5e:f5:96:0b:eb:aa:e2:0a:eb:ab:
a7:23:1e:56:be:3c:7e:20:85:73:9f:6b:c4:14:be:
e8:3b:6b:5e:69:04:2d:21:92:b9:29:c6:d3:8c:c5:
b3:86:55:bf:05:49:78:8a:98:b5:a2:80:b6:53:9d:
4a:92:4c:e7:c0:fb:09:cf:20:6b:b3:eb:51:c4:c6:
a1:dd:bd:23:29:5a:fb:b0:04:e2:bd:62:07:b1:eb:
70:64:bf:1d:3a:b0:a5:bd:d7:31:0e:e1:fd:cf:5e:
a2:4f:92:26:72:55:33:2d:47:9f:65:49:61:f6:b4:
ec:ce:ee:72:6c:b9:27:87:2d:34:89:09:25:39:41:
23:9c:73:ca:7b:2d:87:a2:2b:c8:9b:79:52:ed:c2:
6c:f7:32:f0:a2:d3:a5:b1:0f:1b:44:60:f9:b6:df:
80:c7:92:5e:87:25:da:98:5a:58:8d:1b:b0:8e:ad:
de:b3:4b:18:3a:87:bb:e7:e2:e6:e1:15:95:b2:fb:
65:0f:ba:a2:38:04:e2:83:7b:b6:22:1d:60:40:69:
44:00:e4:97:51:ed:65:41:c8:6e:4b:61:d0:43:67:
a9:d4:19:71:ed:23:24:0c:36:c0:5e:28:8d:5d:e1:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DC:3A:01:60:AE:4E:6A:4B:AF:D1:F0:9F:5E:37:3B:79:FD:BA:D4
X509v3 Authority Key Identifier:
keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bd:ad:aa:3a:4c:e2:1b:83:32:1b:f9:eb:e4:1f:d9:9f:eb:
c8:62:33:30:98:3a:42:c6:e7:5b:bd:be:0f:30:e5:be:40:e8:
46:e8:7b:6d:3a:ab:ca:d2:d1:9b:7b:bf:d1:fe:39:99:9d:dc:
c1:af:0b:88:17:59:13:e9:fe:0d:66:be:32:c0:30:b0:89:b3:
0f:f7:41:bd:6f:d5:31:a6:b8:ff:45:a3:c6:c7:97:41:de:9f:
41:da:57:e5:f4:66:c0:77:85:95:d9:5c:c6:2e:bd:c9:02:78:
3f:ea:b4:3c:4d:0a:69:4d:ef:4d:7a:b1:58:23:b8:df:2c:e7:
ed:a2:9d:ad:e4:26:cc:83:b7:9f:ba:45:6b:d2:08:55:93:3b:
54:5a:de:a1:39:94:c5:93:03:9d:75:78:18:9b:ac:ee:54:76:
16:2d:3f:04:b2:1b:8f:cf:43:22:bf:60:59:59:0a:1a:76:ad:
7d:96:c4:55:87:ea:9f:1a:49:a1:1e:0f:b1:d4:6e:44:c5:e6:
da:14:92:da:6a:0a:c1:00:a0:a6:da:f0:cc:29:5f:c3:98:a5:
ef:bf:c0:6e:4d:b8:0d:16:e4:5c:e0:fe:10:39:ab:26:93:11:
eb:e7:7d:81:56:22:61:35:38:03:e4:ce:46:11:80:18:37:d1:
93:bf:1f:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGaHHFAs2U1c1Xv9zzTMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2YyMzk0NGUzZDc4ZGE5MjAwNTVkNzJjNzRkMDJiZTU0
NTVmMzUwHhcNMjUxMTA0MjMwMDI1WhcNMjUxMTA1MjMwMDI1WjAzMTEwLwYDVQQD
Eyg0M2RjM2EwMTYwYWU0ZTZhNGJhZmQxZjA5ZjVlMzczYjc5ZmRiYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfJ2LEIQ6PUtSQh6I7y4w+uLt171
lgvrquIK66unIx5Wvjx+IIVzn2vEFL7oO2teaQQtIZK5KcbTjMWzhlW/BUl4ipi1
ooC2U51KkkznwPsJzyBrs+tRxMah3b0jKVr7sATivWIHsetwZL8dOrClvdcxDuH9
z16iT5ImclUzLUefZUlh9rTszu5ybLknhy00iQklOUEjnHPKey2HoivIm3lS7cJs
9zLwotOlsQ8bRGD5tt+Ax5JehyXamFpYjRuwjq3es0sYOoe75+Lm4RWVsvtlD7qi
OATig3u2Ih1gQGlEAOSXUe1lQchuS2HQQ2ep1Blx7SMkDDbAXiiNXeFwfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPcOgFgrk5qS6/R8J9eNzt5/brUMB8GA1UdIwQY
MBaAFBN/I5ROPXjakgBV1yx00CvlRV81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEt
NDA3YWY4OWFkOGU5LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEtNDA3YWY4OWFkOGU5
LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPr2tqjpM
4huDMhv56+Qf2Z/ryGIzMJg6QsbnW72+DzDlvkDoRuh7bTqrytLRm3u/0f45mZ3c
wa8LiBdZE+n+DWa+MsAwsImzD/dBvW/VMaa4/0WjxseXQd6fQdpX5fRmwHeFldlc
xi69yQJ4P+q0PE0KaU3vTXqxWCO43yzn7aKdreQmzIO3n7pFa9IIVZM7VFreoTmU
xZMDnXV4GJus7lR2Fi0/BLIbj89DIr9gWVkKGnatfZbEVYfqnxpJoR4PsdRuRMXm
2hSS2moKwQCgptrwzClfw5il77/Abk24DRbkXOD+EDmrJpMR6+d9gVYiYTU4A+TO
RhGAGDfRk78fEg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:54 2025 by rpki-client