Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File: E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier: 6PpaUJWazNwttRoNXdpwvzrwEgXx1DM9jBGcVlcXcCo=
Subject key identifier: 14:82:89:DB:7C:A8:61:2D:42:E0:27:66:B1:BC:3F:F9:3A:DE:AD:C0
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial: 019A54BFE2AAF28C47FE5885A3D130DE8A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number: 1079
Signing time: Wed 05 Nov 2025 16:00:52 +0000
Manifest this update: Wed 05 Nov 2025 16:00:52 +0000
Manifest next update: Thu 06 Nov 2025 16:00:52 +0000
Files and hashes: 1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: X/TICfj1zR1sKjwVBb40FRv0Jbgbxf4CAFHdel63bac=)
2: o33nzDd8Ud4SHUROSKPBqYvsK3I.roa (hash: 0uR5NTZUtirBbDZZiV+z6XYeVClsGx8GOL6f3pU8rh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:e2:aa:f2:8c:47:fe:58:85:a3:d1:30:de:8a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Validity
Not Before: Nov 5 16:00:52 2025 GMT
Not After : Nov 6 16:00:52 2025 GMT
Subject: CN=148289db7ca8612d42e02766b1bc3ff93adeadc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:c1:57:22:9f:8e:09:ee:74:aa:d7:b4:88:
58:12:cd:28:c8:97:57:9c:8c:ee:6b:7f:22:7d:d7:
1d:c6:be:8d:c0:24:8b:fd:18:e9:91:fa:bc:49:30:
78:30:37:48:12:1c:eb:f7:4e:0b:4e:69:89:1a:b6:
1c:e3:64:1f:5b:0f:4e:5d:0b:5f:ec:1c:fc:aa:22:
65:2d:f0:aa:91:10:a8:ff:38:c9:83:cf:c2:f2:84:
ac:53:a6:7a:4a:79:bf:bb:87:48:56:da:a7:70:f0:
85:52:b5:cf:29:e0:9b:05:57:1e:0e:2b:e0:6c:39:
45:37:8a:03:9f:9c:56:98:55:64:cf:5e:ed:79:1b:
79:a1:91:06:7a:06:fd:a8:57:b0:06:84:d7:e6:ac:
6f:45:13:71:a3:c1:dc:65:7d:1b:bf:21:78:5c:9c:
54:1a:9f:23:f8:c2:a2:69:2b:80:01:6a:c5:0d:67:
2e:ca:a2:62:2d:5d:1e:91:8d:00:76:2d:bd:ca:e4:
1a:39:7a:10:7a:38:46:c7:fb:1c:55:61:a9:8d:0b:
1d:95:52:f5:82:32:f5:2b:a6:f1:1c:69:72:ef:b8:
9f:b4:10:9a:a2:b5:9a:61:d7:50:8f:0d:4b:bb:5e:
20:4a:39:08:65:07:eb:cd:b0:72:07:f6:17:72:8f:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:82:89:DB:7C:A8:61:2D:42:E0:27:66:B1:BC:3F:F9:3A:DE:AD:C0
X509v3 Authority Key Identifier:
keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f1:23:6f:4f:a3:7b:bd:fd:c0:40:d5:e4:e1:60:43:91:89:
62:fe:3c:a5:71:62:d8:e1:ff:25:e1:00:f9:7c:d2:bb:d4:b2:
ee:55:53:e2:eb:36:89:2c:70:9f:4a:ea:65:f2:73:0f:ab:2b:
81:92:c1:95:08:61:58:81:33:86:db:bf:cb:f4:d5:f1:56:16:
ab:9d:a9:6f:f1:ed:5b:45:c3:29:07:01:9f:2a:37:9f:ba:0f:
8d:ce:af:29:08:52:c1:36:52:79:84:73:a8:57:a8:6f:1c:31:
bd:46:46:71:de:e2:23:68:01:4c:10:23:de:5f:7a:8a:51:b2:
0e:40:22:11:c2:6d:35:76:3b:80:f2:78:23:ba:a0:29:0c:3b:
48:9b:fc:50:05:8a:83:04:39:64:3f:2f:33:dd:77:74:d3:62:
b2:f9:6e:a9:91:d1:e8:68:77:5d:40:39:ff:16:28:fc:39:2f:
b3:50:a8:41:b1:75:2f:ba:0d:d9:ed:ef:fd:d7:b8:11:c0:c1:
b0:21:89:8d:7b:2f:c6:63:f0:42:dd:23:34:4d:46:6e:d9:20:
de:7b:56:e7:96:ba:5d:4d:12:64:a5:2a:e9:26:51:10:0c:bc:
a3:15:c2:2d:3f:d7:cb:19:dd:44:5c:c4:88:0a:55:86:93:d1:
9e:64:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:03:26 2025 by rpki-client