Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier: ARA+HpLi+FelHJ8WKYej1QtSnuORRfVxvBMVfzVODDU=
Subject key identifier: 63:FB:06:AB:0E:EB:60:2A:3E:01:7C:CB:23:B0:A7:34:3A:46:32:1A
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer: /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial: 019A4DE206058B27CC71F32ACFCE881F7044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number: 068E
Signing time: Tue 04 Nov 2025 08:00:49 +0000
Manifest this update: Tue 04 Nov 2025 08:00:49 +0000
Manifest next update: Wed 05 Nov 2025 08:00:49 +0000
Files and hashes: 1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: VIKI7qHHVcaZfXz4IJv3rrNQhc9fn869xf2vqxu5lMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:06:05:8b:27:cc:71:f3:2a:cf:ce:88:1f:70:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Validity
Not Before: Nov 4 08:00:49 2025 GMT
Not After : Nov 5 08:00:49 2025 GMT
Subject: CN=63fb06ab0eeb602a3e017ccb23b0a7343a46321a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:78:0d:6b:b0:42:02:e4:7c:70:03:38:27:
6b:9c:d3:1c:d5:91:8d:ff:8a:d0:26:2c:f1:43:3d:
ee:bf:40:b5:b1:20:d6:d4:30:98:f5:d1:da:02:10:
d5:1d:92:5a:92:05:d1:df:8f:05:33:98:94:bb:2b:
eb:3b:bf:e6:e7:80:3b:5d:ba:00:4e:cd:3a:03:79:
0d:16:bc:aa:7d:08:91:6d:2f:c6:f0:de:2b:cf:f0:
7e:ff:0b:16:0a:01:12:36:87:85:5e:36:cb:14:16:
7a:8c:54:25:20:1e:cd:71:c4:d6:94:34:3d:ce:ff:
5d:84:cc:72:00:ed:7c:c1:58:8f:f0:21:38:ad:69:
57:2a:5d:60:8b:65:76:ea:0a:d8:ec:a3:ec:e6:21:
9f:43:61:5b:15:c7:26:53:7c:67:23:19:d6:53:7f:
5d:a6:8a:df:bc:d2:62:c7:7d:45:0f:76:35:06:f6:
16:dc:b2:56:37:1b:3b:d3:8b:c5:e2:f4:5a:1f:5d:
17:10:b3:c1:fe:b1:69:4a:f6:81:f4:e8:83:ab:80:
b8:4f:90:79:f1:e4:2c:e8:f5:25:ef:4a:69:c3:17:
21:8b:0d:47:1f:e0:18:23:5e:0f:24:d9:b8:e6:c5:
c7:83:f0:57:c7:5f:65:93:42:9d:97:3a:36:84:f6:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FB:06:AB:0E:EB:60:2A:3E:01:7C:CB:23:B0:A7:34:3A:46:32:1A
X509v3 Authority Key Identifier:
keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5e:79:a3:ba:d2:3d:c7:32:c6:89:28:b3:04:d7:4a:87:17:
1c:ce:99:b4:30:5a:08:23:ed:41:c5:04:3c:f4:0d:85:d6:07:
2c:23:b2:19:88:f0:e0:f0:7f:2b:b0:13:b6:3c:80:88:f7:85:
58:6f:de:fa:3c:90:1b:1d:6f:c1:7a:66:db:ba:36:d1:08:f0:
31:06:13:bb:4b:71:1c:7c:cb:1f:4c:6a:7f:0c:66:3a:5d:96:
2c:77:9a:6a:6e:9e:81:4f:a3:e5:1e:c5:36:17:e2:55:73:c5:
cc:db:7e:13:76:43:e7:be:01:a5:d9:0a:9b:2e:e9:98:12:e7:
4d:03:0a:a6:7c:9d:1b:6e:57:b8:d4:6e:ac:0c:33:9a:08:5f:
01:0d:5a:d7:fb:57:44:35:58:ec:c5:1d:b0:e0:1d:68:cd:8e:
66:6c:71:67:23:30:7c:4e:2b:ad:16:af:98:2b:e8:7d:15:34:
39:bc:82:a1:93:cb:da:8c:ae:74:bd:c7:f5:ce:f6:6a:6d:7a:
9a:45:c0:1a:27:86:c6:16:6e:82:b3:12:a1:93:34:32:84:11:
b5:7b:62:fe:57:b2:7a:2a:a7:9f:ce:56:db:58:e7:01:7b:ae:
61:69:94:80:9d:e7:89:6e:97:f4:4a:3e:ee:03:60:79:cf:78:
95:55:b5:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4gYFiyfMcfMqz86IH3BEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzQzZDMwN2E4YjcyYWM1MzJmNGNkODgzZjBjOTQyYmFk
MGY0YmUwHhcNMjUxMTA0MDgwMDQ5WhcNMjUxMTA1MDgwMDQ5WjAzMTEwLwYDVQQD
Eyg2M2ZiMDZhYjBlZWI2MDJhM2UwMTdjY2IyM2IwYTczNDNhNDYzMjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEF4DWuwQgLkfHADOCdrnNMc1ZGN
/4rQJizxQz3uv0C1sSDW1DCY9dHaAhDVHZJakgXR348FM5iUuyvrO7/m54A7XboA
Ts06A3kNFryqfQiRbS/G8N4rz/B+/wsWCgESNoeFXjbLFBZ6jFQlIB7NccTWlDQ9
zv9dhMxyAO18wViP8CE4rWlXKl1gi2V26grY7KPs5iGfQ2FbFccmU3xnIxnWU39d
porfvNJix31FD3Y1BvYW3LJWNxs704vF4vRaH10XELPB/rFpSvaB9OiDq4C4T5B5
8eQs6PUl70ppwxchiw1HH+AYI14PJNm45sXHg/BXx19lk0Kdlzo2hPb5EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGP7BqsO62AqPgF8yyOwpzQ6RjIaMB8GA1UdIwQY
MBaAFBN0PTB6i3KsUy9M2IPwyUK60PS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83ZTE1YzgtOTYzMS00ODM3LWEwNWQt
NDc3ZDFlOWE0MGI4LzEvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC83ZTE1YzgtOTYzMS00ODM3LWEwNWQtNDc3ZDFlOWE0MGI4
LzEvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnF55o7rS
PccyxokoswTXSocXHM6ZtDBaCCPtQcUEPPQNhdYHLCOyGYjw4PB/K7ATtjyAiPeF
WG/e+jyQGx1vwXpm27o20QjwMQYTu0txHHzLH0xqfwxmOl2WLHeaam6egU+j5R7F
NhfiVXPFzNt+E3ZD574BpdkKmy7pmBLnTQMKpnydG25XuNRurAwzmghfAQ1a1/tX
RDVY7MUdsOAdaM2OZmxxZyMwfE4rrRavmCvofRU0ObyCoZPL2oyudL3H9c72am16
mkXAGieGxhZugrMSoZM0MoQRtXti/leyeiqnn85W21jnAXuuYWmUgJ3niW6X9Eo+
7gNgec94lVW12w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:32 2025 by rpki-client