Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
File: E6D3FD_6IhE0QtyFie4TUuvj2qM.mft (raw, json)
Hash identifier: KOYDdkJznifKKvtb/qdn0qzJgkmYIeQ4RWstJwJ5atY=
Subject key identifier: 33:4A:34:3D:09:C1:9A:CC:74:07:C3:69:A5:70:9B:35:C8:1B:9A:49
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Certificate issuer: /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial: 019A4EBD3AFC0DCC25081E3C9B0108713390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
Manifest number: 0D73
Signing time: Tue 04 Nov 2025 12:00:15 +0000
Manifest this update: Tue 04 Nov 2025 12:00:15 +0000
Manifest next update: Wed 05 Nov 2025 12:00:15 +0000
Files and hashes: 1: E6D3FD_6IhE0QtyFie4TUuvj2qM.crl (hash: f5u/Zc2usHuLKQ3cYO8oI/KLwbtBG5Zka8x5s+/Gp9k=)
2: U9_szKR8srbhSHiXME0hISvB9zk.roa (hash: Zqb60PKOf5F6hXcN+4+/4uUqXILXd/JHdWXXHL4XlcM=)
3: UHt5Ue5EHvA2-W-Xmt-sxStGQG0.roa (hash: 2fRtxNUH3Aca8LFhSmKgwKn175stfHslO6K/ewoks+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3a:fc:0d:cc:25:08:1e:3c:9b:01:08:71:33:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Validity
Not Before: Nov 4 12:00:15 2025 GMT
Not After : Nov 5 12:00:15 2025 GMT
Subject: CN=334a343d09c19acc7407c369a5709b35c81b9a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:71:87:84:09:12:16:22:c3:59:1b:19:26:
47:6e:62:2a:6b:9a:db:fc:a5:1f:20:e7:0b:c7:89:
ca:af:39:fd:22:13:96:e5:a5:4a:d9:6c:33:b8:39:
c1:2a:29:7b:1a:d8:aa:e2:26:b4:43:16:e1:af:75:
95:ba:12:33:82:2e:cf:6f:96:02:9b:69:71:9e:2c:
66:f5:e1:c9:25:16:cb:a3:4b:28:8c:f6:25:20:57:
94:61:a4:a7:d7:73:f3:7c:bf:67:90:73:53:4c:37:
6f:bf:36:13:3e:84:b5:46:06:b3:d2:ef:92:a7:39:
d3:1b:34:a9:ac:0a:95:53:58:6d:e9:99:54:ff:f5:
44:f9:80:0c:1d:a1:64:0d:b9:25:80:09:b4:76:44:
d1:ef:1a:55:2f:f9:67:87:3b:da:13:d0:f8:6b:23:
a9:4b:f0:19:27:62:68:93:36:42:a7:01:85:61:bc:
35:d5:77:e7:72:d3:e5:93:d4:ce:c7:6b:90:0a:57:
f7:73:71:e7:b9:aa:3d:d6:44:8e:e0:6a:24:78:70:
76:7d:51:e5:bf:c3:2d:1c:18:f7:9c:db:0d:16:66:
dd:3c:62:aa:ed:b8:da:39:c8:70:06:5b:d8:47:5e:
00:a3:8e:4c:61:db:a5:48:74:45:69:6b:1d:04:51:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4A:34:3D:09:C1:9A:CC:74:07:C3:69:A5:70:9B:35:C8:1B:9A:49
X509v3 Authority Key Identifier:
keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:aa:60:e6:0d:cb:86:03:4d:d4:7f:aa:d3:4a:98:66:75:d8:
33:67:44:af:f6:ff:70:8e:f2:12:66:f5:37:84:27:42:54:7d:
e4:cf:2d:74:b8:8c:11:2b:1d:8b:28:40:36:f0:47:f2:e7:71:
8f:c9:54:60:cc:fc:0e:79:0e:04:5f:b1:c9:d4:a0:cf:c3:bd:
a4:6d:ab:dd:16:29:e2:4c:6a:07:b4:8d:e5:ef:f1:2a:ea:e7:
35:4a:02:a9:cf:0d:5c:3b:69:fd:82:47:f8:6c:37:29:fd:0b:
e3:04:43:22:10:63:fd:71:29:98:7a:6b:89:22:56:91:38:0c:
cf:c3:04:8e:51:67:50:ee:12:c2:d4:ec:ff:b4:df:b4:0b:98:
3d:1f:a6:d7:29:59:43:f7:62:4b:6f:e4:41:57:e7:08:31:38:
be:86:ad:5b:48:38:f0:b4:e0:f3:14:36:19:54:f0:f4:f9:c8:
78:1a:e6:65:cb:42:ed:1b:ea:d7:d3:d1:b0:43:f5:44:88:e4:
8f:c6:3c:50:e9:f0:f0:63:47:23:26:a1:3e:9c:00:8e:4f:91:
c8:f2:35:20:2d:0c:5d:6d:f1:a4:10:00:06:8d:85:19:c1:bb:
f1:2d:45:0f:09:59:52:52:b4:23:36:31:95:6e:58:01:b7:98:
65:b9:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:11:46 2025 by rpki-client