Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File: E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier: ZyOIl/RpQiVWKwM558Jju2iUT3hc9JAIfis4AIv2LU4=
Subject key identifier: 70:B8:EE:91:46:9F:5F:1D:37:10:81:3D:C3:70:6C:47:5F:7C:4C:D3
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer: /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial: 019A4DAAC22064485B31D14F4205AF2392F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 07:00:27 +0000
Manifest this update: Tue 04 Nov 2025 07:00:27 +0000
Manifest next update: Wed 05 Nov 2025 07:00:27 +0000
Files and hashes: 1: 8gvSRkioiol7AtclW0w3QDNdRw0.roa (hash: pAF2HpC02c8LxHhm/ivKqiw2U8OBqawxXoZZFN2vllM=)
2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: gku74dJ/3OXN0w+ehilnZE+F5gTQgCMwW+tZvP91ACw=)
3: VqJZEln3bccahadYDW0ePgV1gdw.roa (hash: CgpHiF36vVgykBJlcL4O9MnI1LRoTpD9E00VJ7RhYwg=)
4: wQk6P3JazTtfJ7Qbak1iF7pmDzU.roa (hash: yyhyj8+uWZT4ObCsZinsPoUAt/nN+0r3AmItPKtF2y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:c2:20:64:48:5b:31:d1:4f:42:05:af:23:92:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
Validity
Not Before: Nov 4 07:00:27 2025 GMT
Not After : Nov 5 07:00:27 2025 GMT
Subject: CN=70b8ee91469f5f1d3710813dc3706c475f7c4cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:35:97:ea:04:92:4e:ec:24:e1:5b:36:45:
30:b3:fc:89:d1:74:3e:52:11:0a:d8:89:fd:80:2a:
6d:64:6f:8a:fd:c4:e9:42:7f:40:dc:1c:1d:ee:02:
94:f8:a4:70:99:87:be:35:58:26:35:a7:03:fe:20:
4e:f7:0b:da:eb:64:fc:5c:18:ad:c9:af:71:a3:25:
f7:af:12:3b:d7:55:02:a3:26:ed:04:f6:bf:66:1f:
de:0e:a2:4c:b4:3f:04:a9:fc:c6:fc:17:1b:07:01:
f3:fb:e4:62:91:f9:57:28:99:c2:4b:77:75:aa:8e:
b3:c6:ef:f1:55:84:be:3a:67:54:81:c3:ac:8a:ac:
ce:13:91:f3:f6:0f:40:49:d1:3e:f9:9d:6b:56:a4:
93:9a:43:d2:01:03:07:02:fb:92:16:f9:a6:34:96:
58:d9:7c:5f:ff:81:6a:f1:fc:b1:4b:ae:ca:86:86:
14:62:dc:62:78:f1:ac:40:e9:06:0c:88:6b:96:d0:
51:5d:a9:18:57:0e:9c:b6:28:d4:2a:22:2b:3a:46:
20:4e:57:37:f1:3d:4b:9a:bd:0c:d5:91:02:62:1d:
74:5b:b1:a3:39:d8:1e:d3:64:d5:ef:d8:05:25:51:
e8:96:bb:e4:74:ea:22:6b:63:71:7b:6c:16:3b:aa:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B8:EE:91:46:9F:5F:1D:37:10:81:3D:C3:70:6C:47:5F:7C:4C:D3
X509v3 Authority Key Identifier:
keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:72:bf:5a:73:cf:cb:7e:1b:68:3e:c1:12:d8:8b:35:2d:aa:
ae:d9:16:8a:35:8e:6b:83:f0:db:91:f9:92:db:43:6a:59:c2:
45:bf:3b:b1:d5:7c:f7:f6:29:ce:97:c4:2d:99:3e:c8:70:ac:
0d:6d:96:15:ab:42:af:92:c0:0a:a4:df:c1:99:a7:b9:20:d5:
79:88:40:99:04:70:95:62:0d:9b:0f:0f:75:5a:f7:4c:e3:7a:
3b:03:fa:b8:92:04:d9:46:65:c4:d2:02:02:ca:97:17:39:b0:
be:db:c6:55:f9:71:7b:45:55:81:f6:1d:c7:66:15:f5:fa:be:
0b:47:30:14:27:d2:39:12:0e:28:dd:35:cc:35:de:2c:04:37:
60:e9:37:9b:af:82:49:3a:2c:f3:c1:75:e5:95:ee:82:a4:b1:
22:9e:ac:43:6b:b4:7f:e2:a5:85:6f:2a:92:95:1b:19:30:f5:
58:79:fc:6e:3f:22:c6:22:53:cc:f3:c9:6b:67:f0:60:c4:bf:
f4:c6:5c:7a:e2:22:7a:eb:0a:84:3f:a9:31:16:3d:d4:d0:32:
79:66:4a:2a:6b:b6:d1:10:c2:97:c2:c9:ce:8a:ff:8b:e9:12:
af:d8:c5:fa:c7:61:8a:18:7d:9d:24:74:19:3a:62:b8:a9:01:
cc:92:7c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:49 2025 by rpki-client