Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: dlwyVjJTmrRXXLNnQ3xeZc7oG9uyCcxqdQls048WoPM=
Subject key identifier: 5A:5E:C3:F1:9C:EC:68:9F:75:6E:5F:AA:4D:44:CD:1B:B4:D6:3D:0D
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 019A4D06EDF4C061BBF0C94A41F722E81613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 04:01:31 +0000
Manifest this update: Tue 04 Nov 2025 04:01:31 +0000
Manifest next update: Wed 05 Nov 2025 04:01:31 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: 7vcJxv+08lh7WBJ9jarLWgmiyx4BfK1+g8xQ0D7KaL8=)
2: gdCbju7iq0jqbnL3F15jB2y6w9k.roa (hash: 5imVu9OgEC0LpB68Uf/xLlkHKg4D35cIEP4G8Ci0Msk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:ed:f4:c0:61:bb:f0:c9:4a:41:f7:22:e8:16:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Nov 4 04:01:31 2025 GMT
Not After : Nov 5 04:01:31 2025 GMT
Subject: CN=5a5ec3f19cec689f756e5faa4d44cd1bb4d63d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:18:7f:4d:99:a4:7b:f7:d8:e7:26:dc:21:ff:
93:1f:86:3f:5d:8b:0f:51:39:81:42:5b:d9:91:b6:
89:89:c7:12:7c:c9:e0:19:b7:d0:9a:c7:3f:de:16:
3c:96:11:aa:18:51:e0:5f:66:1d:13:ea:8c:0b:f5:
0c:53:a8:6e:d8:ad:09:17:d3:a2:40:64:f8:80:d4:
a6:1e:3d:bd:a3:87:03:ad:a3:78:b4:0c:0c:8b:8e:
ba:e1:c0:b4:a0:c3:16:85:1a:3c:4f:c0:4f:10:4b:
ef:9f:30:1f:33:36:17:ad:c0:40:91:20:cd:d6:68:
02:99:49:7e:4e:b8:c1:b6:54:86:b1:6a:b9:bd:1e:
f5:73:fc:17:c4:1a:88:41:0f:9b:fe:57:8d:84:b1:
cd:e9:35:73:ad:f8:cc:e7:74:5a:d4:e8:70:f3:39:
0e:45:36:e0:b6:a4:ac:17:0b:15:e6:26:54:8c:d1:
4f:f8:98:98:df:fb:68:6c:e8:27:40:04:18:17:4b:
74:3b:fb:99:2b:43:09:78:ce:63:82:30:6f:64:4a:
ba:0a:62:35:66:f0:57:97:32:ff:90:a1:f1:8f:50:
94:ab:41:01:5f:05:05:d8:e5:fb:7b:82:f2:21:d7:
cd:f1:e6:b4:42:97:45:ee:1e:7b:91:32:82:42:d1:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:C3:F1:9C:EC:68:9F:75:6E:5F:AA:4D:44:CD:1B:B4:D6:3D:0D
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a9:cd:74:ce:22:80:67:0f:ca:6d:f4:4d:cc:38:59:6b:9e:
27:c3:26:35:09:d4:b1:49:27:49:8a:8e:29:d9:b6:25:b6:af:
1e:ed:6d:bc:94:7f:20:b1:1b:2c:8c:8f:77:09:ef:02:08:10:
ee:b5:91:61:f8:38:c6:cc:ba:bc:0a:2b:73:ba:80:7f:76:75:
aa:a8:17:6a:9e:cb:8e:7e:8e:bc:df:0f:50:39:df:34:4c:0c:
58:98:c2:2a:23:48:4e:98:b7:a6:ac:47:97:dc:b7:99:3a:a4:
51:75:bb:4b:65:06:84:c3:9b:19:ec:ec:3a:de:01:d7:49:66:
94:e1:2e:fc:99:16:f1:de:b7:5d:a1:6f:72:10:4c:0d:cf:5f:
3d:4f:c8:6d:e1:05:d1:23:0e:8b:e7:e2:12:30:82:cb:7c:fb:
37:c5:cf:50:eb:66:83:a4:38:51:02:69:e6:e7:82:ae:93:12:
d8:fc:4a:f5:a0:1d:16:66:7e:68:de:ff:9b:44:41:30:e0:d1:
b0:f8:00:82:cd:37:ea:d2:6a:6c:c2:e5:52:36:86:c3:d0:54:
cc:b3:8e:4b:b8:97:05:cd:64:d5:8f:ca:f8:c0:d1:aa:4e:39:
d1:ac:91:4a:44:3e:0e:f5:4f:36:75:d5:7a:c8:02:0e:56:9c:
db:82:86:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:29 2025 by rpki-client