Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
File: mEL3HQwjZ4gu9HCLIGtLbimjezM.mft (raw, json)
Hash identifier: dIoGcL3jIM+mIO0V0FTdqFTsPqmwWwtxxdQvXS+d0QA=
Subject key identifier: 18:29:88:2C:CF:B9:73:5B:57:56:8C:C5:00:3C:84:A3:4C:CE:B2:E4
Authority key identifier: 98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33
Certificate issuer: /CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
Certificate serial: 019A4EF41622E37C77B80FF4CCAEF1F99ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
Manifest number: 13A2
Signing time: Tue 04 Nov 2025 13:00:10 +0000
Manifest this update: Tue 04 Nov 2025 13:00:10 +0000
Manifest next update: Wed 05 Nov 2025 13:00:10 +0000
Files and hashes: 1: mEL3HQwjZ4gu9HCLIGtLbimjezM.crl (hash: XIYF8BJtx0cYNVPpfDop/iEwtMHFfD55KLjEHUhW44o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:16:22:e3:7c:77:b8:0f:f4:cc:ae:f1:f9:9a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
Validity
Not Before: Nov 4 13:00:10 2025 GMT
Not After : Nov 5 13:00:10 2025 GMT
Subject: CN=1829882ccfb9735b57568cc5003c84a34cceb2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:c6:1a:3b:63:b2:30:39:90:78:78:31:b0:
b8:00:88:6f:ab:82:56:57:19:10:a3:6c:44:f3:ab:
1f:46:64:d1:5d:8a:9b:6d:47:22:3a:8a:6d:d2:c2:
ef:6e:49:cf:dc:7b:81:c8:1c:ac:f9:55:74:a2:2d:
80:52:90:30:87:6d:f2:e0:cb:8a:b0:67:6a:13:09:
cd:05:cd:52:ff:b4:9b:41:2f:20:c7:6e:ac:b1:09:
1b:f5:fc:8b:d8:0e:ab:39:cb:90:43:fe:ac:57:6d:
29:8e:f4:b4:c0:a8:31:3c:4d:75:4e:7b:f2:0d:4f:
df:f7:78:84:36:6b:2a:01:23:8b:9e:0d:45:8f:5e:
15:48:b7:1c:4b:f6:f3:3e:79:4f:33:17:2d:21:0d:
47:d1:29:72:08:30:63:a7:bd:aa:cc:02:25:26:6e:
c6:c6:aa:b3:83:3e:d8:57:8c:1e:28:d6:e6:fd:49:
e8:59:25:65:9b:3e:ec:f3:63:45:7e:f3:9c:33:05:
4e:db:f6:16:5f:e1:e7:d5:ee:1d:d5:3e:4c:3c:0a:
44:5e:a2:3a:06:5a:c2:2f:7e:a3:95:b6:92:29:5d:
56:d0:09:04:ce:78:0e:03:3e:58:b0:c8:5f:8f:aa:
64:1d:e4:0b:d0:f5:32:b2:5d:4f:bb:5f:bf:3e:34:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:29:88:2C:CF:B9:73:5B:57:56:8C:C5:00:3C:84:A3:4C:CE:B2:E4
X509v3 Authority Key Identifier:
keyid:98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:47:cd:39:df:49:62:bc:63:bb:97:9a:b3:9c:6b:a0:14:ac:
7e:d0:6d:c7:72:df:05:bb:5c:93:94:47:dc:cb:e5:d7:50:92:
49:16:e4:05:52:e8:5f:8f:d3:a0:fd:85:f9:c1:85:0b:17:39:
4e:7b:f2:af:45:a2:d8:25:ba:a5:cc:99:af:43:c9:58:88:40:
0f:6d:67:4c:d9:6b:a7:2e:92:2a:e0:bd:f7:d8:6d:f5:30:70:
de:c3:4c:13:33:d7:93:3c:85:9c:f2:35:a4:1e:39:dc:3a:27:
9b:89:d2:02:2e:b2:b3:e0:fc:98:f6:39:97:09:de:dd:1d:70:
76:06:78:d5:fe:09:2a:8c:05:40:53:f9:2a:98:4d:1f:e8:34:
00:9e:71:62:d8:59:41:36:fe:06:15:ad:28:56:ee:01:63:1f:
3f:04:f7:5d:6b:42:8b:cf:c8:40:55:31:43:59:26:7c:ad:d7:
9d:63:b2:b3:66:1a:f0:2b:80:0d:80:9a:a7:44:dc:48:30:59:
c4:f4:95:88:87:bc:b2:0c:cd:12:95:f2:5c:01:48:b5:c1:ca:
5e:b1:c4:36:33:0a:fd:4b:bf:73:66:cf:d4:c5:31:d0:df:05:
27:b4:83:27:b5:29:3c:7e:d9:c6:7d:2c:bc:e2:22:f3:00:97:
50:95:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:51 2025 by rpki-client