Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
File: e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft (raw, json)
Hash identifier: X6/o1QMCxBoI8HkOUPejWOKvLTN5loWyyV1p5nl45L0=
Subject key identifier: AF:E6:DB:1D:D9:C6:FA:FC:D2:76:CD:EE:79:21:D5:EE:4B:1B:9E:3E
Authority key identifier: 7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69
Certificate issuer: /CN=7b7873f89c2a985327ea7996267423a7751c6169
Certificate serial: 019A52D1CDB2A9A8BF4E49F9CD96628E99E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 07:01:12 +0000
Manifest this update: Wed 05 Nov 2025 07:01:12 +0000
Manifest next update: Thu 06 Nov 2025 07:01:12 +0000
Files and hashes: 1: e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl (hash: AQlDpjrdbIL0vIACYTSFa3Uj2c6WA9yJ4F95vKdULHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:cd:b2:a9:a8:bf:4e:49:f9:cd:96:62:8e:99:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7873f89c2a985327ea7996267423a7751c6169
Validity
Not Before: Nov 5 07:01:12 2025 GMT
Not After : Nov 6 07:01:12 2025 GMT
Subject: CN=afe6db1dd9c6fafcd276cdee7921d5ee4b1b9e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:ce:d5:9a:c7:d4:3f:f7:4c:80:f9:67:a8:
c0:0a:14:5c:c0:fb:97:3c:a2:c5:34:64:5c:f5:25:
25:66:f0:3b:c6:be:f1:d1:45:ee:ab:da:68:7f:74:
f7:ea:87:8c:45:6b:82:ac:97:37:b1:28:02:2f:1f:
80:9c:de:8b:0d:7d:0d:55:a1:da:8b:47:cb:9f:8a:
22:74:8a:4c:38:37:60:11:6e:46:4d:5e:cf:b8:36:
89:95:fa:bf:c8:ec:0f:79:46:e1:a0:54:a0:19:10:
4b:97:de:32:67:91:f7:f8:61:fd:79:60:42:5b:0a:
af:00:73:7e:a1:cf:67:d3:29:bd:b8:7e:b1:8a:25:
1e:35:55:62:5f:8f:98:b9:68:53:63:e9:c4:d5:c5:
9a:c3:ec:5b:53:af:18:dd:f7:59:33:43:a6:54:14:
c7:48:05:4d:9a:86:8b:b3:92:4c:cd:93:c3:f6:6b:
79:72:6b:13:0f:0d:99:32:1c:2d:43:e0:f1:0f:6b:
db:de:5e:10:d1:f8:53:a5:9b:32:8b:a8:e1:04:53:
f3:dd:8d:0b:62:ba:78:38:31:d5:c1:b3:36:a0:ab:
3e:7d:b7:d6:bb:99:8c:a6:e3:ce:f9:0f:4f:f3:86:
5d:5d:9c:b1:54:0d:0a:f2:f1:2e:9c:96:71:59:d7:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E6:DB:1D:D9:C6:FA:FC:D2:76:CD:EE:79:21:D5:EE:4B:1B:9E:3E
X509v3 Authority Key Identifier:
keyid:7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:85:9c:c2:84:1e:fd:3d:12:4d:ec:f3:ae:82:f4:08:ed:b5:
79:79:ca:d2:e8:b1:2e:0a:fc:01:c7:23:6d:ec:46:7a:a2:81:
8f:60:ea:af:64:ac:14:02:f5:da:c5:d4:74:b5:7e:fc:9c:3c:
41:f6:c4:e7:2e:f5:37:d7:57:c5:1d:60:5e:64:80:72:ac:4b:
cf:9c:2d:e4:af:c6:b9:14:5a:c2:45:eb:c9:99:64:3f:1a:d0:
0b:23:e0:4d:9f:23:1f:51:84:d1:1a:5c:62:00:f7:cb:fa:cb:
24:2a:3f:89:67:1d:94:e9:de:3f:b8:e3:96:f4:2d:8b:c0:de:
16:f9:56:31:cd:04:f3:d3:91:48:a9:19:f2:e1:c0:6f:6b:16:
23:cc:10:b6:1d:c7:b8:1e:20:0a:af:70:56:18:3b:f0:32:3d:
cc:0a:0b:4c:48:5e:ad:75:bb:1d:1a:59:40:c3:26:81:e7:26:
1d:78:ac:b9:dc:31:74:2f:c5:0a:00:70:92:f3:2e:75:f8:5b:
a1:d5:7a:e0:69:1b:77:cb:09:a5:5f:fd:18:20:7c:29:e0:1b:
81:34:ff:e7:62:f6:59:dc:7b:18:03:10:96:e3:ac:69:33:78:
af:c4:46:ab:ed:9f:fd:6f:c3:c3:92:d1:5a:50:b3:75:c2:ab:
fd:35:b1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:39 2025 by rpki-client