Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File: E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier: XBTbexiAOKTnGS5v1LWqRZNrwu0Rp9lmb/nsvaECs4k=
Subject key identifier: B0:ED:0C:A5:BE:D8:C8:5D:94:83:23:3E:87:06:B0:71:24:92:4D:10
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 019A4DE22838EA18E04EB3014B6ED8C2EBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:58 +0000
Manifest this update: Tue 04 Nov 2025 08:00:58 +0000
Manifest next update: Wed 05 Nov 2025 08:00:58 +0000
Files and hashes: 1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: kkuSoFEA9VWYMIDLgaVleiioYwIjD230ijQvwY05WMc=)
2: GRNWR16Ds5mVAEzQkJ8f4EpHdoA.roa (hash: OkjXTbnHRtbFuWzt8SkmqNTl7djjfQ2D/Z/mnZbORFo=)
3: mp_GHNV3oXauSfYTml7M5-B_SzE.roa (hash: o6TxNWrAQ4DmV0/jzWqCauUXKEHG2x6UUHTMIwvWqGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:28:38:ea:18:e0:4e:b3:01:4b:6e:d8:c2:eb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Nov 4 08:00:58 2025 GMT
Not After : Nov 5 08:00:58 2025 GMT
Subject: CN=b0ed0ca5bed8c85d9483233e8706b07124924d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:cb:7b:91:f2:1f:29:5f:52:17:b3:97:60:
86:0d:98:4c:1b:eb:c4:a7:39:42:9f:dc:8a:2f:90:
05:c5:92:1f:db:3b:ea:8b:2a:ce:d5:d8:c8:21:cc:
d5:12:2d:5c:22:96:01:ed:5a:8b:0a:7e:2c:85:36:
17:7d:fa:ec:ea:5e:9c:ce:a3:bc:a9:82:8d:8a:d9:
b6:03:d6:cb:31:68:d3:5c:09:e0:e0:4e:9f:37:43:
1d:c1:c5:f2:8e:fa:a7:98:db:b8:bd:d6:88:eb:50:
92:eb:4c:68:f7:d0:63:95:78:39:9c:13:e5:73:16:
cf:4f:8a:88:09:a2:a0:4f:4f:35:8d:9f:91:07:ca:
6f:85:a3:d0:76:86:46:bc:3b:93:4a:31:b3:7e:85:
8e:7e:6b:5a:66:89:98:54:83:15:23:a2:2e:22:52:
d2:e8:b2:3a:0c:32:4b:4f:cc:41:6b:da:cb:90:46:
7a:19:4f:ec:4c:20:76:ed:b2:1e:fc:e3:96:39:b8:
a3:19:fa:d1:68:87:a0:d7:b1:1c:83:77:e2:4a:b5:
d9:de:da:a6:d9:b6:8e:be:50:a4:74:cc:89:4d:da:
97:ab:03:68:a0:1b:2f:a2:74:2b:61:65:33:81:69:
37:2e:58:fe:fa:ec:55:7e:7b:23:c9:ed:58:da:5a:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:ED:0C:A5:BE:D8:C8:5D:94:83:23:3E:87:06:B0:71:24:92:4D:10
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:71:f5:da:86:2e:48:89:bc:d4:53:96:a1:e0:82:9c:fd:80:
b4:9a:c5:6d:a7:f5:0b:03:0b:e1:12:0e:54:b4:21:e3:1e:ff:
f7:10:0a:0e:2e:06:bd:af:23:cc:69:19:85:33:c8:bc:90:61:
ab:4f:f7:4d:12:83:06:d8:b7:c5:98:3f:ba:c7:2f:ee:d1:70:
08:1b:1f:89:d2:25:e6:d4:e8:8f:48:3a:11:c5:32:8f:71:65:
a1:4d:69:03:6f:c5:78:95:5a:c5:aa:c9:28:65:9f:21:d7:70:
de:37:36:8a:09:9f:84:be:6f:2b:a6:e3:f9:9c:70:c9:ec:e1:
5d:68:c1:20:92:fa:da:e8:30:9a:81:2f:ef:8d:77:14:fc:a7:
44:06:c0:42:84:ea:cf:2b:dd:b9:ab:3e:bc:55:22:e2:2a:83:
07:e7:b0:8c:e6:80:f0:4d:b5:37:8f:36:d1:c9:38:ae:5f:60:
c5:8c:4b:27:7e:bf:9f:61:e8:32:5a:1d:de:1f:17:ff:2d:67:
e1:f6:00:2e:28:b6:c8:69:6f:fc:a6:22:a0:f4:d7:1c:14:fb:
b8:c2:bc:af:d3:5e:8b:d9:ab:3e:e5:8f:03:49:d6:d0:73:21:
44:3c:66:70:c2:2c:42:af:b5:85:07:bc:8a:76:8d:ec:0a:c8:
64:54:2d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:11 2025 by rpki-client