Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: 4py15nMa5spoXvfkD3JfivVzrvinTwUA6nkZXCA3ykc=
Subject key identifier: 2E:EA:17:AC:95:D7:79:71:4C:2C:A4:94:9F:C9:14:A2:8C:1A:1E:B6
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 019A51BEDE9A2510365DF05252BCC5AFE540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 16E7
Signing time: Wed 05 Nov 2025 02:00:54 +0000
Manifest this update: Wed 05 Nov 2025 02:00:54 +0000
Manifest next update: Thu 06 Nov 2025 02:00:54 +0000
Files and hashes: 1: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: y/FdPoeo8G9SPsWeQhdjIXj+RzXy9BiiEANr4ovUrLc=)
2: rf7Y9BfnjDYuwCtely2bugyEpys.roa (hash: 9y+7Sb1Y7U3Xr15ca0JClSv0KalX6Si92Kt+rNAmTHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:de:9a:25:10:36:5d:f0:52:52:bc:c5:af:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Nov 5 02:00:54 2025 GMT
Not After : Nov 6 02:00:54 2025 GMT
Subject: CN=2eea17ac95d779714c2ca4949fc914a28c1a1eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:80:17:13:a6:53:a0:20:cb:b8:fa:89:fa:
18:a4:31:9c:ff:f6:89:c3:cb:06:9d:7a:9d:d1:a4:
ba:57:42:1c:d3:76:0b:d5:4e:1b:d8:8b:58:d7:75:
1d:83:de:5a:3c:d7:e4:bd:34:85:5d:6e:c5:6a:9c:
50:7a:78:2d:d5:49:ef:65:fc:d7:b3:02:7e:da:b0:
98:9d:4f:14:9b:35:3b:a2:e9:35:0d:24:f9:8b:67:
7c:dd:b8:b6:ba:82:b0:9c:ed:1d:99:6d:88:14:0b:
19:0c:5f:b2:5c:a8:42:84:a3:72:ab:ae:13:1e:c8:
62:5e:24:a1:ba:6b:f4:77:fd:fe:f2:1f:14:5e:44:
16:c4:df:14:5d:d0:53:da:6e:02:18:5e:ff:e7:d4:
b1:bb:ee:dd:3d:a2:f5:5e:23:e5:7b:e4:ff:f0:66:
c5:85:87:13:0d:e1:c7:c2:d7:a8:46:4c:02:02:0a:
46:3f:30:2f:76:97:f6:39:63:0f:9f:27:1e:6d:cb:
ae:cb:ec:76:25:b9:e3:d1:1d:1e:c1:f7:74:1f:b8:
72:e4:9a:3b:cc:ed:25:05:49:b0:d1:89:74:30:9d:
a9:18:e3:90:87:78:90:ca:95:00:2c:16:f4:6f:80:
c3:5d:7f:c4:5e:d1:91:ac:01:41:da:05:cd:cb:26:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EA:17:AC:95:D7:79:71:4C:2C:A4:94:9F:C9:14:A2:8C:1A:1E:B6
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6e:53:0f:21:48:f9:78:da:8e:47:42:80:e6:0b:52:80:16:
28:f0:62:98:f8:fc:07:86:80:9b:d4:d1:ea:50:83:4f:75:ee:
4b:1f:8c:01:75:95:9a:8d:ce:10:17:00:fb:c6:8a:9e:d7:e0:
3c:5f:72:63:3a:48:2b:5c:75:b9:6c:71:7e:2f:12:55:16:a3:
31:99:d6:56:b4:e4:0f:21:87:33:0f:9d:5c:13:a4:22:0e:8d:
44:1b:3c:19:e4:5e:a4:87:1d:29:2c:64:68:2f:ca:04:a2:5f:
6f:b9:60:d0:dc:74:9b:96:ba:fd:bd:ba:3b:0d:da:e9:48:c6:
09:e7:de:f2:3c:67:49:aa:72:a9:ed:f5:70:85:aa:82:02:f7:
bd:68:f5:b5:f8:0d:2e:75:cb:49:dd:25:ee:11:6a:bf:17:94:
fa:9a:1c:3c:b3:f8:fc:d1:f3:5d:a9:e1:fd:be:09:12:3c:3d:
a3:fc:a3:44:89:d8:da:09:d4:9a:13:18:37:48:5b:6f:f6:44:
14:d2:41:05:ae:11:b9:43:ba:b1:18:26:29:c0:6e:e8:0f:77:
7f:2c:9b:38:03:aa:2d:4d:2d:5f:e9:c6:4a:65:b8:3a:ce:fc:
69:6a:3b:b7:1e:5c:da:06:e3:37:a9:61:f8:dd:ed:a1:61:8f:
c5:1d:70:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:06 2025 by rpki-client