Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier: +yiRQeWCaDlTWemxg5JYxNbSOUxYIE7PIVPVAFqUFvY=
Subject key identifier: D9:64:75:29:5F:FB:BB:06:D7:4B:EC:94:8E:CB:40:41:B5:B2:37:63
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer: /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial: 019A4D3D62404BCD04ED03CAE2D9A1D8FB31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 05:00:59 +0000
Manifest this update: Tue 04 Nov 2025 05:00:59 +0000
Manifest next update: Wed 05 Nov 2025 05:00:59 +0000
Files and hashes: 1: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: 4hN7AklbdRRx1oZXfL4tnNe8FUJiLM/PflUR4+Os7w0=)
2: QCvbSuskCQwLxFQrUoOouHi3diY.roa (hash: sXGvHwha1X8v4xaWgUMHB+2ZrDbhHWTJfZknYl2gSe0=)
3: dWbs3GSCk40VoHUjYwOcmy7b-Zk.roa (hash: B1PLAXt5mt+DEIRs6h0vcjXyP629Yb4hYyTjCDjQz0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:62:40:4b:cd:04:ed:03:ca:e2:d9:a1:d8:fb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
Validity
Not Before: Nov 4 05:00:59 2025 GMT
Not After : Nov 5 05:00:59 2025 GMT
Subject: CN=d96475295ffbbb06d74bec948ecb4041b5b23763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:a6:52:35:77:31:4d:d8:ca:d9:81:90:92:
6a:c2:a9:f3:68:1b:9a:e3:77:8e:49:68:4f:22:38:
d6:5b:cf:37:4c:09:4a:31:cb:d5:7c:b1:83:81:1c:
c1:67:7b:ad:e1:10:f4:8e:4c:82:72:c0:89:ce:7c:
54:a6:d7:28:ca:c6:4b:7b:cb:42:24:51:da:97:52:
0d:08:fa:71:43:b5:ac:04:82:c9:ae:ca:a2:ba:4e:
a6:28:0e:b6:68:b8:32:61:b9:17:ab:02:cd:d9:ad:
86:3d:df:0e:28:a8:42:a4:23:a9:f4:bd:9c:d2:92:
3c:20:d6:02:ca:34:ca:03:d5:4b:46:94:8e:2f:d6:
fc:08:17:f3:5c:b9:b9:10:e3:04:3e:9d:5b:48:e1:
52:54:44:04:b1:5c:11:eb:fc:ac:52:23:5e:5d:c4:
57:36:b2:70:18:cf:89:e7:a0:ea:b6:48:bd:f2:fc:
52:60:82:2d:24:5f:b0:75:01:11:20:60:c4:5a:7c:
68:6f:0c:c4:49:b6:c4:53:1c:52:ab:43:1a:96:00:
46:e2:c3:6f:6e:24:8b:ac:2f:6e:cf:ea:2b:de:23:
36:42:a4:a8:19:ee:b3:44:3d:c8:32:cf:ff:34:f3:
6b:2a:a8:42:c5:56:88:8c:02:4f:c4:60:5a:ad:f9:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:64:75:29:5F:FB:BB:06:D7:4B:EC:94:8E:CB:40:41:B5:B2:37:63
X509v3 Authority Key Identifier:
keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7a:3d:20:b2:97:81:7f:4b:b7:f5:1c:69:df:62:2f:0a:43:
7b:b9:07:2e:ba:c3:7c:47:c8:22:5a:a6:c4:94:19:1e:27:3d:
a4:20:fd:11:43:fb:8b:28:11:aa:bb:08:54:e0:74:17:e4:30:
52:4c:1d:96:e9:0f:8e:68:a2:92:ed:cb:a0:76:2a:ae:b7:c1:
61:7f:57:df:23:90:03:87:b7:02:67:49:87:e4:a7:28:67:0b:
ef:95:5b:90:c9:55:e1:9c:67:f7:76:3b:0b:c0:1f:f7:b1:6a:
d0:e9:fc:80:de:ad:d3:9c:21:1c:f0:c1:ee:35:20:92:1f:91:
92:0d:76:95:71:c4:1a:04:a0:c3:99:2b:6e:19:1f:73:d1:01:
97:a7:4c:d7:58:1c:c3:01:c4:8c:fe:b6:c7:fb:4f:28:ba:5b:
af:d8:02:f6:a8:2a:57:18:cf:09:14:bf:e6:b3:d7:c0:fd:c0:
4c:89:be:5b:67:70:4a:a5:a1:5b:9a:a1:89:58:02:63:e3:cf:
79:d3:21:a7:95:6e:a8:a1:cc:da:91:4c:2d:da:4f:6f:e0:ad:
39:6e:b4:ad:33:c3:45:50:36:9f:55:f0:71:96:86:94:9f:ad:
85:5c:b6:a0:4e:fd:e9:9c:5b:f9:1f:0c:76:62:bc:25:f7:04:
bf:1b:41:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:58 2025 by rpki-client