Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier: L3qIoo6OKqg94+fdEjBN1Bj2VhZbNhoykthfQyrr6mY=
Subject key identifier: B0:BC:1C:95:FA:70:3F:86:C4:8A:45:46:6A:BF:96:6A:55:1C:2C:13
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial: 019A51F5410FABED96CFA0A4D2DDFB1845CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 03:00:18 +0000
Manifest this update: Wed 05 Nov 2025 03:00:18 +0000
Manifest next update: Thu 06 Nov 2025 03:00:18 +0000
Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: ikz0+6hKllHqWGb4dvjEEuw9taC64mlvOYDUMJwr8ys=)
2: H9WDvc0OfXB44k8OyrV2kgiLuzs.roa (hash: ECy836T53R0CEG1VyCTCAvl+zi+aWOuz45OEcMa+89w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:41:0f:ab:ed:96:cf:a0:a4:d2:dd:fb:18:45:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Validity
Not Before: Nov 5 03:00:18 2025 GMT
Not After : Nov 6 03:00:18 2025 GMT
Subject: CN=b0bc1c95fa703f86c48a45466abf966a551c2c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:09:9e:6f:a7:8a:42:88:45:26:cd:c8:3a:
66:da:46:a2:f8:ce:b5:b7:93:ba:b9:3a:f9:5d:04:
bd:bb:07:32:45:bb:46:26:86:ed:19:9b:99:ce:99:
bd:5b:13:f4:7e:00:e5:3c:cf:38:a3:95:17:fd:42:
12:04:9b:37:bf:dd:30:92:4e:18:88:7b:bf:99:47:
93:7a:c7:09:84:c2:61:82:bb:d5:75:a9:ea:00:56:
72:7c:b1:27:34:03:6a:48:1e:c2:4b:fe:64:3f:92:
10:ee:57:e0:d2:b7:ea:90:cd:5d:5c:69:d0:8b:88:
dd:16:05:cf:92:b7:7e:e2:59:f8:fe:9a:30:34:5f:
f1:04:cd:05:31:8a:12:0b:19:11:be:28:0e:21:86:
1c:99:c7:b9:d0:3a:82:37:ad:2d:6e:d9:92:55:84:
63:b8:b1:59:79:85:22:a4:e9:a4:95:82:43:e4:3e:
09:5c:0c:32:c7:6a:8e:c3:be:fd:20:62:cf:f3:c1:
d9:58:2d:97:ea:e7:39:32:b0:fc:63:c6:f1:1f:a4:
12:7a:03:ac:1a:c0:19:1c:1a:ad:28:93:ca:13:27:
11:13:56:16:93:1c:5b:39:e5:27:94:90:45:b5:82:
b3:80:90:7d:ff:b6:96:14:81:b7:3a:20:81:13:2a:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BC:1C:95:FA:70:3F:86:C4:8A:45:46:6A:BF:96:6A:55:1C:2C:13
X509v3 Authority Key Identifier:
keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4e:e6:a2:e4:d8:b5:d5:77:44:7b:eb:75:c2:75:3b:1c:e4:
6f:84:6b:26:6b:0a:5f:df:fd:68:24:84:10:12:d8:96:80:6b:
d9:bd:09:59:27:f6:f3:9b:a3:df:8c:c9:5a:eb:4a:c0:c8:c5:
71:9e:07:ad:ee:a2:bc:bb:05:da:8e:98:b1:2c:49:27:ed:73:
31:4c:52:4c:75:37:bd:c8:7b:65:59:8b:9a:50:fb:63:eb:95:
33:57:3b:4c:08:78:a6:2c:4b:76:4c:6f:45:ee:01:54:ab:c6:
b4:22:eb:5a:b4:eb:36:18:fb:2a:a0:af:c5:cd:49:94:04:f3:
46:b2:24:4c:aa:47:97:81:a0:c0:b5:51:69:35:fd:cb:2f:e7:
ae:e5:71:9e:3c:78:91:ae:17:a5:d4:94:52:03:9a:bd:cf:a9:
22:19:f2:6e:73:57:c1:6b:95:00:e9:37:41:0c:07:05:98:3c:
3d:6e:b5:29:3e:ab:b6:04:cd:ee:d5:3f:8c:29:df:ae:9e:3c:
12:a4:dd:c8:54:c7:41:fc:72:e8:a7:fc:c7:a0:0d:c0:06:26:
e3:94:4c:72:c5:47:db:d7:65:10:30:72:e1:5c:d6:1d:e4:d7:
b9:21:4f:87:7f:fe:38:d1:64:62:56:7f:72:5f:bf:26:85:0d:
84:e1:34:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9UEPq+2Wz6Ck0t37GEXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2UxMTAzNzc1Nzg1ZDAxMmZjOGRkYWI0YzAyYWMwMzc5
MWI5ZDQwHhcNMjUxMTA1MDMwMDE4WhcNMjUxMTA2MDMwMDE4WjAzMTEwLwYDVQQD
EyhiMGJjMWM5NWZhNzAzZjg2YzQ4YTQ1NDY2YWJmOTY2YTU1MWMyYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C8Jnm+nikKIRSbNyDpm2kai+M61
t5O6uTr5XQS9uwcyRbtGJobtGZuZzpm9WxP0fgDlPM84o5UX/UISBJs3v90wkk4Y
iHu/mUeTescJhMJhgrvVdanqAFZyfLEnNANqSB7CS/5kP5IQ7lfg0rfqkM1dXGnQ
i4jdFgXPkrd+4ln4/powNF/xBM0FMYoSCxkRvigOIYYcmce50DqCN60tbtmSVYRj
uLFZeYUipOmklYJD5D4JXAwyx2qOw779IGLP88HZWC2X6uc5MrD8Y8bxH6QSegOs
GsAZHBqtKJPKEycRE1YWkxxbOeUnlJBFtYKzgJB9/7aWFIG3OiCBEyo8oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLC8HJX6cD+GxIpFRmq/lmpVHCwTMB8GA1UdIwQY
MBaAFBN+EQN3V4XQEvyN2rTAKsA3kbnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYt
OGJkY2NjZTVkZmU4LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lMTZlZTctZWZlZi00ODA5LTg5ZmYtOGJkY2NjZTVkZmU4
LzEvRTM0UkEzZFhoZEFTX0kzYXRNQXF3RGVSdWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADU7mouTY
tdV3RHvrdcJ1Oxzkb4RrJmsKX9/9aCSEEBLYloBr2b0JWSf285uj34zJWutKwMjF
cZ4Hre6ivLsF2o6YsSxJJ+1zMUxSTHU3vch7ZVmLmlD7Y+uVM1c7TAh4pixLdkxv
Re4BVKvGtCLrWrTrNhj7KqCvxc1JlATzRrIkTKpHl4GgwLVRaTX9yy/nruVxnjx4
ka4XpdSUUgOavc+pIhnybnNXwWuVAOk3QQwHBZg8PW61KT6rtgTN7tU/jCnfrp48
EqTdyFTHQfxy6Kf8x6ANwAYm45RMcsVH29dlEDBy4VzWHeTXuSFPh3/+ONFkYlZ/
cl+/JoUNhOE0oA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:27 2025 by rpki-client