Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File: E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier: CRa2n1RfVbuWlCt/yY/e7SoNIsqrVOxTQONx7GKokU0=
Subject key identifier: 8B:CD:B4:94:A4:45:F9:79:47:81:99:0C:4D:CA:76:D0:B2:79:C4:68
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial: 0196A4664198BB0C42F1F6455669B9A89970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number: 0E90
Signing time: Tue 06 May 2025 07:01:26 +0000
Manifest this update: Tue 06 May 2025 07:01:26 +0000
Manifest next update: Wed 07 May 2025 07:01:26 +0000
Files and hashes: 1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: 1puTcB2V+PcDcfQhccIEUw1cMs4/MP7x9ZKqS4TX0dk=)
2: o33nzDd8Ud4SHUROSKPBqYvsK3I.roa (hash: 0uR5NTZUtirBbDZZiV+z6XYeVClsGx8GOL6f3pU8rh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:66:41:98:bb:0c:42:f1:f6:45:56:69:b9:a8:99:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Validity
Not Before: May 6 07:01:26 2025 GMT
Not After : May 7 07:01:26 2025 GMT
Subject: CN=8bcdb494a445f9794781990c4dca76d0b279c468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:db:72:f8:7d:74:ca:7d:6e:e5:13:56:31:
91:a0:3a:bb:66:a5:34:ac:f9:28:fa:5d:97:53:48:
16:88:5c:4a:0c:9f:fd:cd:c6:29:f4:78:b4:9d:25:
72:24:dc:c8:5d:db:cb:e9:f1:eb:14:f4:27:2e:ff:
33:25:10:a2:c8:21:43:7d:3f:89:42:fd:df:c8:63:
7e:4d:6b:fb:29:bd:2f:06:d1:ab:b6:1e:4f:c6:ef:
a9:ed:c6:72:d5:e9:68:d0:75:6c:4d:52:aa:51:73:
39:8c:98:a7:a9:76:df:50:c8:06:d0:40:39:11:bd:
7d:36:0b:90:05:0e:a5:ab:03:9d:65:fd:0b:3d:56:
48:ea:10:4b:f1:2f:4f:2b:8d:a0:11:be:1f:62:b9:
33:c7:75:7e:70:a1:32:ca:b6:e4:5a:67:67:2b:29:
0c:49:b0:2d:21:e5:12:8b:41:69:ab:6c:9c:a2:6f:
8e:6c:94:a5:f9:be:f7:bb:e4:c1:8d:16:5e:f0:16:
2b:4f:15:c4:c7:d5:f3:34:aa:bd:1f:11:f1:48:dc:
cf:7d:6c:86:16:b0:7b:57:14:12:49:9a:a6:39:3c:
8a:5d:c4:84:bc:45:c1:d6:15:f8:c5:55:9c:30:f8:
3a:58:10:f7:64:13:14:f9:b9:32:35:21:47:e1:8e:
c0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CD:B4:94:A4:45:F9:79:47:81:99:0C:4D:CA:76:D0:B2:79:C4:68
X509v3 Authority Key Identifier:
keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e1:81:cb:5e:9f:88:10:6d:22:00:15:63:ea:81:45:b5:2e:
e8:73:ac:58:f7:47:57:9a:aa:3a:c3:fc:46:4c:f2:ba:04:05:
ba:4c:a2:93:b5:88:58:e4:24:63:1e:05:81:e5:73:ed:21:28:
4b:53:ca:69:32:a1:be:a3:26:4e:bc:44:af:37:35:03:fa:06:
bb:a0:a6:4d:4b:65:bb:2b:4b:54:c0:8e:5a:d5:54:c2:3d:e0:
c3:6f:00:dd:0e:46:98:04:ec:07:4f:97:d4:93:9c:3e:8a:ec:
af:98:35:e7:e3:da:15:f8:86:c0:28:a8:ab:07:22:f9:f8:f9:
d4:f8:00:ac:89:d7:2b:24:a0:29:50:a9:93:60:d7:f1:e7:1f:
5b:f8:5d:05:67:95:f9:1e:94:d2:62:8a:24:99:08:d0:ee:6c:
00:25:44:42:76:59:b6:44:b8:bc:a6:3b:0f:b9:1c:0e:4b:6f:
2f:7f:24:c2:75:d8:00:23:46:75:67:91:80:c3:e3:93:18:50:
a4:8c:d8:70:e6:30:f0:a6:d7:ec:08:57:0e:ec:31:b0:c5:c9:
75:56:5e:5f:ba:2a:bc:d4:dc:79:d3:11:b5:7b:63:7e:8b:65:
3f:93:37:f1:0b:b1:1e:95:65:ab:b9:9e:18:31:4e:5e:4f:1b:
e1:15:ed:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZakZkGYuwxC8fZFVmm5qJlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzgzN2Q1ZDE3OTY5ZDJiYzBkNDRlNTYzNGE5NGJmN2Qz
NGU5MGIwHhcNMjUwNTA2MDcwMTI2WhcNMjUwNTA3MDcwMTI2WjAzMTEwLwYDVQQD
Eyg4YmNkYjQ5NGE0NDVmOTc5NDc4MTk5MGM0ZGNhNzZkMGIyNzljNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDnbcvh9dMp9buUTVjGRoDq7ZqU0
rPko+l2XU0gWiFxKDJ/9zcYp9Hi0nSVyJNzIXdvL6fHrFPQnLv8zJRCiyCFDfT+J
Qv3fyGN+TWv7Kb0vBtGrth5Pxu+p7cZy1elo0HVsTVKqUXM5jJinqXbfUMgG0EA5
Eb19NguQBQ6lqwOdZf0LPVZI6hBL8S9PK42gEb4fYrkzx3V+cKEyyrbkWmdnKykM
SbAtIeUSi0Fpq2ycom+ObJSl+b73u+TBjRZe8BYrTxXEx9XzNKq9HxHxSNzPfWyG
FrB7VxQSSZqmOTyKXcSEvEXB1hX4xVWcMPg6WBD3ZBMU+bkyNSFH4Y7A7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvNtJSkRfl5R4GZDE3KdtCyecRoMB8GA1UdIwQY
MBaAFBN4N9XReWnSvA1E5WNKlL99NOkLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81NDIzYzEtODcxZi00NjFjLTk5NzAt
NGRiM2YxODhmNWI2LzEvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81NDIzYzEtODcxZi00NjFjLTk5NzAtNGRiM2YxODhmNWI2
LzEvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuGBy16f
iBBtIgAVY+qBRbUu6HOsWPdHV5qqOsP8RkzyugQFukyik7WIWOQkYx4FgeVz7SEo
S1PKaTKhvqMmTrxErzc1A/oGu6CmTUtluytLVMCOWtVUwj3gw28A3Q5GmATsB0+X
1JOcPorsr5g15+PaFfiGwCioqwci+fj51PgArInXKySgKVCpk2DX8ecfW/hdBWeV
+R6U0mKKJJkI0O5sACVEQnZZtkS4vKY7D7kcDktvL38kwnXYACNGdWeRgMPjkxhQ
pIzYcOYw8KbX7AhXDuwxsMXJdVZeX7oqvNTcedMRtXtjfotlP5M38QuxHpVlq7me
GDFOXk8b4RXtyQ==
-----END CERTIFICATE-----
Generated at Tue May 6 13:15:50 2025 by rpki-client