Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File: E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier: ueRhTMvYEtGovqZgGlVmP43XAy7yFLiGOYT+W3O7etk=
Subject key identifier: EA:68:E6:03:55:89:A7:80:AC:E7:F7:23:67:3E:55:E7:80:99:DC:A7
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial: 0198D6604DE3690E756A27A607E99BF9534C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number: 0FB3
Signing time: Sat 23 Aug 2025 10:01:32 +0000
Manifest this update: Sat 23 Aug 2025 10:01:32 +0000
Manifest next update: Sun 24 Aug 2025 10:01:32 +0000
Files and hashes: 1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: GJgVSbJKnmt+uOO7mSJ4BuHk2cidbODIlurHbKwU9HE=)
2: o33nzDd8Ud4SHUROSKPBqYvsK3I.roa (hash: 0uR5NTZUtirBbDZZiV+z6XYeVClsGx8GOL6f3pU8rh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4d:e3:69:0e:75:6a:27:a6:07:e9:9b:f9:53:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Validity
Not Before: Aug 23 10:01:32 2025 GMT
Not After : Aug 24 10:01:32 2025 GMT
Subject: CN=ea68e6035589a780ace7f723673e55e78099dca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:0f:de:5f:32:db:fb:6b:57:a8:f2:67:d8:
62:6d:a0:9a:c2:90:66:e5:31:59:f0:30:58:d5:0a:
90:a0:7b:b5:94:f0:0d:2a:c0:0d:c4:09:9a:57:a9:
9c:3b:32:6e:f6:09:53:f5:5a:7f:34:db:cd:64:d8:
95:84:31:6f:e5:8f:33:58:de:cb:88:a3:c8:00:83:
0f:15:58:02:6c:82:6b:a9:ee:8c:6b:4a:45:0a:ed:
35:6c:0b:f1:f7:d9:88:f5:48:a3:b0:64:bc:23:69:
27:85:d2:02:91:a8:2e:82:db:5b:a2:01:2d:c8:4e:
d3:11:8e:f8:72:63:d2:7f:0a:4f:7c:04:dd:22:70:
3f:aa:2e:0b:c1:7e:85:2b:f5:a5:0f:ea:63:01:09:
24:43:55:a3:15:13:6d:fb:82:bb:63:74:82:9b:75:
c3:44:37:82:01:6c:06:88:80:9d:65:4e:b3:75:b8:
0c:49:67:69:e9:3d:7c:4c:71:2b:87:1d:f9:ee:23:
bb:75:bb:d1:c1:63:cc:fd:fe:85:c9:5a:bf:27:b5:
e0:85:6f:3a:94:ff:fe:17:3b:bc:52:44:c1:de:ac:
f0:ec:34:ec:76:91:f9:d5:d7:16:9e:1a:c2:c2:a4:
4d:d8:75:15:a5:5b:16:3f:02:61:65:a6:ca:3c:df:
6e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:68:E6:03:55:89:A7:80:AC:E7:F7:23:67:3E:55:E7:80:99:DC:A7
X509v3 Authority Key Identifier:
keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:75:10:de:c2:2a:ec:4e:06:e8:92:73:17:d3:75:c7:29:2e:
86:cc:00:10:90:cf:07:1c:2c:14:6b:e8:40:e8:b4:bf:4b:14:
e6:97:fa:d1:36:ad:92:d3:88:3c:43:0f:06:16:5e:f3:0d:64:
29:a1:81:ca:5c:cb:7a:aa:1a:7e:eb:77:06:d1:9d:ee:65:98:
34:1d:79:1a:11:e8:c4:25:4b:52:dc:2f:bd:39:b6:8e:80:fd:
ee:82:24:6e:d4:66:a5:af:d4:0c:51:1c:54:2c:14:9f:c9:bf:
f7:33:b4:e8:68:90:c6:6c:45:3a:f9:ff:f3:85:c4:9d:c5:5b:
a5:29:90:7e:b4:54:aa:b9:1f:b0:25:59:3d:e9:3b:03:fd:c1:
22:5c:b3:ef:20:99:92:83:aa:4f:24:74:5e:cd:03:c1:98:0c:
98:ab:aa:52:b4:97:3a:29:44:af:49:16:6a:79:09:f3:66:1c:
77:cf:9a:7d:71:10:26:ac:e1:82:74:c2:0c:60:09:52:29:8b:
ca:89:c0:1e:87:4a:c2:8d:ec:e2:6c:8c:f4:1c:cd:ec:94:64:
1a:e4:cf:15:1f:71:24:34:06:b1:4a:0f:3a:a5:7f:26:0b:a0:
df:d9:73:ec:b1:35:97:5d:d4:aa:e9:74:86:11:17:5c:24:f1:
43:ab:f7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:10 2025 by rpki-client