
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier: /cX3cT6Fl4PwK0DE+NRx9n499N9udHu7pZtU3dRubQY=
Subject key identifier: E3:26:63:A1:DB:FB:66:D4:E4:E2:B4:0E:3E:CF:0E:65:39:4E:B5:EE
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer: /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial: 0196CC177D01E75909D3C329B80731C2F007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number: 04BD
Signing time: Wed 14 May 2025 00:00:13 +0000
Manifest this update: Wed 14 May 2025 00:00:13 +0000
Manifest next update: Thu 15 May 2025 00:00:13 +0000
Files and hashes: 1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: eGTOd8R4HNLmNZRccityS0TmXNAwW48urbnQ4/OoASU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:17:7d:01:e7:59:09:d3:c3:29:b8:07:31:c2:f0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Validity
Not Before: May 14 00:00:13 2025 GMT
Not After : May 15 00:00:13 2025 GMT
Subject: CN=e32663a1dbfb66d4e4e2b40e3ecf0e65394eb5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:3b:c3:a9:b2:e3:6e:fa:ed:64:66:5c:e1:
e7:21:81:ba:5e:60:28:68:68:c0:c5:30:91:ac:d3:
af:df:7e:01:dd:fa:97:59:5b:53:74:bc:73:ec:f8:
64:dd:ae:f5:5a:15:09:8a:14:ce:ca:06:28:86:b9:
5c:64:ff:d5:59:af:00:64:9d:d7:59:9a:ed:00:18:
03:44:c5:9e:a6:7e:49:ff:ba:a8:9f:f9:22:8f:dc:
b4:5f:ef:76:e7:2e:4d:6c:89:cb:fe:7e:b2:f0:88:
9f:1b:0c:98:44:55:0b:4c:1a:22:91:62:ed:f8:22:
95:de:b4:1e:8f:54:34:45:d6:75:c6:e4:c5:6d:28:
5d:f5:9e:09:60:4f:c2:e8:90:d5:46:f7:ff:b5:24:
92:ab:5f:69:67:1f:d4:c8:56:bb:a7:82:47:81:18:
05:5a:bd:c8:88:a4:da:f5:5d:db:89:80:17:ca:b9:
37:c0:09:de:f2:c7:a0:1d:82:50:b2:0a:f0:cd:a4:
96:b3:64:41:0b:55:ce:80:9c:4f:8e:a3:35:71:13:
e9:dd:23:6d:39:8c:ff:86:37:5d:b3:37:db:1e:d2:
cd:1f:4e:f2:eb:84:36:7b:23:49:f9:d6:c4:7e:69:
8f:3d:87:bc:8f:e0:fb:2c:2d:7b:66:29:f1:49:b5:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:26:63:A1:DB:FB:66:D4:E4:E2:B4:0E:3E:CF:0E:65:39:4E:B5:EE
X509v3 Authority Key Identifier:
keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:87:29:f4:8f:20:00:e7:bc:6c:d7:cc:ff:52:79:68:33:12:
81:ef:7f:ac:55:f5:0e:71:8f:7e:c6:3a:92:8a:27:cb:49:ac:
0a:c2:9c:47:85:50:28:23:f9:33:7c:63:be:66:b6:37:a4:68:
cd:ce:13:4e:7e:e6:51:19:88:f6:0b:c2:db:1a:dd:0b:2f:47:
76:e3:42:c6:e2:42:67:a2:a6:4a:92:75:be:75:56:39:8e:17:
34:3e:10:90:1e:55:58:f9:43:67:2f:e6:e4:6a:62:06:ec:18:
85:8e:8a:1d:b4:ae:15:71:8b:b3:3f:c6:60:96:10:d9:45:73:
56:e0:90:c0:89:69:8b:1a:d6:53:f5:4d:67:6b:6f:d5:b8:a3:
4c:81:1c:a1:4e:cf:d0:be:0e:b7:6d:8a:8b:fa:ea:20:ad:09:
c0:54:bb:e2:64:17:ff:3b:90:88:d2:59:d2:2d:c3:eb:d4:d2:
d4:a2:9c:f8:21:31:b2:ec:13:f5:97:7b:30:67:18:f6:4c:26:
4f:f4:9c:9e:50:32:86:e0:ab:35:55:e9:55:82:1f:82:f7:90:
d3:01:51:46:fe:bb:c2:28:18:c1:aa:cb:1c:3e:3e:06:1a:1f:
83:4d:b3:cd:89:e9:51:ee:61:56:61:90:d2:0e:34:a6:b1:c0:
b1:b0:77:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:59:41 2025 by rpki-client