Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
File: E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json)
Hash identifier: 7z7AMLbi/DogUGUI4StT4KmZTd8LMC4PHLO2d8qlpkQ=
Subject key identifier: 2B:87:AD:23:3C:24:C7:4C:17:EE:23:FA:4A:38:E5:5C:2F:FA:59:2F
Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
Certificate issuer: /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Certificate serial: 0197B6D7955D6B2BA5C408AD309ED61C8962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
Manifest number: 0485
Signing time: Sat 28 Jun 2025 14:01:11 +0000
Manifest this update: Sat 28 Jun 2025 14:01:11 +0000
Manifest next update: Sun 29 Jun 2025 14:01:11 +0000
Files and hashes: 1: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: cwA2FX1Cyx3Iy6xO8YVclYD7R0X5uRUUaf9lXcNLn4U=)
2: JAqvgN4KkkWNoe1vrMrVsDBqmfE.roa (hash: QG1yL1zcYsT8fBEaDP08SL61cVF4WfYEKH5BAPzFTBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:95:5d:6b:2b:a5:c4:08:ad:30:9e:d6:1c:89:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Validity
Not Before: Jun 28 14:01:11 2025 GMT
Not After : Jun 29 14:01:11 2025 GMT
Subject: CN=2b87ad233c24c74c17ee23fa4a38e55c2ffa592f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:cb:48:60:50:42:84:94:f3:67:51:4e:af:
a3:4d:9d:e9:ef:85:00:5b:a1:31:a6:e0:e1:27:96:
03:c0:a4:83:c5:8c:58:48:e1:d8:a1:72:9d:b9:f2:
87:0f:ec:44:03:f5:0f:cf:a7:34:4d:01:9c:54:ca:
ff:58:21:f3:dc:16:b9:57:9e:31:f8:fe:41:2c:00:
22:63:96:2f:81:0b:b6:f5:0c:82:d5:48:ee:2c:07:
99:c5:9e:14:c2:b2:20:4d:6c:da:13:14:a3:57:4d:
56:85:6e:c4:21:80:af:6e:b1:84:6c:69:04:90:e5:
f3:66:3d:22:db:2f:8f:54:a7:eb:ea:de:15:ff:ca:
e4:99:24:42:35:4d:aa:43:63:74:e8:c8:a1:dd:6e:
34:72:88:d4:60:2c:92:80:df:6a:89:96:8f:27:8a:
70:81:89:49:95:2a:d5:ce:57:93:ea:9a:77:ee:0d:
03:50:63:91:b4:99:41:71:94:3d:49:59:60:45:75:
11:cb:a4:82:1f:cf:76:92:91:ad:0f:3f:89:db:ba:
3f:ba:36:c7:df:9c:8f:83:ca:5a:78:5c:52:6d:06:
3c:17:a2:90:92:bb:c0:3d:79:12:7e:44:dc:b8:b7:
e0:23:59:52:1b:2a:a8:39:40:bb:58:be:c9:bf:f9:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:87:AD:23:3C:24:C7:4C:17:EE:23:FA:4A:38:E5:5C:2F:FA:59:2F
X509v3 Authority Key Identifier:
keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c8:74:ac:d6:8d:ef:09:dc:ee:36:35:64:a2:4c:51:2c:84:
95:be:e4:c8:0c:fd:99:69:06:7c:7e:b5:2b:82:59:db:72:69:
0d:a1:3b:b7:69:28:d0:19:61:1a:8c:38:26:87:a3:39:a8:1a:
39:63:b1:4b:12:9a:91:44:9b:20:f2:e7:eb:8c:1a:a2:de:35:
e4:5c:0e:da:27:47:30:5c:cd:3a:63:e5:7e:5d:ea:97:45:b3:
26:5e:45:a4:97:95:0c:38:36:85:fc:78:f7:ea:cb:4f:7a:dd:
34:6e:87:fc:d1:50:7a:39:68:1f:90:24:9b:cc:e0:f1:33:90:
ce:e6:fa:5a:68:7f:9e:fd:17:70:1a:3b:0a:44:59:02:a3:35:
df:a0:59:41:25:8b:47:d0:46:56:63:e6:1b:02:40:c0:72:7c:
41:62:4a:06:6c:25:bb:b4:4b:43:dc:bb:f7:c7:23:a8:41:66:
9f:d1:80:c0:40:a0:2b:e9:64:b1:67:99:cc:6a:89:7c:ac:d2:
1b:5f:18:35:07:58:54:e2:57:df:04:e4:ed:34:47:74:cc:84:
ff:5b:b2:5a:df:78:81:52:24:1b:e9:41:d8:af:25:1d:57:d8:
a7:ec:44:f8:65:cb:84:15:51:f0:0b:1a:aa:8a:10:0e:86:f7:
e9:26:a6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:46 2025 by rpki-client