
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
File: e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft (raw, json)
Hash identifier: A7dEzPku1fQLCmRkiEHd68euIE3VoIXSPizOFGNb8lM=
Subject key identifier: 9D:0D:4B:BA:97:79:7C:E5:57:BF:81:E8:F5:2D:FD:8F:D1:17:7B:B8
Authority key identifier: 7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69
Certificate issuer: /CN=7b7873f89c2a985327ea7996267423a7751c6169
Certificate serial: 0197C61392A02995866F8A47908F18282339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
Manifest number: 15B9
Signing time: Tue 01 Jul 2025 13:01:00 +0000
Manifest this update: Tue 01 Jul 2025 13:01:00 +0000
Manifest next update: Wed 02 Jul 2025 13:01:00 +0000
Files and hashes: 1: e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl (hash: gGbY+kggENyXMrRJbLEeffBB2vvN/xm14tIpt6klkUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:92:a0:29:95:86:6f:8a:47:90:8f:18:28:23:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7873f89c2a985327ea7996267423a7751c6169
Validity
Not Before: Jul 1 13:01:00 2025 GMT
Not After : Jul 2 13:01:00 2025 GMT
Subject: CN=9d0d4bba97797ce557bf81e8f52dfd8fd1177bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:00:61:94:84:2e:39:79:97:ef:ed:b5:a1:
b4:b1:ec:43:cc:64:3f:e8:02:1b:71:93:be:b0:25:
95:af:98:da:91:48:e2:3d:76:e0:2e:33:ba:1e:b9:
0a:6a:87:01:90:43:0c:f3:bd:d0:7a:9d:9b:43:e6:
a0:c4:d2:51:a9:67:33:51:7d:57:1f:69:32:0d:49:
21:c0:24:b1:e6:2b:8b:a0:e0:08:b7:2b:c6:7d:b8:
cb:2f:4b:16:7c:2d:c0:aa:eb:f8:89:8f:eb:c6:50:
3b:51:43:ef:fb:ba:ee:97:a7:de:90:6f:0d:e7:0f:
89:c0:f0:5c:04:7b:1f:08:49:4c:f5:66:f4:c3:89:
09:22:d9:37:f7:3d:f6:2f:05:1f:f8:70:ae:32:40:
7c:93:76:78:3e:93:93:f8:2b:05:84:97:ab:97:bc:
1c:12:e8:86:22:d1:a7:2d:1d:1c:36:4e:12:34:3d:
e3:a5:ce:a5:4c:c8:06:ac:2b:c9:74:1d:43:3b:8a:
51:af:42:ab:24:4a:88:f2:35:f0:6a:18:a9:19:64:
33:54:bf:5d:f0:a4:7e:1d:88:d4:88:9c:93:02:73:
0b:f3:7a:28:2f:58:c9:3f:eb:67:ee:d0:0b:87:af:
ec:89:81:d6:b6:fa:00:94:e2:42:a3:85:7b:b4:a3:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0D:4B:BA:97:79:7C:E5:57:BF:81:E8:F5:2D:FD:8F:D1:17:7B:B8
X509v3 Authority Key Identifier:
keyid:7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d9:fe:87:8d:a1:c6:b5:6f:25:21:0e:32:dc:26:e7:a0:c5:
7c:4f:f5:7d:a2:17:ec:0a:8e:1f:a9:86:e7:24:34:20:26:43:
69:65:b6:36:96:b4:7b:fa:f1:31:7a:ae:dc:69:88:67:1a:7c:
39:69:7f:05:3d:ec:1f:9c:a3:b3:ac:0e:ad:f6:a8:cd:4a:3b:
6d:87:be:42:4b:0c:90:91:ce:9f:8c:fb:5a:57:21:b1:c6:6c:
09:4b:5f:b9:fe:72:3b:c9:a6:8d:46:47:26:2a:36:e3:23:b3:
32:ac:de:c4:0d:1b:c1:cc:0f:1f:78:1d:d8:cd:41:3c:af:34:
f8:f3:e2:55:46:27:2d:ef:c4:92:20:59:2c:12:f5:d8:52:2e:
00:3b:13:bd:78:94:3d:14:26:1f:1a:94:94:27:a6:28:5f:b4:
fb:02:f3:3b:f8:1b:a9:a2:ee:56:de:a2:e0:83:eb:3b:55:a3:
b0:54:39:5b:15:7e:d9:52:33:6c:db:68:18:ea:1c:46:d0:d3:
a5:33:0f:9f:e1:cc:1b:6d:ca:10:e6:28:1f:7e:dc:39:a8:27:
d1:63:ed:a3:94:db:1c:41:81:4b:7c:65:13:7a:9c:53:98:4a:
8d:ee:c1:36:f0:30:dc:48:fb:c8:b8:ec:2a:b3:3b:9c:fe:2e:
0e:1d:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:55:59 2025 by rpki-client