Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File: E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier: 7S0gT5QEbckozByyhGSypiS25jPafULATqvmTntuAiI=
Subject key identifier: 02:C2:33:AF:BE:80:1A:01:0F:DD:F3:44:6D:F9:4B:BB:17:9D:55:37
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial: 01977AC315E22C53C53FDD78D17D9F9B1F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number: 0EFF
Signing time: Mon 16 Jun 2025 22:01:34 +0000
Manifest this update: Mon 16 Jun 2025 22:01:34 +0000
Manifest next update: Tue 17 Jun 2025 22:01:34 +0000
Files and hashes: 1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: 6BhBKk8Hkx/5JXMGBuEoWhSd59Jl+sdr5d6H12u1fog=)
2: o33nzDd8Ud4SHUROSKPBqYvsK3I.roa (hash: 0uR5NTZUtirBbDZZiV+z6XYeVClsGx8GOL6f3pU8rh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c3:15:e2:2c:53:c5:3f:dd:78:d1:7d:9f:9b:1f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Validity
Not Before: Jun 16 22:01:34 2025 GMT
Not After : Jun 17 22:01:34 2025 GMT
Subject: CN=02c233afbe801a010fddf3446df94bbb179d5537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:64:fb:35:3e:65:4e:5c:51:ba:ae:aa:45:
b4:9b:b5:1d:65:99:ee:9a:eb:91:ca:3f:eb:b3:3b:
0b:76:72:fe:e4:0b:5c:43:23:68:08:9a:74:c3:0c:
4b:a9:25:4c:b3:b3:dd:1c:11:14:89:13:72:2b:20:
4a:2e:98:67:33:c9:96:77:37:18:0e:60:c2:2d:4b:
c1:32:f3:05:b5:d2:43:6d:2f:95:a8:92:98:9c:28:
df:9b:10:26:2c:6c:9a:15:be:f4:36:cf:93:3a:28:
24:99:f7:d4:de:9e:b5:86:c9:cd:a1:50:fd:86:7b:
cf:18:da:48:32:0a:ce:2b:25:c2:77:ce:6a:b9:4b:
3b:54:f4:2d:5c:dc:65:f7:7e:25:28:e2:25:53:2d:
50:4b:8a:c4:e6:62:40:10:4e:95:b9:17:00:6c:11:
42:2b:ef:91:96:a7:9c:18:b8:00:a7:bc:5d:de:11:
fe:fb:a8:4a:d7:c0:1d:6b:5b:9f:cf:41:16:6c:43:
54:52:c9:9e:fa:64:86:26:8e:bc:68:48:c3:83:aa:
c5:c7:cb:8c:d0:b0:ef:e0:a6:57:e0:6f:d1:58:a8:
93:f4:17:dd:61:89:27:29:00:83:d2:4a:c0:60:bc:
b9:d5:fd:6b:df:82:cb:39:bf:57:7e:ce:3a:8e:ce:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C2:33:AF:BE:80:1A:01:0F:DD:F3:44:6D:F9:4B:BB:17:9D:55:37
X509v3 Authority Key Identifier:
keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a7:d2:56:e6:40:7e:2e:01:62:f4:a4:c1:e7:00:0d:d9:7d:
14:05:a0:44:57:0e:94:71:64:9b:38:8d:f6:c6:eb:0f:eb:41:
d1:05:f1:c0:06:3f:e5:de:14:db:16:3a:56:2e:7e:cf:3f:d6:
bf:62:87:b4:b4:9d:b4:2f:84:21:20:22:fb:81:7a:64:8f:f4:
28:6e:f8:4c:0e:5c:14:36:e0:14:68:72:64:48:16:b2:68:b4:
9d:82:5f:ad:cf:d8:3d:f4:99:05:e5:77:dc:d5:6b:68:b4:3a:
f4:f5:c9:a1:6a:1e:78:00:c3:4c:47:a7:3e:a7:18:1c:22:e7:
eb:63:bf:bb:e5:a6:ad:b1:0d:05:de:86:b1:83:52:a0:ef:94:
2f:f0:42:e7:ad:81:12:96:89:a6:2c:96:af:ec:b7:d7:e8:a8:
b0:a7:10:be:b8:c3:42:3b:2c:2a:0f:86:34:80:95:af:a5:f1:
d8:44:7f:df:73:95:63:41:1e:70:5c:9e:e8:97:ed:89:5d:c1:
fb:d0:39:14:ab:6e:d9:0b:5d:ee:18:70:fe:42:f3:18:ac:54:
05:fc:ac:97:a0:52:50:d4:f5:88:26:c0:6c:41:f0:af:84:c0:
e1:18:9b:1e:25:2b:44:6a:ef:cc:c3:af:c3:de:eb:b9:88:44:
35:c8:b0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:13:28 2025 by rpki-client