Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File: E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier: x4BZQAE7zNBxezg13wyW/lVLPXQbRL/KcRKfdAm4FwU=
Subject key identifier: 71:46:9C:0C:5F:AE:59:90:66:18:9B:C4:2E:3A:87:BB:5C:D4:C4:23
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial: 019873E259837F0E44C918E76214473AB057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number: 0F80
Signing time: Mon 04 Aug 2025 07:01:10 +0000
Manifest this update: Mon 04 Aug 2025 07:01:10 +0000
Manifest next update: Tue 05 Aug 2025 07:01:10 +0000
Files and hashes: 1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: s3otuiyUAcW6nriFMQzk0mee4xynrfpByNfkbLFC1pA=)
2: o33nzDd8Ud4SHUROSKPBqYvsK3I.roa (hash: 0uR5NTZUtirBbDZZiV+z6XYeVClsGx8GOL6f3pU8rh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:59:83:7f:0e:44:c9:18:e7:62:14:47:3a:b0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Validity
Not Before: Aug 4 07:01:10 2025 GMT
Not After : Aug 5 07:01:10 2025 GMT
Subject: CN=71469c0c5fae599066189bc42e3a87bb5cd4c423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c5:3b:07:e5:85:ac:77:51:6b:87:41:1f:9f:
53:b9:aa:51:27:85:26:6b:7a:a9:1c:b9:7c:0c:e0:
cc:ee:5c:5d:43:30:14:c0:4f:67:8b:ee:4d:cc:5b:
00:3c:75:2e:e9:fa:4b:0c:21:64:1a:48:3c:56:6b:
97:2e:f3:17:60:44:1b:f7:6c:23:66:48:a1:66:a1:
bf:ab:53:76:9f:15:41:34:a3:05:90:58:49:3d:cb:
43:08:8f:cd:d7:31:b9:50:a4:c6:a6:a1:5d:57:fd:
2a:8b:15:f4:4f:e4:a8:e3:44:13:42:bc:ff:cb:c3:
46:fb:01:7a:ea:11:29:01:b8:ef:ff:8b:b8:7c:59:
90:b0:d6:82:6e:a5:53:a7:8e:df:d7:2b:f4:82:b0:
aa:e0:8f:d1:00:7a:fd:48:67:a1:6a:57:1b:3b:62:
62:db:eb:d9:b3:2f:d7:df:b3:79:aa:c2:39:7a:e2:
97:fc:e9:5a:cc:cb:85:e1:d0:fa:38:3f:85:d8:e0:
4e:b3:ea:c6:17:26:c6:91:d9:91:31:5c:05:06:67:
6d:12:7e:49:d1:35:d4:c1:44:f5:cb:f8:d7:da:03:
49:4c:3a:59:41:34:06:5f:a4:4d:0c:91:0a:7d:ff:
da:e3:8b:d2:31:72:0c:e0:61:46:64:30:0a:8e:0f:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:9C:0C:5F:AE:59:90:66:18:9B:C4:2E:3A:87:BB:5C:D4:C4:23
X509v3 Authority Key Identifier:
keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:25:e1:58:02:22:ec:fe:ae:e3:0d:d6:e5:0d:71:29:4f:e3:
53:f7:c1:17:c1:53:d4:67:8d:c8:9d:d6:3c:b3:bd:ff:55:27:
d4:c9:5b:31:1d:ee:7b:cf:13:64:f6:6e:31:83:94:0e:4c:6e:
70:40:50:bb:13:19:ac:27:ac:0e:44:f3:95:50:b2:cb:2e:2f:
f0:ec:9d:89:e8:ad:0f:0b:0f:0e:ab:49:65:c2:a2:e2:d5:8c:
ab:48:25:2f:61:b0:d7:cc:df:30:3b:35:1b:41:17:09:32:e4:
c7:a5:18:13:93:05:55:ca:f4:66:92:4d:db:45:5b:d9:f3:63:
e2:59:fc:1c:24:6d:fb:1c:61:e0:35:2a:7d:61:ec:7b:34:85:
ab:cb:ef:7d:87:8f:0f:01:22:6d:ad:13:36:b3:6f:fa:2c:ab:
cc:e0:4e:6a:89:31:81:a5:09:c5:8f:31:16:93:45:dc:96:27:
eb:19:47:d4:88:c6:7b:ba:68:23:82:89:28:a5:d7:f5:31:0d:
a5:ce:1f:45:40:60:55:af:62:0f:87:97:b3:40:cf:bd:4c:a3:
6f:00:0f:cb:c1:d1:d8:3f:67:aa:2a:91:cc:80:62:fb:ec:78:
38:a0:13:bf:12:b1:e5:87:63:d8:8e:9f:ab:a4:13:01:5b:32:
ad:2b:57:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:58 2025 by rpki-client