
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier: L/t0+13Tn9pcourjZIOvd57hcX19xe2/0TSH7IHSyws=
Subject key identifier: 7A:8B:32:DB:56:FD:6E:9E:5B:16:08:A8:1C:0C:8D:18:E7:09:92:E3
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer: /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial: 01969416605EF3E5B25137B59133313DCC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number: 04A0
Signing time: Sat 03 May 2025 03:00:16 +0000
Manifest this update: Sat 03 May 2025 03:00:16 +0000
Manifest next update: Sun 04 May 2025 03:00:16 +0000
Files and hashes: 1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: VSL3EjGzn9pa41gUMNCfs0R9piZj0dFyJcaawIyrob8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:16:60:5e:f3:e5:b2:51:37:b5:91:33:31:3d:cc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Validity
Not Before: May 3 03:00:16 2025 GMT
Not After : May 4 03:00:16 2025 GMT
Subject: CN=7a8b32db56fd6e9e5b1608a81c0c8d18e70992e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:73:92:d2:67:7d:3b:91:cb:7a:9d:7e:a8:
a5:01:ab:d7:6c:86:72:e5:cb:71:51:24:78:0d:27:
36:9f:b9:b2:2f:a8:9e:00:02:cb:e3:32:de:28:b8:
87:0a:f4:43:5a:cd:ba:d2:4a:82:0e:72:65:d2:8b:
6d:83:a3:4a:8c:6a:a7:35:bf:e1:44:a3:d6:8e:3b:
68:51:d3:a9:c0:5c:36:23:a0:94:f7:40:cc:f6:f4:
a8:71:b0:4b:31:32:99:26:dc:65:bc:09:ea:42:d8:
6f:f4:a2:5e:ae:45:e7:e0:98:67:e3:06:fa:10:72:
26:ee:73:3f:c1:3f:72:53:77:9c:ab:27:7f:73:8a:
96:ac:f8:5c:03:73:fd:a7:92:98:99:61:ea:19:5b:
43:8b:91:29:cd:c3:26:7e:ab:3c:dd:01:df:ec:c9:
53:62:ed:dc:af:b8:ea:c7:42:37:38:5d:5e:0e:59:
cc:cd:28:45:25:cc:e9:35:5e:85:07:d1:8a:87:c2:
d0:b8:cd:7a:4d:fa:e7:e6:f3:11:4c:49:e5:7c:86:
53:2f:1c:16:9f:5e:b6:ed:fc:0d:fd:8b:71:6e:f5:
d5:c0:3b:25:49:55:00:9f:07:c8:ed:f2:4c:3d:ef:
69:d7:aa:40:44:f9:a6:da:7c:a6:4b:64:c1:67:a0:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8B:32:DB:56:FD:6E:9E:5B:16:08:A8:1C:0C:8D:18:E7:09:92:E3
X509v3 Authority Key Identifier:
keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9c:0b:6e:55:a4:e4:62:6c:0c:77:d8:85:d7:a7:ca:78:11:
75:09:09:fe:fa:36:ae:db:c0:64:ae:5b:23:bb:fe:ae:6d:ff:
4f:5b:a4:60:5e:37:a5:79:7c:d4:ef:47:4e:12:11:c6:d4:3f:
00:a5:d4:d1:45:01:75:68:6d:dc:1b:5a:3a:22:9f:83:cf:45:
3a:54:da:f7:08:a3:a1:78:e1:d1:9a:04:89:36:88:71:9d:92:
bd:1b:96:eb:af:67:f0:09:b6:ca:2d:df:09:0f:f3:70:48:fd:
dc:ea:82:22:93:7e:92:6b:44:1a:48:10:29:ce:dd:a8:52:05:
1f:d6:59:cf:fc:66:16:63:de:16:4d:c3:6a:7f:08:a0:29:ff:
17:a5:df:e2:32:08:a7:8d:2e:b6:fc:e9:9d:ea:a7:64:c9:09:
72:3d:72:4e:19:46:37:56:90:a7:83:ff:10:d2:9f:cd:03:51:
8e:d1:6d:d0:47:28:12:f3:8f:0b:98:34:73:ba:97:5e:30:ad:
d8:5f:5b:61:fc:4f:d4:e3:c4:22:2e:61:eb:0a:61:93:72:a4:
60:a0:cc:53:f1:c5:85:11:14:05:68:84:d3:86:e4:a5:20:0b:
5e:b3:e3:77:cb:21:a8:b7:91:82:33:24:72:4d:b6:aa:31:9f:
c7:6f:19:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaUFmBe8+WyUTe1kTMxPcxMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzQzZDMwN2E4YjcyYWM1MzJmNGNkODgzZjBjOTQyYmFk
MGY0YmUwHhcNMjUwNTAzMDMwMDE2WhcNMjUwNTA0MDMwMDE2WjAzMTEwLwYDVQQD
Eyg3YThiMzJkYjU2ZmQ2ZTllNWIxNjA4YTgxYzBjOGQxOGU3MDk5MmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjBzktJnfTuRy3qdfqilAavXbIZy
5ctxUSR4DSc2n7myL6ieAALL4zLeKLiHCvRDWs260kqCDnJl0ottg6NKjGqnNb/h
RKPWjjtoUdOpwFw2I6CU90DM9vSocbBLMTKZJtxlvAnqQthv9KJerkXn4Jhn4wb6
EHIm7nM/wT9yU3ecqyd/c4qWrPhcA3P9p5KYmWHqGVtDi5EpzcMmfqs83QHf7MlT
Yu3cr7jqx0I3OF1eDlnMzShFJczpNV6FB9GKh8LQuM16Tfrn5vMRTEnlfIZTLxwW
n1627fwN/YtxbvXVwDslSVUAnwfI7fJMPe9p16pARPmm2nymS2TBZ6BjHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqLMttW/W6eWxYIqBwMjRjnCZLjMB8GA1UdIwQY
MBaAFBN0PTB6i3KsUy9M2IPwyUK60PS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83ZTE1YzgtOTYzMS00ODM3LWEwNWQt
NDc3ZDFlOWE0MGI4LzEvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC83ZTE1YzgtOTYzMS00ODM3LWEwNWQtNDc3ZDFlOWE0MGI4
LzEvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpwLblWk
5GJsDHfYhdenyngRdQkJ/vo2rtvAZK5bI7v+rm3/T1ukYF43pXl81O9HThIRxtQ/
AKXU0UUBdWht3BtaOiKfg89FOlTa9wijoXjh0ZoEiTaIcZ2SvRuW669n8Am2yi3f
CQ/zcEj93OqCIpN+kmtEGkgQKc7dqFIFH9ZZz/xmFmPeFk3Dan8IoCn/F6Xf4jII
p40utvzpneqnZMkJcj1yThlGN1aQp4P/ENKfzQNRjtFt0EcoEvOPC5g0c7qXXjCt
2F9bYfxP1OPEIi5h6wphk3KkYKDMU/HFhREUBWiE04bkpSALXrPjd8shqLeRgjMk
ck22qjGfx28Z0g==
-----END CERTIFICATE-----
Generated at Sat May 3 12:37:56 2025 by rpki-client