
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier: ArDwdP37kCF9IWP+t6j68ppUTCeFyC5sGmBFbSmeggI=
Subject key identifier: F3:21:91:14:14:12:AE:88:8D:67:68:82:D6:39:C5:66:BB:30:50:77
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer: /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial: 019895C8FA0F930DE560B2BAA53328499E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number: 05AA
Signing time: Sun 10 Aug 2025 21:00:33 +0000
Manifest this update: Sun 10 Aug 2025 21:00:33 +0000
Manifest next update: Mon 11 Aug 2025 21:00:33 +0000
Files and hashes: 1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: Q1WQ/nb26pAghhLVv4nHkENFLFxxGTrDvBDceTm99tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c8:fa:0f:93:0d:e5:60:b2:ba:a5:33:28:49:9e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Validity
Not Before: Aug 10 21:00:33 2025 GMT
Not After : Aug 11 21:00:33 2025 GMT
Subject: CN=f32191141412ae888d676882d639c566bb305077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:72:8e:f7:74:56:00:70:10:8b:0e:6f:55:
5b:58:fa:7e:99:d6:aa:58:21:1a:ec:de:e4:18:15:
ad:1a:c2:65:6e:94:e6:8d:9f:1e:ca:8a:c7:c1:ce:
fd:ac:e9:ee:97:36:c3:73:b9:74:ae:61:c7:62:32:
7a:e9:dc:ec:9b:e4:e3:c6:1b:04:bc:11:54:73:bb:
a4:17:f4:08:25:23:e4:7c:a4:38:f7:af:7e:0d:3c:
ee:55:d0:4c:81:0b:41:fd:01:6b:93:94:5c:c5:cf:
ee:0e:2e:59:d0:df:c7:ce:f0:2f:e5:56:e3:7f:10:
54:16:eb:85:62:12:3d:71:a3:06:4b:c0:32:5c:84:
37:47:bd:e1:27:16:2a:93:83:62:ea:02:7d:94:2b:
13:e9:b0:f9:45:4a:54:a0:a3:7a:ca:31:33:af:91:
c6:2c:f8:e2:0e:99:2c:5c:dd:6c:e5:cb:4f:c1:bb:
4a:49:3c:d3:c0:ee:61:9d:02:26:aa:4d:22:b4:d9:
d8:9a:3e:a7:c1:f0:b6:b1:f3:43:eb:47:3e:ce:ca:
d1:76:54:6a:03:15:7a:3e:9c:57:40:36:aa:a6:f7:
77:02:3a:f9:39:6d:82:e2:e3:11:44:72:64:22:b9:
27:02:0c:af:27:de:b2:50:2c:dc:f3:56:33:ae:5d:
48:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:21:91:14:14:12:AE:88:8D:67:68:82:D6:39:C5:66:BB:30:50:77
X509v3 Authority Key Identifier:
keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:96:4a:eb:f3:48:e4:c6:b5:07:52:72:d7:1e:d5:80:d5:c3:
6c:1b:64:67:7d:ba:ea:be:7c:95:93:3e:b5:49:97:c9:bc:f3:
9f:f4:0f:f0:ff:e2:9c:16:a9:b4:87:89:c6:4b:40:fb:bf:d9:
0a:ae:7d:4f:f1:6b:66:f3:5b:60:04:03:aa:29:5e:e7:e7:31:
b8:24:26:70:f0:18:99:b0:c8:7c:ed:1d:42:3b:1e:07:4c:c0:
ab:bd:c4:06:08:86:f0:ab:3d:cc:b4:67:0f:d2:ba:17:88:37:
a5:ab:bb:e1:65:4b:5d:ed:20:29:7c:04:8b:54:d0:ed:56:27:
e9:4b:da:d5:2c:a7:26:4f:8e:65:e5:15:6a:8d:38:4b:81:97:
12:09:6f:dc:0e:df:bc:ea:bb:c1:68:03:16:bd:fd:e9:42:3c:
06:50:7d:ab:58:4c:9e:75:54:4e:7d:3e:13:d9:1b:8b:ca:71:
87:fd:5d:8a:a1:41:78:91:4e:76:7f:97:00:2b:59:e7:db:49:
60:dd:48:4d:d2:20:5b:bd:a0:3e:1f:c9:3b:86:a6:88:05:be:
f5:5b:68:5f:8e:a1:e2:f2:3d:cf:94:a6:b2:b3:eb:2c:0f:99:
d9:f5:65:d3:9e:6f:88:e3:01:a3:71:fb:a4:57:88:fe:5b:b7:
be:bf:56:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:32 2025 by rpki-client