
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
File: e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft (raw, json)
Hash identifier: ybZ0GeWNgmQ+/gpZgbHDPRbjhIq1odlOd2BXJjiMDCY=
Subject key identifier: 77:FE:9C:92:E1:67:14:47:22:1F:6E:4E:57:EF:C4:EF:63:BC:D6:32
Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
Certificate issuer: /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Certificate serial: 01987298528A1DD0E7F5DF24F86A14AD7357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 01:00:41 +0000
Manifest this update: Mon 04 Aug 2025 01:00:41 +0000
Manifest next update: Tue 05 Aug 2025 01:00:41 +0000
Files and hashes: 1: e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl (hash: 3F/WSd/eWx7RaH/jUfLrelqnqO+rE8/r4eMUQsOERaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:52:8a:1d:d0:e7:f5:df:24:f8:6a:14:ad:73:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Validity
Not Before: Aug 4 01:00:41 2025 GMT
Not After : Aug 5 01:00:41 2025 GMT
Subject: CN=77fe9c92e1671447221f6e4e57efc4ef63bcd632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4c:5c:87:9d:a2:8e:09:eb:31:e7:15:4f:bd:
bf:8a:6a:cf:18:99:89:c0:51:d5:4e:89:ad:4f:26:
51:e3:50:a6:36:40:ff:45:b5:bb:07:8c:a5:96:be:
62:65:39:43:19:7a:b0:0f:37:9c:06:9b:8d:ea:5c:
70:cb:ab:65:6e:0e:51:f5:2f:f2:d4:dc:32:18:fc:
32:4a:b0:d3:86:eb:26:23:9f:a1:46:33:95:2c:f5:
eb:59:ae:37:80:83:15:78:a2:a5:88:c9:bd:36:4f:
d1:c9:aa:40:ee:14:e7:6c:00:18:bf:aa:cb:b0:ad:
fb:a6:15:a0:d9:f5:a5:b2:79:d3:ef:df:a4:48:1d:
8d:e2:e7:fa:3c:52:66:a7:fc:60:e9:44:9e:cd:b3:
cb:7b:92:dc:0c:f3:69:49:6a:d1:70:73:f5:5a:ca:
ad:0d:da:6c:71:45:75:ab:59:81:34:16:d7:f5:b8:
14:97:dd:eb:9c:69:44:04:43:63:da:32:dc:10:6b:
d4:05:5b:a5:eb:ad:1f:42:b4:d5:9f:9d:57:5f:4e:
d0:08:46:c9:4f:d3:f8:f8:4c:7d:a8:19:31:e2:1c:
88:a5:db:5d:7c:31:d0:b4:43:0e:2e:84:d3:d6:85:
d9:cf:ed:6b:62:fc:66:c7:41:57:a5:7b:84:a7:3d:
b9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FE:9C:92:E1:67:14:47:22:1F:6E:4E:57:EF:C4:EF:63:BC:D6:32
X509v3 Authority Key Identifier:
keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:17:c8:9b:ea:d3:c8:e0:f2:ce:d0:fa:8d:1b:f3:36:bd:5b:
1a:a8:e8:f0:2a:cb:62:b3:b5:26:64:16:1d:fb:a6:e1:5f:6b:
f1:0b:d9:7d:6c:51:49:39:53:fa:a1:15:11:44:6b:d1:0b:19:
e8:2c:36:62:df:f1:bc:2a:cf:05:94:3d:81:5c:1b:6f:30:22:
27:5a:1c:c8:fb:4b:a7:3a:79:1f:71:69:6f:65:a9:43:d8:f0:
34:ed:5d:37:25:31:2c:29:29:7d:c0:5c:20:db:0a:07:d5:02:
96:fc:13:7b:2d:85:07:f3:11:0b:71:36:04:5a:24:cb:98:d9:
74:95:cd:bd:64:f0:ea:2e:48:9d:ed:31:62:7e:70:3e:4c:ac:
ff:b2:34:51:d3:53:c2:0a:70:25:0a:58:df:a3:e5:34:1d:3f:
3c:71:83:c9:a2:d9:f8:ca:bf:0e:f6:79:f6:3e:63:f9:a2:fd:
a3:20:18:1b:a8:a3:a1:b2:ef:e4:4b:fc:e5:72:97:b5:7b:a7:
48:63:0d:b7:05:73:d2:c4:65:cb:9a:a2:8a:20:d4:22:86:51:
d0:99:30:7d:89:2a:33:14:f5:42:d5:8a:28:6c:f0:6d:20:e0:
d4:12:3f:fe:f8:58:e5:c9:70:f8:10:3d:b7:63:f1:29:d6:8e:
cb:d9:5b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:43 2025 by rpki-client