Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
File: e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft (raw, json)
Hash identifier: ++kd/wisHcfR2bTt75SBmIiulAzQDXyJfiNEW/vCZWc=
Subject key identifier: 03:8A:F8:03:9D:95:4A:15:C9:03:70:B6:0A:BF:0C:B8:6A:8E:28:70
Authority key identifier: 7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF
Certificate issuer: /CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
Certificate serial: 019A4DE173EB1A58F5DFA26953B82300CDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
Manifest number: 0FDF
Signing time: Tue 04 Nov 2025 08:00:12 +0000
Manifest this update: Tue 04 Nov 2025 08:00:12 +0000
Manifest next update: Wed 05 Nov 2025 08:00:12 +0000
Files and hashes: 1: e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl (hash: G4JuE2rSTPN4nMXUKbwePNahfkId5RFtdxiWirwh5+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:73:eb:1a:58:f5:df:a2:69:53:b8:23:00:cd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
Validity
Not Before: Nov 4 08:00:12 2025 GMT
Not After : Nov 5 08:00:12 2025 GMT
Subject: CN=038af8039d954a15c90370b60abf0cb86a8e2870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:78:ee:49:38:87:87:06:2c:0a:c6:22:95:
74:25:9e:45:40:1d:2b:aa:e7:50:ca:04:2e:f9:69:
0f:32:0b:0a:c2:36:a9:0d:45:27:10:31:37:f4:bc:
0f:5b:85:7a:37:e2:4c:f8:ea:65:fd:8c:9b:ea:84:
bd:d3:8c:c9:fe:3b:05:90:3a:38:fc:bf:35:b6:f7:
1f:b6:70:c0:c5:cf:23:df:5c:86:9a:04:85:02:e4:
dd:9a:b6:e6:1e:d8:c6:30:00:3b:a3:84:11:f0:21:
b2:16:69:a4:22:36:9e:18:d3:a0:bd:18:0b:c6:ce:
d7:a0:18:8e:c1:1a:27:80:39:46:9c:3e:45:73:e5:
65:f3:2b:cd:30:bb:60:f0:f9:63:70:69:f2:12:a6:
de:a3:90:6b:0e:fc:47:93:2b:ab:d2:db:18:6c:ca:
0c:bc:4f:52:70:8f:61:23:f8:6d:30:40:91:be:2a:
10:70:f2:91:00:52:65:13:82:71:88:0f:ac:ec:cf:
e3:eb:65:1a:22:95:4f:0b:37:b4:74:7b:5a:d0:2b:
c0:87:51:5d:23:9d:79:f7:64:7a:2a:3f:7f:bd:d3:
e5:0b:ac:10:8f:db:e0:41:4c:bb:e1:f5:77:16:1d:
75:43:a9:14:20:23:60:00:33:ac:da:8e:28:cd:ed:
6b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8A:F8:03:9D:95:4A:15:C9:03:70:B6:0A:BF:0C:B8:6A:8E:28:70
X509v3 Authority Key Identifier:
keyid:7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fa:77:23:b4:d5:2b:79:d5:87:dd:a9:aa:36:b6:c5:0b:9e:
fc:86:d8:12:a2:ce:d1:d7:13:8d:88:12:8b:8e:59:50:bf:f1:
f8:bb:3a:61:6b:e5:7e:2e:7b:06:90:73:a6:97:1e:6b:9b:27:
2a:98:4a:88:40:5d:93:b1:28:86:65:bb:ac:c7:9b:62:d6:54:
8f:71:e8:dc:4d:00:b9:cf:f0:fa:f4:b2:e6:64:98:d6:f6:6a:
0d:98:12:c6:9d:25:df:f3:a9:89:29:08:ec:a1:06:c8:24:57:
8f:b5:c2:9d:77:99:60:15:5e:2f:95:10:b6:8b:d1:04:ef:6d:
d3:31:d6:ad:fa:ae:67:80:06:4f:0c:08:49:cd:34:1f:d5:24:
f6:23:f2:e0:f3:16:95:f7:4a:f7:5b:86:58:77:1f:7e:97:5f:
19:0c:66:35:dd:d2:19:fc:19:12:78:54:9b:30:c9:19:4a:34:
9d:bf:66:e6:8a:55:b9:25:6e:1a:79:f2:c8:86:8c:2e:c0:c3:
98:c4:21:de:e1:b8:6f:85:65:ef:2d:92:69:15:5d:ad:00:ce:
2a:54:be:28:86:f9:59:0c:5f:7c:18:40:ca:69:e3:d2:c7:33:
5b:55:be:bd:dc:88:fb:0e:d2:60:0b:80:c4:80:5f:18:df:27:
2b:91:b9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:07 2025 by rpki-client