Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
File: E3W0CTjYfNMycmqqSBqnGubphxc.mft (raw, json)
Hash identifier: RNF9kBhg0l8kupxJRaq0VoRyKQuCVbytmIYzaBtHoqU=
Subject key identifier: 59:01:C3:9F:43:DD:E4:5C:6D:3E:52:C0:A7:45:0B:78:86:B8:E8:C7
Authority key identifier: 13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
Certificate issuer: /CN=1375b40938d87cd332726aaa481aa71ae6e98717
Certificate serial: 019757FF8529E98DA577870EC863D2D65E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
Manifest number: 0E82
Signing time: Tue 10 Jun 2025 04:00:52 +0000
Manifest this update: Tue 10 Jun 2025 04:00:52 +0000
Manifest next update: Wed 11 Jun 2025 04:00:52 +0000
Files and hashes: 1: E3W0CTjYfNMycmqqSBqnGubphxc.crl (hash: PNl0DsDMMfXF2eg2Y9pe5LKtRvEPhkwQRpQhvq05sKs=)
2: mCL_9-CtuY-87CF98-9c33rXIUE.roa (hash: wOWeLe9RAlzQTuA4jLsQKE3f+PG+mmJoHLvKrWcnYc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:ff:85:29:e9:8d:a5:77:87:0e:c8:63:d2:d6:5e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1375b40938d87cd332726aaa481aa71ae6e98717
Validity
Not Before: Jun 10 04:00:52 2025 GMT
Not After : Jun 11 04:00:52 2025 GMT
Subject: CN=5901c39f43dde45c6d3e52c0a7450b7886b8e8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:9f:8c:12:90:6c:e2:0d:4d:94:41:e6:40:
77:93:05:f1:17:c8:ca:50:90:b7:3c:02:cd:b3:d4:
31:c9:a2:31:53:67:d5:f6:1e:e7:de:80:1c:f8:67:
04:35:84:7f:2c:8a:ca:34:b9:23:83:47:a3:bc:3b:
61:40:4f:db:5e:61:8f:5f:f7:1e:f3:f3:af:da:fc:
88:1a:7f:11:40:ba:a6:61:3c:ae:ae:a2:58:3a:cd:
b5:f2:af:f2:ea:fc:2c:6f:dd:4a:af:db:25:e4:ed:
bb:7a:fa:c5:14:79:82:79:c6:e5:a1:ff:e3:53:18:
13:77:a4:1a:17:f8:45:25:8f:f5:59:05:3a:83:a4:
e0:cd:df:97:b9:c4:e9:e1:9c:98:0e:13:d3:7b:e8:
93:bb:2b:9b:f7:ab:c9:0a:d4:cf:10:35:4b:9e:c0:
66:ba:30:82:f4:9d:2a:b4:b8:4d:7a:c0:41:26:61:
2f:22:02:3e:fb:93:96:14:5f:2d:f5:e2:61:c0:fc:
65:90:5e:b8:83:2a:f1:9d:b3:12:f5:d8:2d:2a:d7:
9d:35:76:11:2b:4b:91:9d:97:a2:64:f2:6a:04:ec:
96:5b:b6:6a:81:f4:80:24:67:ef:ac:28:7b:87:69:
3d:04:b8:5f:15:d4:a8:05:6b:d8:5d:d5:fd:2d:dd:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:01:C3:9F:43:DD:E4:5C:6D:3E:52:C0:A7:45:0B:78:86:B8:E8:C7
X509v3 Authority Key Identifier:
keyid:13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:96:01:28:17:20:9d:2c:d9:ec:4d:dc:3b:6b:d0:23:af:38:
22:0e:f4:00:e4:ff:67:f3:57:d8:51:34:60:8b:03:6d:4a:86:
6d:c1:b1:71:a0:92:12:70:c0:7c:c1:0a:1f:0f:9c:cb:9c:d7:
16:3c:1c:e9:78:0b:4f:c4:12:d0:43:ae:1d:be:18:fa:19:64:
b9:12:ed:d0:aa:5a:e8:44:27:e7:dc:43:af:8e:17:fd:94:52:
8d:cc:33:98:2a:24:c0:a5:27:d2:f8:29:d5:46:27:c1:8d:c6:
d6:06:ae:42:e9:35:29:e9:c9:60:6e:18:f0:c1:68:be:6f:ef:
c1:d9:81:78:18:86:7a:55:65:34:76:a9:fa:9a:d5:5f:7d:25:
f7:bb:8b:42:89:27:0e:a6:80:a4:07:07:fe:ab:ee:65:03:64:
10:f5:a1:c1:89:4f:f6:52:56:d4:fa:ed:4a:25:b4:5c:d8:d6:
06:38:62:82:29:98:6c:46:60:c8:8c:de:b1:90:f8:6e:4b:8c:
f2:c9:12:cd:4a:93:be:f3:a5:8d:21:82:a3:22:30:fd:91:5a:
6d:e8:56:24:0d:2f:a1:aa:0d:d9:e9:12:b4:af:af:03:b9:d0:
86:cc:b1:63:29:be:f1:74:bd:27:a4:8f:c8:94:bf:05:6e:8a:
a1:16:97:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:06:22 2025 by rpki-client