Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
File: e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft (raw, json)
Hash identifier: zEoz47vBlZkk+7OvsIU2XZQcAYnAN6ybltLoN1YLwvc=
Subject key identifier: 85:47:00:CC:46:D5:D4:D9:6B:2A:34:90:54:04:8B:D2:63:5C:E7:EA
Authority key identifier: 7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF
Certificate issuer: /CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
Certificate serial: 019A72937565FCC272DA06C753335D5AFC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
Manifest number: 0FF2
Signing time: Tue 11 Nov 2025 11:00:57 +0000
Manifest this update: Tue 11 Nov 2025 11:00:57 +0000
Manifest next update: Wed 12 Nov 2025 11:00:57 +0000
Files and hashes: 1: e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl (hash: K7xE3KzHnlfgvPksHLeelIot1NFQiZnDhcdNYXvZPSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:75:65:fc:c2:72:da:06:c7:53:33:5d:5a:fc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
Validity
Not Before: Nov 11 11:00:57 2025 GMT
Not After : Nov 12 11:00:57 2025 GMT
Subject: CN=854700cc46d5d4d96b2a349054048bd2635ce7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:30:00:51:20:0f:4b:4c:0b:30:56:41:66:
fa:a7:7d:91:c3:48:5d:4b:f0:22:86:d1:11:f9:56:
04:93:e2:0d:22:d3:bd:03:c2:d2:7c:43:63:49:66:
1e:ca:00:8e:d7:43:b5:d3:a0:a8:64:ec:16:ad:08:
f4:de:6a:d0:27:0a:8c:51:c9:f5:0a:36:f7:be:a9:
79:67:dd:e7:d6:1d:c0:07:4e:e3:64:f2:22:73:45:
4f:c0:09:42:f9:a8:01:31:ff:8f:49:91:90:eb:b3:
b1:aa:c8:4c:72:86:cf:a0:e8:41:9f:cb:88:09:d6:
43:87:88:be:89:77:84:ec:c3:b2:5e:9b:07:3a:61:
39:4b:65:f0:54:64:f9:15:ac:7e:d3:ed:d2:d0:b2:
e8:52:7b:f0:9a:5b:04:e8:6b:5e:02:95:00:7d:f7:
f2:30:13:dd:13:b5:7f:bf:a8:e6:fd:87:17:39:70:
91:45:d6:bf:d2:14:7a:4f:a0:9b:e8:a8:79:d6:f8:
06:9e:cb:e2:c9:eb:5b:06:d2:20:55:23:23:8d:ce:
a2:b9:96:89:7a:92:69:9a:9a:fd:39:2a:1d:62:b8:
d5:ed:68:1d:1d:35:3f:3a:92:03:74:d5:e4:9a:5d:
12:31:54:ce:d7:74:70:d3:21:68:ba:50:52:f8:20:
d9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:47:00:CC:46:D5:D4:D9:6B:2A:34:90:54:04:8B:D2:63:5C:E7:EA
X509v3 Authority Key Identifier:
keyid:7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e5:ba:0c:dd:e0:f4:6b:91:4f:89:60:c2:60:fd:92:a8:ca:
e3:f1:7f:da:e9:57:ca:e0:d5:c1:73:a5:35:63:7b:43:b5:a3:
e0:45:49:a2:ae:e9:ac:f1:ec:f6:19:6a:b0:51:54:27:fd:23:
ac:9e:bb:47:7f:b2:e4:24:a4:bc:1b:f3:87:97:c1:ac:48:71:
7c:88:52:46:c4:5d:ae:6b:4b:b5:3a:19:73:fe:d1:5d:4f:f5:
e3:8e:92:51:47:7b:c7:11:00:6a:04:65:7c:ba:35:39:bf:4b:
ba:98:42:88:5f:6f:25:3c:75:46:ba:e7:43:1c:53:95:af:9c:
b3:20:20:fc:f8:c9:13:3d:f2:66:df:e1:b0:43:a4:42:3f:bf:
8e:0f:f0:49:50:c3:5c:de:c5:19:24:d6:09:19:91:75:9b:a9:
e1:12:cf:9f:97:c5:32:f8:85:49:7d:ac:a5:7c:61:b7:aa:2f:
ad:94:ae:cc:7f:c0:3c:30:0a:7f:57:10:bc:5e:95:97:2d:21:
d7:ea:d0:35:e9:e7:c9:b5:70:a0:8e:6c:81:36:4b:19:88:41:
b8:88:e7:5a:5e:a3:63:05:6e:e0:f1:b6:95:aa:b2:69:8b:86:
6b:b1:b6:7d:ba:57:2d:40:30:84:ce:bf:4b:e5:81:e8:30:e3:
56:ab:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:45 2025 by rpki-client