Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: a6OU3im/grxavR0WFtrqQO9N+MNcq2/mrK+P9YFN638=
Subject key identifier: A4:03:19:CE:BB:C3:DA:73:37:7F:E5:E6:F1:96:C8:34:09:45:C3:68
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 0197D097CB2C91BD8A41DE4A1F8C30CC0F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 1555
Signing time: Thu 03 Jul 2025 14:01:38 +0000
Manifest this update: Thu 03 Jul 2025 14:01:38 +0000
Manifest next update: Fri 04 Jul 2025 14:01:38 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: T1e86oyrTWS+4l5H7xesJrnloW9XCs4nRBoC4bghKxQ=)
2: 8weSLoMuWV3usouK6kCYa4DYS08.roa (hash: 7ICkBxIDMmpq8Ld9uPPV7RzwfZWRVUlPiTj2akXnPTs=)
3: g0yMZ7il9emhd1JLy44dXjFFySY.roa (hash: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:97:cb:2c:91:bd:8a:41:de:4a:1f:8c:30:cc:0f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Jul 3 14:01:38 2025 GMT
Not After : Jul 4 14:01:38 2025 GMT
Subject: CN=a40319cebbc3da73377fe5e6f196c8340945c368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:13:37:69:35:80:5f:9a:73:11:7c:09:b3:
bd:ec:d1:3a:89:e1:9c:3a:36:2b:87:b7:cb:a6:8c:
c5:26:4e:36:2d:91:8c:32:28:0b:46:be:8d:b9:a0:
33:52:cc:99:e3:55:1b:7f:21:f8:d9:41:a1:b9:01:
63:c1:3e:54:d5:7b:c3:41:00:ba:d3:37:9a:85:b6:
bf:a6:32:77:05:d1:24:a2:d8:55:15:98:d8:f6:27:
56:41:63:4f:f9:ba:e0:f0:27:fc:97:af:d6:24:97:
88:7a:59:32:bd:62:a6:c6:41:a6:90:82:1d:e6:a0:
3f:a4:f2:73:e9:eb:06:8e:f9:a3:d3:36:f8:29:11:
da:b7:7d:61:a9:d4:63:d8:59:43:96:c5:8c:a6:59:
78:71:2d:a2:ce:d1:91:15:90:82:6d:47:c5:4a:26:
0a:5a:d5:1c:85:5e:2a:76:95:cc:31:3c:bf:6a:85:
79:3b:db:47:14:b9:a3:24:3e:04:11:2e:b8:b3:8b:
41:e7:71:16:5e:77:a7:86:12:06:27:5c:ad:b8:44:
4a:4e:ca:7d:29:b3:e1:f6:99:c8:3a:2c:87:75:9b:
2e:55:dd:a5:97:f3:2d:6b:a7:8c:4e:58:2e:03:03:
01:d1:be:25:b8:6c:c9:12:17:43:fd:b9:df:08:6c:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:03:19:CE:BB:C3:DA:73:37:7F:E5:E6:F1:96:C8:34:09:45:C3:68
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f1:25:75:45:82:72:51:d4:60:d6:4b:45:3e:18:5b:2f:c2:
2f:b4:9c:49:39:c2:29:f3:7a:bf:38:dc:40:21:c9:f1:d8:40:
e7:74:7d:60:2e:b8:35:36:f3:0e:54:eb:d0:73:60:66:c0:9b:
2c:f7:8c:1e:e1:ee:e7:ed:82:df:b9:1e:da:e5:82:dd:33:f9:
37:6c:b4:a4:d8:13:52:f4:99:e4:d7:d5:dc:1e:fd:cb:58:93:
2e:71:c0:c8:96:8c:4c:7c:33:3f:30:78:06:c0:29:ff:f1:d3:
65:bf:1f:5a:13:16:ea:05:6f:a0:5a:18:f9:8d:b3:4a:a7:88:
f7:67:0f:49:b8:48:2a:b7:1c:66:88:1d:8d:ed:ea:f6:df:b1:
ac:ce:cc:d3:36:61:33:f7:ed:85:6f:10:62:89:60:0a:bc:cd:
3b:64:fa:dd:68:12:c1:45:ec:eb:28:c4:be:7f:01:57:0d:c3:
2f:1e:13:8f:fb:14:ac:2d:1e:71:3f:ab:56:6a:ac:b9:cd:a1:
05:89:3f:93:e3:f0:50:92:33:22:64:cf:8f:8f:f2:39:ab:f2:
d5:9f:70:e0:83:61:89:0f:bd:ea:b4:21:8e:83:ca:48:de:73:
96:8d:42:b1:5b:00:e5:6c:17:82:1c:fd:4d:fc:b4:6f:5d:bf:
f6:f3:37:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:28:45 2025 by rpki-client