Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File: 3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier: WipyFQhv9kfZWrLLAsflGKrs7+buxpFNzGTFZGOF3zE=
Subject key identifier: 81:30:27:29:01:A6:BD:0E:03:07:4B:A2:7A:8A:4E:50:1B:28:4B:C3
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer: /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial: 0197B7452F110D257034D19FF24DB56B0E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number: 0B2A
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: 2cyOcCmTR2xrFfkY5PIFyXpZfiHqRHKxvRA63sVdRYY=)
2: wkcnsTzQjgo9eEySS50APSZKqWQ.roa (hash: SKv++65s2nAU0vbkJDBqrGiZUMw6xX7YKBnglQkJRuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2f:11:0d:25:70:34:d1:9f:f2:4d:b5:6b:0e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=8130272901a6bd0e03074ba27a8a4e501b284bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:5e:7d:ec:c3:9d:0f:3a:19:05:83:7b:dd:
07:65:9e:1b:8e:d7:af:91:75:49:96:5d:ae:91:78:
4b:f7:ff:82:b9:38:0a:a1:f7:7e:8d:83:d7:22:1d:
00:56:f5:9a:a4:31:35:1b:5e:f5:8c:90:fe:10:06:
26:9f:1b:3f:62:33:21:a7:b7:70:42:8a:96:31:f1:
f8:cc:66:25:5b:df:bd:74:04:6f:47:8b:d7:28:66:
2d:6c:90:a0:ce:50:17:77:bf:19:6a:0d:e5:8b:4e:
8c:33:b2:2c:8a:46:04:18:2a:e4:a3:dc:ae:20:ef:
88:2b:21:31:05:d6:91:dc:57:cc:42:bd:af:8f:4f:
bc:17:8d:fe:1e:c9:0d:48:f4:e4:ca:de:7e:8e:cc:
fc:27:d1:9f:c1:22:2e:9e:3c:47:8a:96:25:19:bb:
ae:53:d2:8b:12:d7:9d:0e:97:b9:d7:af:1f:39:05:
1c:56:fd:69:e5:a7:6d:12:1d:38:44:d0:cc:fa:f7:
f6:8b:47:dc:2f:18:ec:16:3a:6c:11:f2:c9:e6:2a:
17:0e:8e:78:57:a3:fa:39:5b:57:f0:c7:b3:ce:c9:
29:d5:d0:55:be:87:dc:71:b8:27:14:91:ef:e4:f7:
0f:e9:fd:7c:2b:e3:cd:a1:09:f8:71:b4:92:00:6d:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:30:27:29:01:A6:BD:0E:03:07:4B:A2:7A:8A:4E:50:1B:28:4B:C3
X509v3 Authority Key Identifier:
keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:01:d6:c0:19:5b:a3:5f:8d:6b:79:fe:52:eb:1d:cc:dd:6f:
54:f3:0f:69:d4:1a:a9:e8:d6:54:18:93:5f:30:db:9c:f4:48:
60:3a:94:01:85:c2:34:82:b9:70:85:b4:43:ab:a2:51:48:94:
70:97:f0:91:84:60:f8:66:ca:04:c9:c3:5b:5a:80:88:eb:43:
c3:f9:e1:80:b2:ba:d7:33:fd:87:4f:b0:11:7e:2f:d2:1f:aa:
53:a5:35:10:4e:08:13:fa:23:ad:df:1a:e2:f0:bf:40:a9:9d:
01:c4:a7:ea:e6:92:2f:9d:9c:70:e7:f6:5b:8a:51:f0:da:56:
d8:cd:71:ab:8e:ae:fd:1b:05:11:48:76:2d:99:93:38:48:24:
b9:5e:17:36:88:71:aa:55:15:c4:b9:b9:70:be:88:99:3b:10:
83:f9:9c:3f:e5:07:73:99:6f:5e:49:c8:7d:1d:96:f6:d2:da:
35:c8:ed:fb:48:b4:b1:e8:e7:91:d0:ef:d7:f5:ec:b0:ba:81:
a5:a7:1c:b5:9f:7e:09:71:d7:b5:bf:06:ba:5c:8d:be:0b:02:
29:70:ec:0d:4d:23:60:ef:69:46:31:5a:23:9e:28:e6:26:9c:
9d:65:f2:5f:d5:1d:ed:34:6d:3f:ad:85:cf:14:73:a7:48:53:
5c:26:9f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:16 2025 by rpki-client