Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: Xp7RkiiikNcTht6Bf9n08NB2Fn+L+CDsLTZHX+wIxoE=
Subject key identifier: 45:37:A5:3A:C3:9A:CD:1A:2F:DB:41:3F:AD:B7:D9:88:90:61:23:E6
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 0198D54E6BCD1F551ACF244766AF90E24BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 0CC0
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: pNT9ZwZwTthydI4J5Y+u2p175W8T4Oa1rviRKFP3dsM=)
2: 7d2ToMhT-5ZAU4qsYQXruw_MoIU.roa (hash: vm5X1sab9HJagyLFII3df7BekSqzu2gNn9apIe4J5uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6b:cd:1f:55:1a:cf:24:47:66:af:90:e2:4b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=4537a53ac39acd1a2fdb413fadb7d988906123e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fa:3a:c4:e6:8d:35:74:b1:35:04:63:3a:69:
07:d8:6a:d2:43:fd:5e:42:22:ce:96:f8:97:e3:fd:
b2:a1:b8:17:70:92:ae:c7:c0:54:a4:6f:c4:b9:29:
23:51:a6:94:c2:17:5c:8b:8b:67:13:17:b0:2c:1a:
6d:3f:1c:41:86:50:1a:f9:80:95:70:eb:d6:4f:7e:
75:59:32:e5:fc:1a:6f:f9:7f:9f:19:d6:00:9d:71:
e5:c2:28:0b:58:5c:05:b7:86:87:2c:d5:21:b8:d0:
05:61:48:42:1b:29:13:8c:d4:68:ca:61:0a:5d:79:
fa:0e:47:b1:a0:1e:52:e7:62:a1:ab:94:03:8e:ea:
8a:24:44:4b:a5:86:e7:0b:d8:af:a7:ec:b4:7c:28:
80:d8:5f:ee:9d:65:57:c1:a3:9a:84:73:8c:cf:e9:
df:bf:46:6d:c7:e5:18:8f:9d:26:c0:0e:df:18:97:
99:b1:0d:a6:19:f2:e0:08:86:e2:68:06:3b:0d:c6:
04:16:cc:16:9d:5c:36:1d:c0:eb:3f:05:2b:ff:51:
08:99:60:84:7a:ab:09:f1:9d:e6:b6:1f:e0:99:cb:
99:4c:bc:db:f7:e2:aa:8c:96:0a:e7:2a:87:39:04:
41:0c:b3:92:fd:f4:58:28:b7:e7:1c:85:8c:4e:24:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:37:A5:3A:C3:9A:CD:1A:2F:DB:41:3F:AD:B7:D9:88:90:61:23:E6
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:64:c4:a3:73:d3:71:74:6c:af:5e:a6:b4:10:7d:23:e6:51:
cc:16:a1:82:97:78:7a:8d:b9:c7:c4:03:57:73:bd:3f:9c:02:
69:3d:b9:4e:84:c0:b4:9f:f6:91:1e:55:5f:b5:c3:19:bc:17:
61:83:07:fa:8b:a1:de:1b:51:d0:69:75:0b:be:21:01:cb:b7:
85:8f:76:24:19:22:5b:9e:56:0f:c3:d4:b6:bd:29:ce:a8:eb:
40:94:ef:60:8a:5b:11:12:a2:bc:83:a6:70:2a:5a:b9:a9:81:
c7:67:b2:55:3e:df:bc:90:cb:3f:3b:e4:67:56:a3:94:bd:90:
82:fd:ae:a1:4c:f3:8d:40:53:3e:b1:57:05:ff:67:c0:31:e7:
b8:17:20:cf:6a:a6:e7:9d:4c:db:1b:46:db:fb:9f:b8:6c:50:
6b:10:d7:97:39:ae:15:e1:4f:33:c0:1c:cf:7a:80:f7:da:d6:
c7:19:9b:03:72:1c:d6:33:7c:a4:37:69:aa:1b:ad:13:72:cc:
23:ea:19:61:59:1a:03:99:98:e7:9d:47:3d:32:0d:78:03:60:
e5:00:fd:2f:0c:5b:b8:46:61:e1:5f:f5:99:6c:9e:cf:0f:86:
fd:1a:80:b4:28:93:42:62:f6:cf:be:1a:71:56:e0:f9:57:85:
a1:9d:63:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:33 2025 by rpki-client