Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: ET5A5YcusqTDltMBWfkQDrFVXzAJ2U5oF8rLWHnIibU=
Subject key identifier: F4:CF:31:5B:B4:EF:F9:E6:50:2F:C3:BB:D8:9F:D1:57:51:8A:3F:8E
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 0197B96B39BA350F0DA714A2AFA3E18AA95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 0C2D
Signing time: Sun 29 Jun 2025 02:01:41 +0000
Manifest this update: Sun 29 Jun 2025 02:01:41 +0000
Manifest next update: Mon 30 Jun 2025 02:01:41 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: 7z/j+NsNejGm0GVNf+4vwDXXOw5lI2cZ91xtFSV260A=)
2: 7d2ToMhT-5ZAU4qsYQXruw_MoIU.roa (hash: vm5X1sab9HJagyLFII3df7BekSqzu2gNn9apIe4J5uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:39:ba:35:0f:0d:a7:14:a2:af:a3:e1:8a:a9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Jun 29 02:01:41 2025 GMT
Not After : Jun 30 02:01:41 2025 GMT
Subject: CN=f4cf315bb4eff9e6502fc3bbd89fd157518a3f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:de:9e:ff:f6:4b:87:8d:03:91:de:72:c6:
fd:1b:80:3e:51:d1:1b:23:b8:25:22:3f:29:7e:35:
cc:52:b3:2f:b5:e5:fd:04:8d:c8:66:cf:35:33:2d:
b7:a9:6d:a2:6b:98:37:76:df:3e:b4:b0:4d:1a:03:
f2:e8:70:d5:cf:56:67:f2:43:42:fc:a2:bf:1f:bb:
5e:25:31:76:a8:6e:ec:a0:08:96:f6:a3:d4:75:3d:
6f:50:b8:80:66:8a:6b:07:3c:8f:8e:b0:c5:19:b2:
b9:93:59:96:dc:0c:d7:85:d8:66:e0:5f:46:43:c6:
e3:23:46:58:52:dd:97:48:ca:6f:8e:9a:5f:de:81:
32:10:9d:00:ca:12:5a:c3:ab:01:23:5f:da:c8:48:
c9:7e:b0:eb:96:d4:c3:b4:6a:5c:01:97:fe:4b:92:
32:be:6b:9a:b9:9e:f7:83:52:a9:09:c7:ca:ee:a1:
d9:68:fc:3b:2e:ab:3a:40:b4:b5:6a:81:cc:22:63:
08:3b:a0:e8:ce:b9:bf:df:fa:85:65:27:bb:ba:37:
9d:83:52:01:98:c5:a4:92:59:ef:a8:3b:e9:06:f8:
b7:f3:45:a5:e9:7f:52:72:fc:34:46:58:7b:19:69:
77:7c:15:ff:17:88:ab:6c:0f:3a:30:b3:e5:33:16:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CF:31:5B:B4:EF:F9:E6:50:2F:C3:BB:D8:9F:D1:57:51:8A:3F:8E
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b7:8d:00:5e:c6:99:d6:bb:ae:cb:a0:c1:85:15:14:22:3c:
6e:25:0f:53:19:08:68:03:92:3f:7c:0c:02:08:6e:4f:2e:7a:
97:59:f5:df:d6:ff:6b:fd:5f:94:d8:1a:a0:f6:9b:7a:cf:6b:
9c:01:08:b2:76:92:3a:fc:51:62:2d:70:fa:4c:12:46:4d:2c:
e0:a5:ec:a2:ba:31:03:bd:fb:4f:da:11:1e:56:32:ce:f5:ae:
82:58:59:5a:f8:30:27:8c:b5:be:25:6d:cb:b0:72:12:b3:d8:
b9:c2:a1:11:c5:cb:83:5e:d8:a4:bd:ee:b1:89:28:02:9a:fc:
d3:73:f3:07:77:2c:f4:5a:1d:9e:69:9c:8f:e9:d9:18:65:d2:
6d:ff:61:87:46:28:ae:c3:ec:70:18:25:d2:83:8c:8e:13:a0:
1d:ab:e6:33:31:7f:6a:e3:a8:13:79:2f:b2:96:9b:e0:18:e4:
9c:6a:6d:b0:6a:a8:a4:21:e6:db:e1:fc:b5:87:38:92:f4:f4:
cc:e7:64:b2:14:d0:6e:18:97:a9:57:8f:a8:93:0a:37:b0:9e:
46:f8:9c:c7:77:a2:70:1d:6d:c3:b7:69:9d:a4:de:26:58:21:
63:aa:71:7d:07:20:e4:56:33:ff:a6:a1:c5:30:6c:2e:93:4b:
b3:57:d3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:32:02 2025 by rpki-client