Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier: +FxdTtoCKOHgbwm1+qgkixwuWmD0aD1fPEYGgSZgcf8=
Subject key identifier: 83:5C:4D:96:C8:8F:BB:02:D0:74:E9:C4:CF:29:3D:1B:FF:DA:EA:65
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 0197B7EA97CE73DB6AECCD66F5BCFA60A63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number: 053A
Signing time: Sat 28 Jun 2025 19:01:34 +0000
Manifest this update: Sat 28 Jun 2025 19:01:34 +0000
Manifest next update: Sun 29 Jun 2025 19:01:34 +0000
Files and hashes: 1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: YY+L7i3ONA7X+o2E/D9bANsDOaoiT0sFipbm0ncvtXM=)
2: 3e96O0zql-DJprCN832OErRtWhY.roa (hash: YxeaSNUi71632qJZwGZv8Hu3idvAcvJX148wv4xYwpc=)
3: 6W_cfm-J8Jm0OpvUv8VEPziXvqU.roa (hash: ntUZRyHP+6WOiJkOEZN4Fuk1A/G3+Q9sIm3AVgN1jow=)
4: 7iPtEMlcS-95zv2l-9LcExzrIMU.roa (hash: wBjPWZtqDlytdLWUUgzq4RIZY24YAMcvhX1x0tSKKDI=)
5: w4HlqPi1OFmgM8LH-X3G7-isDzc.roa (hash: L9SAWLXqlEKX0McJ5PDoHev7KlGzu28LLCwZ81A7uqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:97:ce:73:db:6a:ec:cd:66:f5:bc:fa:60:a6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Jun 28 19:01:34 2025 GMT
Not After : Jun 29 19:01:34 2025 GMT
Subject: CN=835c4d96c88fbb02d074e9c4cf293d1bffdaea65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:f6:b5:69:ab:f4:54:50:ab:4a:52:d7:c2:
8b:50:b4:b6:01:09:34:9b:67:55:01:66:27:a3:1b:
15:99:66:2b:d2:ae:d6:e6:f0:b6:6b:7b:43:0f:a4:
7e:13:82:5e:fe:96:68:2b:6a:4b:2b:c9:77:1b:8a:
08:38:ec:6a:f5:55:6b:e3:f7:fd:6d:7e:5e:da:5b:
67:d6:2d:15:06:3a:b8:7d:94:e7:82:6d:f7:5b:b3:
d2:a8:53:43:58:e9:11:8f:3f:8c:3e:84:a9:91:09:
a3:59:f2:13:53:6f:5b:e9:6d:60:a1:7c:42:e3:8d:
0b:1c:5f:6f:21:35:36:d6:de:de:59:4e:ad:64:4d:
45:8d:bd:ad:63:46:e8:0f:bd:cd:63:da:09:c1:0b:
bc:0d:e1:20:91:8e:f9:80:7a:f1:3f:5a:3c:c6:ed:
b9:fc:ae:31:9f:d0:72:70:96:8b:68:64:0f:cd:6d:
f8:3f:24:22:ed:0b:5e:cd:d5:2f:da:e5:d2:01:89:
4e:a8:72:a4:7f:2a:43:32:b4:3d:0d:4e:4c:e2:39:
78:b8:c4:db:48:7e:aa:ce:1e:dc:d5:70:f5:0e:b2:
dc:25:d3:39:97:df:67:92:09:37:45:10:03:c5:bc:
dc:37:76:d7:9c:d4:b6:c9:8e:c9:2c:78:10:c1:23:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5C:4D:96:C8:8F:BB:02:D0:74:E9:C4:CF:29:3D:1B:FF:DA:EA:65
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:18:17:fe:fe:a5:e0:05:fb:00:11:68:68:bb:e0:a9:bc:12:
59:60:eb:10:71:17:52:b8:52:8e:83:aa:f0:20:9c:a9:3f:c7:
e5:fc:31:7c:0e:9c:52:b0:be:48:51:25:75:60:cf:ec:60:fe:
b6:16:c4:3f:ab:be:8d:8e:3c:0a:f8:4c:ad:df:d0:ae:b2:94:
41:ab:0f:ea:ef:0a:21:90:db:e1:ff:3b:25:d2:d0:6b:3b:9e:
84:b3:b4:86:74:a6:b7:7f:8e:e3:30:e5:0b:23:38:71:42:2d:
20:2d:19:c6:b1:e7:77:34:15:19:8f:75:f7:a7:30:32:bb:d0:
1d:32:26:93:a0:ec:4c:c4:63:86:30:bd:c6:97:50:9e:51:8e:
78:d8:66:0e:7c:eb:d7:c9:ca:b5:5a:cd:32:47:0c:a8:53:13:
9c:8f:72:51:5e:52:a1:a7:16:0d:4a:d8:bf:db:a3:f5:0e:36:
2c:04:a4:00:42:1b:6f:82:df:d8:26:f2:e5:b0:0c:ac:be:03:
fb:06:ae:0b:01:64:f9:44:76:80:38:57:cf:1d:81:67:7c:fe:
a1:a2:32:cd:81:d0:88:21:d8:e0:38:8d:76:0f:69:9e:fb:d5:
9a:ed:70:c7:cd:27:9d:b7:3e:b2:8a:11:52:bb:1b:c3:2d:98:
31:1a:8e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:05 2025 by rpki-client