Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: GsLGYP+UNQ/05JOjtbYUF0s8jdQNje1hPCWx16V7KZg=
Subject key identifier: E0:8B:7A:54:5B:34:E0:D3:C0:16:C9:78:E2:D9:61:9D:8E:F2:EA:06
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 0198D472E967ADCEEBFCF9A54B439E80F9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 122C
Signing time: Sat 23 Aug 2025 01:02:37 +0000
Manifest this update: Sat 23 Aug 2025 01:02:37 +0000
Manifest next update: Sun 24 Aug 2025 01:02:37 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: PeAe2WN/7MksrsbCWj1iAgfpTPiKAEnHmTPVBcYd2dE=)
2: q36KB3psJEdwM9htMyeD7v_JoOg.roa (hash: TalVhq3AmB2TIBAEtWkTlS4vjvUd3V9bg1ZpQQHry4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e9:67:ad:ce:eb:fc:f9:a5:4b:43:9e:80:f9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Aug 23 01:02:37 2025 GMT
Not After : Aug 24 01:02:37 2025 GMT
Subject: CN=e08b7a545b34e0d3c016c978e2d9619d8ef2ea06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:d2:9b:3f:b4:98:64:80:1a:64:fd:9c:b1:
f7:65:e8:12:cc:c2:ae:54:d2:3f:4b:90:3a:6d:60:
65:8d:24:d4:4c:9b:18:8b:79:25:fe:9c:0b:49:80:
ae:0b:36:d9:09:f7:f1:ad:e5:4c:cb:1f:e0:b8:3d:
42:23:21:16:26:96:a0:19:e2:91:0f:1a:ba:f3:3e:
34:0e:fe:34:97:61:08:71:5c:16:95:eb:26:35:89:
08:ba:83:da:0c:c3:c6:9d:49:c9:c7:95:03:02:10:
d7:b1:03:b8:53:9d:59:8b:75:8a:bc:4f:68:d3:d4:
88:8f:23:00:f1:45:c8:bf:89:15:87:34:e0:fc:50:
84:d0:8a:29:52:e1:2e:38:4b:5a:5d:6b:65:6a:1b:
4b:24:86:7c:d6:24:d9:15:be:cf:9d:2c:32:af:9d:
5b:58:42:cb:0a:8b:8b:97:f9:e5:ed:5c:23:4c:6f:
9e:72:b7:85:ea:3a:10:31:47:9d:f5:e0:87:56:e1:
91:06:85:b2:4a:09:b0:9a:19:fd:c7:5e:4b:e1:78:
8b:b1:ba:04:47:a1:d7:b1:4e:bd:b5:d3:af:37:2f:
04:22:09:87:06:29:73:e8:fc:02:c0:0d:59:b1:8f:
3b:33:ca:bb:22:c3:19:7e:08:67:f6:a1:da:ba:6d:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8B:7A:54:5B:34:E0:D3:C0:16:C9:78:E2:D9:61:9D:8E:F2:EA:06
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:44:87:15:92:c3:05:ee:9a:2f:98:9b:87:3e:70:53:d4:1b:
bc:dd:77:61:bc:db:65:f8:ab:fa:17:55:f6:49:9c:01:6e:89:
18:ba:9c:2c:3f:29:da:c4:d7:c2:9b:e2:44:1d:0a:c8:0e:dc:
ad:d0:2a:d8:cc:3d:66:5c:42:0e:be:a2:e7:ce:78:22:57:ce:
4b:be:4d:e7:68:92:9f:a0:4f:dd:16:b1:eb:39:94:5f:9f:69:
7d:e0:52:38:e4:79:72:79:33:fb:9f:37:96:ed:8b:2c:eb:64:
5a:1d:a6:b9:70:93:b6:f8:e3:9d:f5:e8:02:f8:be:92:88:cb:
15:ac:57:5a:9c:33:a8:d8:ac:34:33:3c:b9:40:98:ff:35:35:
68:c2:b3:ad:38:f4:8b:ba:e3:2e:95:91:06:76:8a:a0:c6:02:
8e:65:04:19:74:92:b0:a7:d2:76:13:bb:f1:0d:6c:83:5e:f0:
08:00:15:4c:46:b1:a1:d8:ad:90:df:8a:35:32:09:39:24:1b:
fa:c0:d5:e0:fb:4c:75:cc:04:00:77:20:47:52:6e:f7:21:4f:
15:d6:22:a1:ae:6e:94:20:6a:81:f0:fd:ea:af:d6:f6:82:5e:
da:b7:6c:6f:9c:01:e8:4a:a1:e6:b1:d1:33:e6:65:cf:a9:81:
27:89:ba:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:25 2025 by rpki-client