Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: qi4JiOBC6vQIbenf954Tj8oO9eNbZWRszhgmg9+zZXs=
Subject key identifier: F2:AE:C5:34:02:65:63:FB:35:25:AC:C2:39:D0:43:D6:8D:6D:7C:B8
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 0197C0B65085428C9BEA00CCE634BA593A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 15C4
Signing time: Mon 30 Jun 2025 12:01:03 +0000
Manifest this update: Mon 30 Jun 2025 12:01:03 +0000
Manifest next update: Tue 01 Jul 2025 12:01:03 +0000
Files and hashes: 1: Nt8U8Z3kL0IxgChONZlb9wxsuew.roa (hash: q3bR4XOi7x1iBnBhyEpixBllLru5p/ZAb3mokEcvE1o=)
2: Zzn898alwJ-ZQ7BYnOoh1f9BcU0.roa (hash: ZfOULEhZA5KSiQObf0XfCp/rLlK21I+b+ae43OnFfqk=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: 5nLydwrw3YtZ/X+ZI5OyHNAdiOr75HGKyfUxgL5SS2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:50:85:42:8c:9b:ea:00:cc:e6:34:ba:59:3a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Jun 30 12:01:03 2025 GMT
Not After : Jul 1 12:01:03 2025 GMT
Subject: CN=f2aec534026563fb3525acc239d043d68d6d7cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:58:7d:72:02:d4:e3:63:6e:1c:6d:74:dc:
35:42:93:6b:28:13:aa:88:3d:bd:f9:86:34:86:78:
5b:c5:19:84:15:c2:c6:37:21:50:19:1d:8c:e9:1e:
0b:08:52:17:b2:f1:fb:f7:e8:78:8d:e8:75:cd:fb:
f3:c6:20:df:6f:38:99:23:73:39:9c:98:45:3a:59:
ea:a2:90:bd:27:d9:7a:ca:9c:39:f7:1f:f4:92:b3:
7c:35:66:ae:05:d2:10:9b:22:5e:5e:8f:31:a3:07:
fa:7d:aa:27:97:f1:b9:76:f1:76:0c:9c:a7:08:3a:
2e:2e:9c:a4:2d:cf:43:a7:c4:1e:cc:12:56:fd:64:
e6:1d:79:1f:14:29:ab:d1:86:dd:cc:5f:83:74:1c:
cd:c6:1f:14:6e:ce:5a:d8:30:2b:25:2d:00:3e:32:
ff:d9:fd:60:7f:f3:7c:ef:55:c5:58:23:1c:96:62:
4f:ec:d2:29:5b:f0:c5:a9:a4:b9:85:44:fb:43:a6:
b8:d1:31:84:28:0e:aa:44:55:a5:c7:5a:60:73:07:
ee:f6:0c:98:b7:db:4f:38:95:e0:7e:45:17:00:06:
46:51:fe:39:57:11:3b:d9:28:1d:44:bc:d6:02:4e:
b3:ef:06:52:87:51:3b:f7:cd:0c:15:be:b1:7f:2d:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AE:C5:34:02:65:63:FB:35:25:AC:C2:39:D0:43:D6:8D:6D:7C:B8
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:03:c1:f9:f2:66:b2:b4:41:b1:47:e9:6a:f9:52:7a:cd:0b:
5d:57:24:19:fa:37:53:fa:01:ab:41:6c:b9:ba:4a:6f:e6:ae:
0d:12:d6:f1:e2:1b:b2:3f:84:7b:05:84:62:89:37:d1:6a:73:
81:2c:22:b4:0f:95:07:88:c1:59:9e:a4:fb:e3:ba:a3:5e:f7:
0a:70:f0:b6:3e:54:c0:d4:09:4b:a7:5d:14:3c:c1:2a:4f:f0:
3b:7b:e8:88:3a:62:9d:71:b2:be:33:41:0c:7e:7a:a2:79:e2:
e1:99:8c:52:2b:e2:45:7e:88:2a:7c:38:45:5d:e4:cb:bf:e3:
62:4f:0b:52:c8:08:99:70:67:6b:c2:18:6e:8c:04:0e:25:98:
b6:1e:7c:08:28:83:a4:71:a1:70:10:c8:13:75:45:18:5f:27:
49:c7:a9:8b:b8:d4:88:15:21:2d:f9:20:63:22:d6:c8:42:29:
41:6e:75:88:65:56:99:e5:97:ef:2d:56:5b:33:7e:02:b7:1a:
13:2f:c9:3c:57:14:fd:e2:33:94:4f:f8:ee:86:53:d7:81:9d:
41:b9:9d:82:f3:04:1d:ae:ac:ec:d1:32:63:92:43:5d:9e:0c:
16:84:cf:55:df:96:72:16:53:9f:fa:7d:8b:1f:b9:c6:8a:0a:
5b:b0:03:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:12:48 2025 by rpki-client