Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: qOc2nFKyAj7OqZdNUT4sl2sQed8utVoR6yJgf8TqLFY=
Subject key identifier: 36:58:81:5A:F3:8C:EB:20:09:BB:64:AD:E2:B2:82:5E:4B:C1:F8:91
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 0197B88F795B43E02F6432FB37170892DE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 11FE
Signing time: Sat 28 Jun 2025 22:01:39 +0000
Manifest this update: Sat 28 Jun 2025 22:01:39 +0000
Manifest next update: Sun 29 Jun 2025 22:01:39 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: sKfpOOixuYch3muIX8aGhZ/P6ZoNCl8WTHziwmeouok=)
2: qlMHdAg_ZeG5jpZEikZxyiq5rOM.roa (hash: r9NbCVDLWns0v6U+hfflkmDI70L6VCrJW0Q5+div1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:79:5b:43:e0:2f:64:32:fb:37:17:08:92:de:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: Jun 28 22:01:39 2025 GMT
Not After : Jun 29 22:01:39 2025 GMT
Subject: CN=3658815af38ceb2009bb64ade2b2825e4bc1f891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:23:20:0e:d1:70:4e:91:f4:a2:28:0a:df:
c5:a9:a5:da:9f:e6:9b:de:f1:99:fe:e7:15:70:8c:
38:ac:37:19:ff:04:c4:f1:0b:8b:42:ff:86:4f:92:
ff:36:b4:b7:f4:c3:1d:52:de:76:f4:06:7c:c9:56:
02:a6:29:d8:f8:38:b4:27:4b:3a:05:25:99:24:46:
18:7a:07:37:73:7c:8c:b6:09:01:41:a0:21:38:1d:
ce:51:3e:f0:32:a4:f7:12:0f:0e:33:2a:7d:e8:b7:
30:56:81:48:ae:e3:3e:3f:99:d3:21:6a:50:6d:6f:
46:f6:f3:e3:31:4d:f9:61:a7:32:e9:d2:14:33:8c:
7a:d8:fe:5c:fb:83:85:d2:34:b4:3d:0a:26:a1:ad:
ca:76:17:4a:f6:ed:6f:68:19:27:54:88:f5:21:ff:
3d:13:c5:ed:29:f0:a4:6f:d4:fe:bc:64:8f:46:2f:
97:d9:1a:18:d0:41:e1:2b:51:ba:72:f1:b3:66:28:
72:ec:8a:d4:d7:eb:69:c9:f2:ce:aa:81:42:e1:9f:
ef:8e:c7:fb:52:53:a5:ff:05:24:6e:ae:3c:64:68:
31:44:e7:06:04:74:9c:49:61:08:83:d5:ef:73:3b:
05:5f:b5:c5:1b:ca:45:1d:23:1e:b9:fa:08:30:10:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:58:81:5A:F3:8C:EB:20:09:BB:64:AD:E2:B2:82:5E:4B:C1:F8:91
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2f:64:ff:f9:b6:79:62:b8:b6:c3:b7:6a:dd:64:07:70:16:
9b:b6:2c:59:3a:c4:20:03:7f:78:f6:d9:fa:74:e0:57:34:65:
7f:95:50:40:7e:71:05:f1:2f:1b:ba:75:77:42:c8:54:2e:38:
c8:03:e3:30:eb:94:07:27:53:c9:45:1e:ce:55:87:00:37:d7:
3b:a1:90:02:73:64:6f:f5:a0:5d:67:58:14:04:bd:af:67:26:
31:13:20:17:06:39:12:91:43:dd:0c:8d:92:70:f5:b6:5d:8a:
81:85:ee:95:21:9a:33:10:8a:cb:3c:c0:24:b5:c8:5f:7c:e1:
b6:45:4c:db:f3:5d:c7:0c:13:c6:b3:f1:65:8b:42:26:61:01:
82:97:c1:40:d4:7a:84:e6:56:ab:77:5c:d8:ed:be:44:5f:e4:
2e:8b:b9:bf:36:8a:b4:65:95:80:be:ff:91:9a:ad:75:c0:58:
59:72:37:f8:86:56:82:cc:81:23:e9:d5:d1:a5:90:ed:70:8a:
d8:4d:ca:e8:30:ff:91:8a:f6:d1:9c:6d:5c:04:ee:7f:1f:e7:
8f:bd:72:79:39:79:6d:85:e7:ef:46:01:09:2c:c2:e9:e8:2e:
df:d8:42:92:98:05:98:b6:ff:9d:f5:c8:bb:a0:ca:86:51:1a:
e6:d2:7b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:55 2025 by rpki-client