Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
File: 3ozUdpwybYRex1OmcNo6yptp7hU.mft (raw, json)
Hash identifier: e7/eTx0CpWmOxbD8dsZ5iSAPASwf4zXGQPk8+pvOJ3U=
Subject key identifier: C1:EA:DA:A5:B2:C2:6D:9E:D4:B3:08:8F:5F:48:31:58:FA:3C:EE:31
Authority key identifier: DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
Certificate issuer: /CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Certificate serial: 0197B6D78F184C5267FFB925BFE799CDD8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
Manifest number: 11
Signing time: Sat 28 Jun 2025 14:01:09 +0000
Manifest this update: Sat 28 Jun 2025 14:01:09 +0000
Manifest next update: Sun 29 Jun 2025 14:01:09 +0000
Files and hashes: 1: 3ozUdpwybYRex1OmcNo6yptp7hU.crl (hash: zDLK8htm1CrgTSlp2MwzrQjQ19SNIRei9UzCWLTmxXM=)
2: aizIqKjXfqxu2L9Do5SClHmuuHM.roa (hash: VG8x//8NLvTPdp7pULF9tX4PLkvXpJw9Gy/1Yk1G5KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8f:18:4c:52:67:ff:b9:25:bf:e7:99:cd:d8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Validity
Not Before: Jun 28 14:01:09 2025 GMT
Not After : Jun 29 14:01:09 2025 GMT
Subject: CN=c1eadaa5b2c26d9ed4b3088f5f483158fa3cee31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:48:fa:9e:13:49:44:b8:94:15:e1:00:78:
8c:b1:d8:93:a9:40:2c:6e:a3:44:df:03:84:29:23:
14:42:f2:35:a2:f0:4b:f0:91:bc:c7:91:a9:86:0c:
70:d3:5d:01:b5:8f:95:fc:7d:56:62:07:89:5d:a4:
2f:21:e0:94:ea:36:b8:8c:cf:f1:7b:cf:db:92:7d:
2e:9f:ba:fb:42:63:4a:5f:d7:a4:fd:61:a9:e7:f4:
d8:df:81:01:f0:0d:33:80:c3:a8:99:82:8c:55:14:
72:2d:e8:0d:c2:a1:48:95:2d:33:23:b1:5a:8a:02:
f8:74:e7:7d:28:53:20:e7:98:9a:5b:e9:66:de:86:
ec:ad:b8:d7:0c:78:82:24:56:ff:d9:06:a4:57:18:
63:0f:ff:5f:e2:ca:a5:e4:cd:6c:19:fa:08:9f:f8:
bf:aa:29:2e:fb:14:f0:fc:e2:a1:c8:65:22:42:ae:
20:0f:2e:a0:2c:fe:e3:78:ee:bf:04:67:3f:28:8c:
e3:d5:53:21:60:c8:c1:d8:6f:47:33:a4:2c:ee:2b:
b2:8f:4e:1d:da:cd:2b:67:ca:99:7b:0e:9b:82:ea:
1c:49:dd:16:ed:83:f4:88:76:df:ca:4e:d2:fd:6e:
dc:81:bd:67:c9:7f:df:3e:69:b5:7d:a5:5d:c0:57:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EA:DA:A5:B2:C2:6D:9E:D4:B3:08:8F:5F:48:31:58:FA:3C:EE:31
X509v3 Authority Key Identifier:
keyid:DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5d:37:70:1a:98:d4:70:06:0a:f4:5e:ce:51:d0:52:3a:05:
73:f5:5c:84:4c:aa:60:0c:e4:a5:1d:d1:72:df:ed:ff:65:bc:
46:83:d6:41:84:81:37:2b:a6:7f:5c:87:21:e7:fb:34:aa:45:
ca:4d:48:ef:64:6e:fd:28:a7:8c:53:48:2f:f3:1d:11:c3:e8:
8b:2b:c9:51:48:7d:27:79:2b:ad:b4:be:13:0c:48:de:a7:e8:
60:29:78:03:90:97:6f:b2:d3:f0:de:dc:70:f5:5c:73:ee:a2:
cc:e9:d4:15:31:71:59:de:58:b6:65:b1:f7:cf:d2:74:27:84:
a2:82:86:a2:0e:5b:1d:92:6c:1a:e9:17:0a:ce:5b:c3:48:f6:
3c:85:7e:26:c8:1c:45:ec:e2:8f:3d:f8:99:33:54:1c:9a:17:
10:47:eb:02:fa:89:fe:45:9c:3d:0f:54:5e:b1:3b:48:a2:96:
dc:1a:d3:39:68:81:c5:47:cc:84:bf:cd:f4:a3:cb:78:08:2b:
b1:b0:19:c2:b3:ee:7c:da:13:a1:ce:2a:46:59:74:b3:b3:5c:
87:d9:fe:7b:12:34:20:5f:b1:cd:e3:be:dc:87:f6:09:8c:66:
d1:aa:f9:16:84:1c:85:2c:a8:07:e0:c0:3a:e0:5a:8f:97:ea:
85:65:13:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:27 2025 by rpki-client