Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier: CifIKOMPia7GogQOayyKAGrGdDccvY4ZZvLBIFq6LYM=
Subject key identifier: 20:B6:04:10:DD:CC:63:97:A6:CA:E9:6B:51:44:BF:2E:AE:A0:21:46
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 0197B82139EE1D8F25692882FF74EAA006C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:01:14 +0000
Manifest this update: Sat 28 Jun 2025 20:01:14 +0000
Manifest next update: Sun 29 Jun 2025 20:01:14 +0000
Files and hashes: 1: G5zSLsnIB1Tf_3dQqRjF_q9OU44.roa (hash: 2jnkEsy8dLS8k5/gnwKVBaZUL+prmqB8W/32sROipKI=)
2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: HcEMiwi81Hb2EisuCVv/F/j9POnDmk6p0at4pSBELXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:39:ee:1d:8f:25:69:28:82:ff:74:ea:a0:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: Jun 28 20:01:14 2025 GMT
Not After : Jun 29 20:01:14 2025 GMT
Subject: CN=20b60410ddcc6397a6cae96b5144bf2eaea02146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:7b:94:91:d4:3a:8b:05:2f:2b:34:46:2a:
23:dd:59:3c:9d:75:3c:43:b3:a4:0c:90:95:3f:1d:
d8:d4:70:60:18:b6:52:74:5e:3c:d3:d9:fb:51:04:
99:51:78:ab:7b:7e:62:84:f5:76:92:29:52:fd:b1:
26:77:f8:10:c9:bb:d6:1c:58:3f:fe:8c:47:92:24:
df:0f:d2:92:3c:55:c1:28:b0:ce:ae:ef:fe:05:13:
f2:29:57:95:b0:f0:c4:fa:f5:3c:92:47:15:c1:7f:
eb:fd:f8:f0:a8:ac:f8:32:fc:0e:d0:e0:ad:02:b8:
67:db:28:db:7c:10:48:40:8d:37:08:b8:5e:7a:0d:
d1:32:5f:d0:97:e9:49:db:0e:f9:d4:f9:a8:bf:aa:
3b:91:bf:82:22:69:7d:e1:1c:13:a6:ed:bc:00:60:
76:d1:c1:23:b9:d8:ac:21:b5:8f:f3:c7:41:97:c8:
cf:3b:b1:53:9f:fa:8b:1d:a7:d1:37:69:f7:0a:f4:
1e:e0:50:7f:31:82:e3:20:99:3b:18:55:48:dd:69:
37:60:2c:28:4a:9e:13:bf:2f:c8:3d:7a:0a:05:81:
40:09:19:59:62:b9:24:1b:95:0e:7e:38:18:af:4b:
62:da:7b:d4:08:e8:e9:33:d5:ac:6d:96:af:56:b5:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B6:04:10:DD:CC:63:97:A6:CA:E9:6B:51:44:BF:2E:AE:A0:21:46
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:79:0b:c1:21:dc:bf:06:27:5e:c1:b3:6f:3b:30:15:e7:b8:
95:ce:0c:59:8a:e6:34:36:1e:15:4f:7b:35:83:52:58:b2:99:
2f:a3:e8:14:77:51:96:39:2c:b6:14:a8:ee:c3:aa:16:9f:fa:
fe:cd:61:03:2f:87:41:a1:de:67:51:0d:4b:97:8d:5c:33:95:
8a:be:ca:45:9e:1d:e3:e7:34:f9:4b:11:6e:94:87:03:f2:c1:
d6:98:9b:21:f0:08:d4:24:d0:b7:98:13:ee:a9:06:92:4a:c3:
db:11:91:ac:04:e1:d2:93:4d:93:4e:77:59:b6:1f:7e:c2:93:
16:11:a4:70:3e:0c:fc:9f:7e:ae:76:9f:fc:be:b5:21:d9:a8:
c0:08:a6:03:c5:1f:2f:bf:80:e4:01:08:24:9e:76:cd:50:2e:
1d:91:da:f9:2a:aa:be:3c:6f:26:d3:20:25:0e:cd:28:4f:e4:
a1:09:38:11:9f:1b:43:f4:16:fe:59:b6:00:70:db:cb:af:da:
c5:c0:a2:af:5a:81:65:8b:72:d5:39:7d:26:28:2f:df:50:a6:
31:67:72:e4:1d:9c:2e:fb:68:0a:3f:a4:78:d6:cc:46:5a:5b:
92:81:55:a6:45:73:51:ed:32:7e:44:90:5b:18:08:8a:57:06:
df:53:9d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:22 2025 by rpki-client