Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json)
Hash identifier: Sw3wiavoF0pPX1N3JSHDUH/K+XZ0LE4hv8RxqbcOjKU=
Subject key identifier: FE:86:CF:3A:94:06:65:1C:6B:57:27:08:D0:4D:EE:38:74:84:91:5C
Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888
Certificate serial: 0197B6A250B7235AF5F27EFE4799B85012F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
Manifest number: 0911
Signing time: Sat 28 Jun 2025 13:03:00 +0000
Manifest this update: Sat 28 Jun 2025 13:03:00 +0000
Manifest next update: Sun 29 Jun 2025 13:03:00 +0000
Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: rNQZ2SgAxaZYW6ov3VKu1W0gPozUyD8m3DtXIYqnHC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:50:b7:23:5a:f5:f2:7e:fe:47:99:b8:50:12:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888
Validity
Not Before: Jun 28 13:03:00 2025 GMT
Not After : Jun 29 13:03:00 2025 GMT
Subject: CN=fe86cf3a9406651c6b572708d04dee387484915c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:41:a9:2e:58:5f:95:17:61:fd:ed:be:f1:f9:
21:55:26:4c:83:c2:b0:70:86:bc:5f:27:31:a4:80:
49:5d:a5:e8:1e:09:dc:a1:e8:e0:6e:7a:7c:22:2c:
63:f6:06:b6:c2:46:19:6d:ec:0b:70:bf:27:eb:80:
87:f4:c5:3b:a6:60:01:68:e3:d0:80:a9:09:b4:d9:
ef:d2:f8:d9:98:43:06:f8:33:2c:e3:65:39:57:92:
9c:d7:01:2f:b6:3a:ec:71:61:c3:ac:04:8c:ca:d5:
7d:3f:ce:27:f9:f4:7e:a7:fa:41:68:bf:bf:83:d1:
14:f3:52:fa:fa:80:60:af:37:92:04:50:6e:67:26:
72:62:ab:b7:c3:26:d5:e0:05:b3:ea:a0:58:b5:fd:
3c:c2:9c:66:d1:d3:e4:ce:44:e3:a3:c8:14:bd:4e:
91:12:45:3c:07:4b:76:ca:0d:85:af:1e:e5:d0:93:
e8:8e:35:60:e3:22:b6:6c:3d:b9:da:ee:33:43:87:
42:47:17:2d:7e:ff:39:69:7e:ec:04:cc:95:44:90:
29:38:ea:8a:5c:25:44:d4:c6:54:ba:a2:5d:27:69:
0b:2b:8d:b0:f2:97:1b:bf:48:14:99:a4:7c:06:6e:
30:af:18:93:6b:f6:3b:84:2b:72:94:3f:9b:53:5a:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:86:CF:3A:94:06:65:1C:6B:57:27:08:D0:4D:EE:38:74:84:91:5C
X509v3 Authority Key Identifier:
keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:90:55:88:e3:a1:e3:e6:b0:25:8d:2f:c3:df:07:9f:2e:76:
45:6e:ab:52:a9:31:4a:01:1b:55:0d:8e:c3:2a:9e:27:0b:84:
d1:74:e3:ca:04:4a:2d:c0:62:89:6c:ca:9b:fa:d2:92:aa:66:
e7:c8:8e:5b:b5:5d:38:49:da:da:c5:50:93:a0:65:99:66:1e:
c9:a1:eb:18:5a:ab:5f:7d:3a:1b:78:06:61:b2:ff:87:79:c4:
9f:48:16:c9:73:23:d2:43:15:cc:5c:ad:8e:9a:1e:31:01:bc:
78:bb:83:c3:37:a0:85:e4:9b:c9:69:bf:9d:6c:be:e5:35:35:
05:17:1d:7d:32:2e:74:74:90:b2:d8:21:53:29:5b:e9:ef:be:
4a:88:13:54:ec:44:28:b4:ad:dd:12:17:4f:13:58:5d:d5:5d:
7f:63:29:bc:07:58:a4:8b:1b:85:75:a6:bd:3d:d0:45:7d:65:
fa:17:63:2b:c3:a6:cf:0b:2f:22:8e:30:f5:80:c7:ec:68:43:
fa:bb:1b:21:65:10:cf:bd:79:a6:db:f6:4b:2f:a7:b2:46:32:
96:b1:1f:5a:26:9f:9c:7c:1e:84:7d:e6:90:08:f0:57:34:0a:
14:a4:6c:66:76:a9:9d:fd:80:2b:89:64:e3:0e:c1:1f:53:fb:
6e:48:73:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:28 2025 by rpki-client