Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json)
Hash identifier: oquJQn4rwUyK+zS21AMIwteg89e28iMlYi549paZjlU=
Subject key identifier: 8E:A3:E3:4F:6E:41:24:5C:BC:D7:34:02:8A:DF:A1:2D:FD:4B:05:99
Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888
Certificate serial: 0198D6602C9C8D8F1760B8ACA87E4F216AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
Manifest number: 09A6
Signing time: Sat 23 Aug 2025 10:01:23 +0000
Manifest this update: Sat 23 Aug 2025 10:01:23 +0000
Manifest next update: Sun 24 Aug 2025 10:01:23 +0000
Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: fez7eJb+/5M+QsafOLVmBt/14R2qftEWQa16z33gHow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:2c:9c:8d:8f:17:60:b8:ac:a8:7e:4f:21:6a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888
Validity
Not Before: Aug 23 10:01:23 2025 GMT
Not After : Aug 24 10:01:23 2025 GMT
Subject: CN=8ea3e34f6e41245cbcd734028adfa12dfd4b0599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:31:54:49:bb:0c:4b:f3:28:bd:b0:bc:5c:
ee:97:57:4d:95:24:a2:0a:3d:88:84:cf:48:80:92:
66:27:a6:29:b7:ec:34:4b:29:e2:59:ed:07:9e:0f:
4e:75:14:d9:f0:69:ff:c8:61:2d:50:7a:82:d1:df:
83:5b:6b:a4:2b:a2:de:da:f8:67:e0:7c:2f:50:57:
61:cf:dc:15:12:b7:f2:84:74:ec:bb:b7:ab:88:74:
30:b4:48:8e:02:e6:17:5e:a1:85:bc:78:50:3c:70:
8b:18:3f:fd:64:41:3b:6c:6f:57:f4:1b:4d:9a:45:
6a:f1:0f:37:05:05:21:e1:bf:23:70:9f:5c:d3:ec:
de:2c:6f:c6:58:fc:cd:0e:c2:03:33:e2:e4:e0:ad:
24:a9:a2:d8:14:31:c2:b2:ae:77:eb:71:83:1d:6c:
79:c5:a7:de:7c:9b:f6:b1:c7:ac:d2:33:62:5f:c7:
f6:d1:f6:6f:62:4c:a4:e8:7a:39:5b:52:a8:9d:13:
8a:08:b5:cb:d3:96:0e:8e:e9:be:f9:64:52:f7:50:
17:d8:21:f9:d6:20:fe:fb:5f:f6:b1:a7:95:86:5e:
cc:39:47:1e:72:03:6c:88:54:63:03:31:a7:91:cd:
45:53:43:e1:f1:c0:ba:25:55:d4:fa:36:23:e1:79:
c9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A3:E3:4F:6E:41:24:5C:BC:D7:34:02:8A:DF:A1:2D:FD:4B:05:99
X509v3 Authority Key Identifier:
keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:72:c3:8d:51:d9:2b:83:1b:a4:07:d0:e6:23:6b:92:fa:85:
14:36:42:83:3d:7f:1f:af:89:64:1f:e4:6f:19:9e:9b:7e:c0:
42:8a:04:bd:2d:0b:08:59:b9:a4:40:c1:6d:bc:30:24:74:c5:
8b:50:6b:fa:2a:a4:81:fa:37:b4:ba:f4:16:4d:fd:1e:1a:c6:
27:12:99:21:e3:94:4c:9a:a3:81:d3:0e:d6:33:c9:0f:ee:a4:
8c:49:6b:e0:21:86:32:85:16:bf:f9:c3:6b:3a:52:8c:b6:86:
88:fb:28:7f:51:43:c6:37:59:8c:f2:aa:b7:0c:cd:4b:ae:e4:
c6:35:a3:76:88:e1:1a:ba:d4:4d:c0:ab:d7:e6:c3:15:87:f7:
61:d5:8c:8e:4c:c5:20:71:68:f1:e6:3f:8a:56:9a:c0:cb:76:
fd:c3:4c:bd:d4:08:73:09:b7:a1:3d:5d:95:57:74:6e:b2:f0:
b4:08:a5:28:09:83:11:4e:02:ff:c2:cf:41:09:cc:61:e8:96:
b9:1f:bc:b2:1f:66:9d:4e:8b:09:8c:00:4e:a9:2d:0f:05:e7:
24:6f:ac:5b:7e:20:03:32:75:62:d0:4a:35:ec:6a:a1:44:c9:
68:fe:ce:8e:d8:3e:d1:be:fe:85:7f:6c:68:2c:00:40:76:cc:
34:04:bd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:17 2025 by rpki-client