Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json)
Hash identifier: cxZuBGzPeur872EF0JDKs36hWUihKDpstMElGQcEm/w=
Subject key identifier: 05:4A:8E:24:7B:6D:61:D5:89:2B:0D:80:F7:CF:93:31:6F:AC:9C:46
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 0198D5BC067219FF15E2BD1D0BA02092BD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
Manifest number: 1243
Signing time: Sat 23 Aug 2025 07:02:06 +0000
Manifest this update: Sat 23 Aug 2025 07:02:06 +0000
Manifest next update: Sun 24 Aug 2025 07:02:06 +0000
Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: ODJwQRLyLd4M9ErnCCh/x6x0la9IP7rKalKHle+bG60=)
2: Swt5oFMQEQM3RtDOFxZCp2VObOM.roa (hash: d7VQjqZCXdGvodDw1gYlaDWjc+rRxAbFcC4KKSSYHOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:06:72:19:ff:15:e2:bd:1d:0b:a0:20:92:bd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: Aug 23 07:02:06 2025 GMT
Not After : Aug 24 07:02:06 2025 GMT
Subject: CN=054a8e247b6d61d5892b0d80f7cf93316fac9c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:51:d1:74:3e:23:4b:de:64:e9:93:7a:d3:
ce:a8:90:b2:e2:ce:50:1b:8b:c9:0d:76:d4:2e:88:
e7:7e:24:72:68:fb:55:00:44:e9:27:7d:7a:cf:b1:
bb:ed:68:87:e4:00:bf:1c:1d:31:e8:61:b3:a9:87:
c3:68:3f:d6:59:e8:a8:e9:63:8a:f3:4d:f0:1f:6c:
9f:34:99:4f:dc:8e:51:62:ff:5a:00:21:e4:de:0c:
ad:99:45:de:20:73:57:d4:c3:e7:ff:10:09:69:98:
6d:f7:2b:b8:58:02:ce:61:3c:91:a1:7d:b1:2e:68:
44:dd:db:4f:16:21:31:04:13:a7:3f:91:38:42:99:
70:8a:87:87:01:75:1b:37:f4:ab:fc:99:fb:83:cb:
f8:fd:00:9a:c2:8c:bd:8d:c6:76:6e:ce:a5:6d:1e:
8a:6e:97:77:f8:20:6a:6b:67:3a:46:eb:d3:8c:9d:
19:f3:eb:9e:6c:fc:23:0b:c6:da:43:10:76:da:59:
32:96:44:d3:a4:01:5e:87:68:40:09:97:60:7d:8a:
f5:55:ad:ff:03:2d:79:44:7f:c0:ad:6c:c1:36:d8:
3b:45:d1:1e:6b:e1:8d:1f:0a:24:3e:c8:d2:91:85:
90:1a:52:15:cb:19:ee:e5:07:57:95:7e:8d:e0:4f:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4A:8E:24:7B:6D:61:D5:89:2B:0D:80:F7:CF:93:31:6F:AC:9C:46
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ef:0c:2e:f5:06:44:17:a3:df:c0:ac:89:b9:a6:93:6c:d5:
55:35:9f:28:ea:2a:6d:ca:27:65:f1:b9:e2:0b:d2:77:9a:03:
23:c9:81:ad:2d:92:85:bf:88:07:7f:d7:f8:dc:5f:40:97:a4:
f7:6e:95:90:96:e1:7b:47:08:3a:9f:e0:b8:e0:6f:7c:96:63:
a7:07:d5:b9:34:26:65:c1:e6:5a:b3:e1:d6:4b:82:46:fe:80:
99:64:9e:71:d3:21:f6:74:2e:47:48:35:5c:59:a3:52:4d:30:
ef:ef:04:bf:b7:10:26:7a:23:74:bf:1b:e1:00:04:7b:f3:ba:
fa:a9:5f:e4:38:9e:e2:62:be:ce:73:6e:4b:b7:dc:79:69:81:
4c:63:9d:8c:b0:e1:53:ca:8e:73:ec:1c:82:f4:d5:d8:13:f5:
c9:b5:39:ff:98:1a:cf:25:08:3c:f0:f0:36:d2:55:f7:0c:7e:
f5:da:c4:a4:a7:5a:29:38:ff:45:62:aa:b6:c2:f8:39:78:0e:
f0:9b:70:44:39:23:27:02:9f:eb:87:8f:bb:97:04:17:40:54:
10:6d:2f:ca:9c:a6:7f:66:4d:25:00:22:81:b6:37:c4:08:9b:
a2:56:b8:10:ef:40:2b:82:c5:c7:d8:0b:b2:29:68:70:85:f4:
0a:d8:ce:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:32 2025 by rpki-client