Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: 95+8meHyS0PHTZkxkcMfGqTQbQe7amkD+N/PL2KoYho=
Subject key identifier: 12:F7:09:D6:53:B5:4A:07:67:20:A5:9D:C5:CE:44:0E:71:3F:16:96
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 0197B6A0611ECE17501075D400F25B6BCA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:00:53 +0000
Manifest this update: Sat 28 Jun 2025 13:00:53 +0000
Manifest next update: Sun 29 Jun 2025 13:00:53 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: JjhGBCaLAlm58Jg3VAUTqv+r4Ic8zgwqI7dP649GC4A=)
2: cvAMZ-azozJjAwqBJfc2rmmZkME.roa (hash: Gewk40CVQw5q21r2SfPnFc/pGMGpE0T4SZt3vyzVUaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:61:1e:ce:17:50:10:75:d4:00:f2:5b:6b:ca:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Jun 28 13:00:53 2025 GMT
Not After : Jun 29 13:00:53 2025 GMT
Subject: CN=12f709d653b54a076720a59dc5ce440e713f1696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:de:5e:fc:be:85:6c:fc:5b:96:88:b9:38:
ef:4c:28:a0:a0:2b:78:38:de:87:f1:cd:58:7b:3c:
a1:df:12:0e:a7:4f:12:ff:59:97:11:91:ae:a5:48:
c7:c3:3d:1a:e5:70:28:dc:3b:a4:c7:7b:1f:50:aa:
0e:7e:cc:54:33:44:71:5b:3b:5c:68:c2:af:22:4f:
3f:64:10:48:83:96:3a:b0:39:fe:c7:99:57:2b:27:
93:85:3e:9e:88:bf:c5:d9:49:fb:4e:4b:57:4b:d3:
68:06:46:91:80:23:00:4b:10:38:19:c4:69:ec:5b:
ad:cc:9d:1a:51:ac:a4:76:40:64:1a:85:f4:f8:99:
b5:fa:2a:4c:ac:0e:d7:cd:6a:eb:57:59:e2:f3:34:
18:10:75:ef:dc:43:55:f4:76:73:83:42:92:68:d6:
4e:04:c1:4b:b7:fc:7d:3c:af:9b:cc:ba:f0:97:27:
2a:ed:df:fc:c2:c2:e9:f1:1e:f5:6d:0b:8b:49:df:
d1:b8:a6:71:b5:8a:63:85:c7:d0:fb:a0:1c:9d:f7:
86:1e:4c:e0:4f:66:5c:11:a0:a7:3f:f6:ec:9d:4f:
e9:d1:24:b2:ec:a3:4c:98:cf:42:14:cf:e3:7e:41:
34:b7:70:3f:5c:29:28:bf:d0:ae:42:42:bf:ad:e2:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F7:09:D6:53:B5:4A:07:67:20:A5:9D:C5:CE:44:0E:71:3F:16:96
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:08:bc:c5:10:65:73:85:90:ba:27:1e:7d:f0:46:67:01:15:
33:a3:bb:bf:8e:06:d2:9c:3b:b3:f6:2e:4d:f8:8c:9a:64:eb:
5a:17:6e:45:cd:4f:92:fa:5b:05:6d:1b:ad:e4:7b:22:c6:4c:
16:25:e7:51:6d:cc:64:bb:a6:3b:7a:16:49:73:8d:b7:2a:83:
7a:df:2d:07:e7:c1:e6:50:32:08:69:65:99:cc:16:1e:58:e0:
1b:7b:60:8d:c9:28:46:9a:75:21:c0:8a:d2:19:53:e4:c4:69:
c3:39:4a:57:48:a7:25:df:e6:d3:4a:f5:6d:98:62:ef:b0:5c:
8d:79:cd:7d:a6:12:cb:a4:66:2a:98:74:c2:0d:a0:f6:0a:0d:
d1:66:2e:96:b1:fa:30:45:62:3c:3a:73:ac:aa:dc:4a:6b:9b:
52:c0:b5:a0:d0:da:51:e1:dc:8f:cb:ef:b6:79:3b:51:c9:d1:
15:ca:27:cd:4e:98:dd:c8:ab:b3:35:06:5b:7e:ae:83:17:bb:
b3:84:9f:0a:49:53:fd:e2:b2:d0:18:3b:80:87:c6:c3:ac:38:
44:b1:40:ef:18:0a:1f:61:e3:2c:b8:d9:c6:56:d0:48:64:77:
c0:0e:c1:a2:5b:da:eb:ce:93:ad:5c:01:06:1c:5a:44:2e:a9:
08:27:41:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:18 2025 by rpki-client