Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: cLTA8eJaHf01vB5ZSKynGmlTtAjVu35+rKOmk5NSohU=
Subject key identifier: C3:0E:41:16:13:8A:F7:AF:7C:7E:D7:9B:6E:E9:64:44:1C:F8:EB:D4
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 0197CC4D01D1B2AD228FF1AC1FA9997831BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 05EF
Signing time: Wed 02 Jul 2025 18:01:28 +0000
Manifest this update: Wed 02 Jul 2025 18:01:28 +0000
Manifest next update: Thu 03 Jul 2025 18:01:28 +0000
Files and hashes: 1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: bYEwa/+ozCcrm6CZRtN2dbMTf/rC4lxfcvuekiWh5cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4d:01:d1:b2:ad:22:8f:f1:ac:1f:a9:99:78:31:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Jul 2 18:01:28 2025 GMT
Not After : Jul 3 18:01:28 2025 GMT
Subject: CN=c30e4116138af7af7c7ed79b6ee964441cf8ebd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:9b:29:1d:4b:6d:cf:24:93:67:bc:a6:48:
51:b0:34:4f:94:76:df:dc:af:76:09:be:19:dd:fb:
d3:2d:b4:f0:76:43:3d:66:b3:07:dd:40:6a:1b:11:
13:f1:e2:89:03:c5:9c:be:3f:ec:6e:d6:00:fd:b1:
79:76:11:94:aa:af:74:51:bd:92:30:a4:9c:ff:dc:
71:64:2a:20:ee:39:4b:8b:c1:6a:1f:7e:78:4e:f9:
bb:8a:29:5b:f9:9a:d0:7e:cc:2b:5b:e6:95:72:c3:
4c:4e:5f:06:3d:dc:20:94:89:ae:f4:40:7f:7d:dc:
d4:1c:06:68:7f:d5:35:00:af:b3:61:12:ce:74:2a:
6c:4c:79:7f:38:64:db:9f:75:b2:54:1d:e6:17:06:
22:ec:37:af:14:2b:a3:12:37:01:b0:46:c0:9a:0c:
98:d7:ce:2a:e4:d8:6f:22:1f:7d:de:a0:9c:22:69:
27:a1:57:b9:76:45:aa:7b:40:6f:c2:f3:c1:5c:36:
a5:9a:75:89:a3:13:1d:75:00:7d:07:db:8a:de:7b:
71:e8:85:16:d1:48:48:c6:03:aa:47:4c:f6:9a:34:
59:ca:de:be:aa:11:c1:1b:95:27:4f:d9:e6:57:93:
11:c3:95:c8:90:78:de:e7:d2:bc:1b:1c:08:17:4c:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0E:41:16:13:8A:F7:AF:7C:7E:D7:9B:6E:E9:64:44:1C:F8:EB:D4
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b5:57:d2:e5:91:28:41:6c:4b:56:d6:76:c6:5a:01:e6:ec:
ca:78:92:80:0b:33:4d:8c:26:f9:70:d3:7b:27:62:ce:5c:a9:
f0:06:88:f8:a4:50:2a:ed:d2:62:9d:c5:70:b0:e3:ed:a3:c7:
f3:48:3c:fd:1e:67:18:14:85:90:35:44:2c:e2:b0:f7:32:8b:
ee:e8:2b:22:ff:fd:51:9c:7b:7e:c7:44:ee:fa:7b:5f:83:c2:
4d:b3:8d:6d:b2:2a:5f:d4:a5:e0:de:6b:6f:da:94:32:7d:21:
4c:b3:c6:0c:75:7b:e0:05:58:a0:ca:7f:5f:49:39:f6:71:ec:
c9:1d:08:7e:11:dd:69:45:af:c3:8a:85:56:4c:71:ec:9d:2b:
b9:90:7a:a0:43:37:2d:d6:41:d7:b6:fb:35:da:67:6e:9f:72:
c0:06:d6:3d:1f:3f:02:89:1b:f5:4e:a9:30:51:62:38:dd:59:
07:fd:e8:e6:4a:ab:04:a7:e5:74:51:b8:27:82:83:62:7a:65:
1e:c2:b6:6f:ef:91:70:fc:13:c7:1b:90:63:84:6f:c3:81:58:
db:a9:14:81:c8:74:32:62:4d:a3:e8:98:02:5c:28:ce:65:b9:
85:b8:9e:70:31:09:d4:e6:8a:22:4a:31:14:9e:b4:78:7c:54:
7b:57:e1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:00:26 2025 by rpki-client