Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
File: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft (raw, json)
Hash identifier: ZebBnhiT5xeFfeziDLWK60MXp7bKjh8Iat+GnxrIomE=
Subject key identifier: 2F:5A:5B:B5:80:CB:A8:1C:6E:03:04:9D:D8:BA:42:4C:A8:B0:27:C7
Authority key identifier: C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
Certificate issuer: /CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Certificate serial: 0197B96B150ABB0D76B3293AD049B498F31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
Manifest number: 030D
Signing time: Sun 29 Jun 2025 02:01:31 +0000
Manifest this update: Sun 29 Jun 2025 02:01:31 +0000
Manifest next update: Mon 30 Jun 2025 02:01:31 +0000
Files and hashes: 1: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl (hash: Vp0sCJE/5uyiVPedgi+l2yaXRee2LaeYkSIffmgAAQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:15:0a:bb:0d:76:b3:29:3a:d0:49:b4:98:f3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Validity
Not Before: Jun 29 02:01:31 2025 GMT
Not After : Jun 30 02:01:31 2025 GMT
Subject: CN=2f5a5bb580cba81c6e03049dd8ba424ca8b027c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:11:63:f0:c9:87:16:a1:b4:2e:ae:97:fa:2c:
ff:87:b5:2e:26:fa:5c:b9:1d:af:b9:df:52:11:29:
7c:65:a6:84:a8:9f:c4:c2:c1:63:77:27:87:3d:8f:
cb:ef:f4:77:22:75:09:32:ea:f8:b2:2e:dc:49:5f:
ab:eb:f3:70:07:5c:14:0d:2f:47:12:b8:cb:37:30:
28:96:f9:fc:c7:dc:3e:2a:4f:4e:f3:52:0f:06:d2:
af:9e:03:47:bc:b4:55:f5:9f:15:0d:07:15:b8:b5:
b7:cf:70:11:95:7d:1c:32:f3:05:b9:5a:88:68:a4:
2d:e2:08:12:bb:56:79:0c:e4:bb:6c:13:11:49:34:
cc:93:99:f8:6f:4d:45:92:8d:b1:2f:93:5f:c3:7f:
a3:74:b0:a5:f2:74:a5:7b:be:9e:37:88:83:9c:63:
c0:9e:f9:e3:95:25:bb:25:bc:00:a2:92:42:88:ce:
d7:80:41:a0:7c:f0:67:9d:70:12:ef:a0:5b:1b:97:
cc:d4:eb:6a:04:0b:4c:ba:8c:30:d2:25:3c:6e:b8:
00:a0:97:97:a8:9a:28:d9:a6:ff:7b:df:e6:8a:c6:
38:df:45:4a:b8:dc:54:85:eb:b3:82:b3:4e:0f:e3:
64:6c:f7:09:69:1d:3a:0e:b1:d8:a2:c4:64:a4:5c:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5A:5B:B5:80:CB:A8:1C:6E:03:04:9D:D8:BA:42:4C:A8:B0:27:C7
X509v3 Authority Key Identifier:
keyid:C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:37:a8:0b:52:fe:49:36:13:52:d4:87:12:29:8a:92:84:cf:
76:b6:00:06:36:91:0b:71:8c:a3:49:59:67:3d:8d:d7:05:9a:
a7:57:94:db:d1:71:75:b7:dc:d6:06:43:8e:12:c7:ab:89:95:
67:37:28:d3:bb:97:bf:36:a2:59:8d:47:c4:76:f7:a3:6e:31:
57:5c:46:c5:b1:8f:e4:4c:b2:74:8b:e9:31:99:41:7f:02:42:
e7:84:82:77:00:21:3f:d2:6b:07:d6:7e:a0:54:bd:0d:46:2f:
7e:8f:60:5b:7a:b7:5e:32:73:23:76:c9:4e:16:fa:3e:b5:e9:
90:fe:3a:3e:49:26:14:a2:9f:73:51:96:76:b5:f5:e3:4a:80:
d8:e9:8a:fa:87:a4:6e:a2:fd:f8:ec:fd:38:77:a3:77:70:7f:
25:77:29:11:33:8c:86:d7:f2:5e:bb:3f:d2:e0:ba:37:70:a7:
94:ac:95:57:a6:95:73:c4:28:fc:a4:7c:ff:db:f5:d7:fe:cc:
1b:b5:5d:41:e1:04:00:41:d7:f4:7a:97:00:b1:91:8f:6e:ac:
0c:7c:e8:38:47:73:bf:ae:67:cc:cf:40:6e:e3:ee:6f:b4:3e:
86:f1:84:4a:d3:c1:2f:2a:1a:bc:10:0b:88:36:0c:70:fa:a8:
80:f5:73:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:27:35 2025 by rpki-client