Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: vU3ip1droZ8ZNWr/mPw3w2WeKrZydpYj6hQdIBGsW/c=
Subject key identifier: 20:11:C5:6A:CE:19:C1:E0:39:A5:78:99:C2:A9:1A:F0:3C:E8:D2:A9
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 0197B6D781859E1B855148676F947011E425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: Bt61Duabnrfk_tvUxqrlxq35pFs.roa (hash: 3mTb4E/hZOVdEv0TkUnMgMT0a7EJ9fK0ZGjFdNjhe4g=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: 49tyO2FDZKVclR0l6CKsae0h87bz8Y3Tdcvomz4wiBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:81:85:9e:1b:85:51:48:67:6f:94:70:11:e4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=2011c56ace19c1e039a57899c2a91af03ce8d2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:68:d8:87:7f:45:80:80:d0:50:f4:21:ed:
3c:49:91:66:7c:47:d3:5a:38:dd:7e:e0:7d:6e:9f:
07:71:88:96:b7:41:3c:3e:97:dd:36:d4:9d:59:27:
0b:66:4e:cd:98:ee:67:e7:4a:81:7a:8a:a6:c7:97:
7e:c0:4a:4e:f4:48:28:17:0e:d4:4d:6a:81:c4:ca:
4f:2c:80:7b:04:d4:2a:43:15:c1:b7:0f:5f:bf:23:
2f:da:18:01:73:ca:d6:0c:97:df:5e:32:59:9a:fd:
c0:93:84:f6:ce:33:8b:82:e9:82:63:05:1a:a0:94:
b7:3c:5e:91:83:6d:cc:48:af:7d:97:da:22:cd:30:
e7:8b:43:5e:bb:a3:7d:b8:2c:7c:25:21:a7:47:55:
e0:77:f0:49:8f:72:10:aa:14:6e:e6:5d:0d:50:5e:
5e:1f:f6:06:9f:6b:42:52:ae:d3:04:54:e2:d3:72:
b2:eb:ae:06:48:b1:72:9b:cd:c5:f9:51:ed:0b:31:
9a:07:7c:0e:09:3c:3c:1c:da:eb:68:66:fa:81:15:
ae:64:52:8c:27:df:24:9a:50:99:11:fb:53:0e:69:
22:77:65:45:12:b7:86:6f:20:8e:61:5c:8e:5a:0f:
db:82:7d:dd:2c:2d:29:c0:a4:61:5b:96:0a:39:8d:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:11:C5:6A:CE:19:C1:E0:39:A5:78:99:C2:A9:1A:F0:3C:E8:D2:A9
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e6:87:2f:a6:64:2e:c4:dc:be:b9:1a:6b:17:84:67:0d:46:
a4:c7:ac:cb:99:ce:8e:40:04:6a:42:11:8f:70:42:a6:de:24:
29:df:8b:bd:f3:9c:95:54:63:98:cc:ec:9a:ce:4c:bc:fe:2a:
80:87:29:98:e1:46:25:6e:22:ad:0b:cf:1b:36:c7:3a:e3:2f:
86:76:db:ec:67:64:8c:f3:19:c2:0c:c8:e9:30:4a:db:d2:2d:
63:17:a3:44:93:c2:c7:d2:f9:8e:41:07:ac:74:ab:3d:d4:e3:
42:01:37:1c:1a:c6:5a:92:eb:91:1b:c4:c7:7a:50:29:6f:f1:
f7:ef:98:aa:cb:29:d4:df:e0:39:f9:ee:43:3b:d4:5c:5d:3b:
1c:54:b0:db:86:d8:c1:c7:8e:8a:15:54:4d:fc:93:13:be:99:
33:81:54:c1:34:97:0c:58:12:75:89:3f:09:78:c9:0c:46:a1:
42:28:63:db:40:04:0e:9f:3b:ca:bd:15:82:9e:9f:4c:3b:2b:
6f:ea:d2:16:f8:aa:69:75:13:10:06:df:fd:fb:a7:65:27:d5:
f5:a1:a0:ff:a4:ef:54:e3:46:ea:b9:0a:a2:e7:09:f8:f6:cb:
83:f1:18:bf:a7:64:f1:80:88:a5:50:68:f2:9c:b8:42:55:ed:
cc:a9:63:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:25 2025 by rpki-client