Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: JQWNj709InXghcPnJlbxVzRo60sGLjQDSoBsAJaeALI=
Subject key identifier: B0:7C:64:A2:59:97:90:C1:C0:6B:60:46:68:B3:04:E3:DA:89:FD:8B
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 0197B6329C1C92F49E9812015F202876A7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 13C2
Signing time: Sat 28 Jun 2025 11:00:59 +0000
Manifest this update: Sat 28 Jun 2025 11:00:59 +0000
Manifest next update: Sun 29 Jun 2025 11:00:59 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: I1sGGbrlnGRrg9o9j1JSUTa9SGkSOGTWlVI4quQl6DY=)
2: UXWSLhVlTXSrRh4vQjiJGZfTc28.roa (hash: GwWbj030dqXFgPoZUUmrOygMcwYdz6TWzzcKF95NLWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:9c:1c:92:f4:9e:98:12:01:5f:20:28:76:a7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Jun 28 11:00:59 2025 GMT
Not After : Jun 29 11:00:59 2025 GMT
Subject: CN=b07c64a2599790c1c06b604668b304e3da89fd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:b0:0f:fc:41:7d:45:1f:35:b2:67:ea:f0:
bf:c4:9a:75:f3:12:97:dc:95:6d:d6:eb:f0:c0:22:
38:cd:a3:45:f1:52:b3:b9:86:d9:57:0c:02:6b:11:
07:85:5c:cb:7b:84:9e:80:33:ae:c0:fd:5b:4e:c9:
1d:5a:1c:71:e8:33:eb:11:30:79:cc:3e:81:c1:29:
87:20:8b:a2:5f:df:59:4b:a7:1b:3e:6d:ec:9f:1c:
83:e0:22:86:6e:8d:2e:fe:8d:6c:16:54:d1:66:00:
c0:75:5a:90:34:10:25:bd:e0:3e:8a:90:c1:32:ae:
23:c4:fc:71:88:f8:31:7d:60:dd:7e:03:31:6f:63:
17:73:fa:6f:93:9a:5d:bd:99:be:8e:99:97:7e:19:
a0:68:2c:36:22:1a:ba:aa:fd:83:d3:6f:2d:ed:a8:
a2:f5:ed:9c:12:22:0d:b5:96:25:7b:ab:cb:a3:3c:
f1:49:a7:a0:80:38:06:12:18:b6:42:0e:f7:1a:91:
c4:fa:3e:bb:d0:61:45:4d:b2:c5:38:b2:26:0b:ac:
8c:ce:19:fe:08:d1:a1:ed:51:d8:2a:35:ba:fd:45:
ac:a1:33:c1:34:ae:6d:a5:b8:95:27:43:65:19:fe:
b1:fc:4f:ae:cb:d5:17:0c:8e:76:a8:d6:6d:8d:cf:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7C:64:A2:59:97:90:C1:C0:6B:60:46:68:B3:04:E3:DA:89:FD:8B
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:53:f0:e6:15:fe:49:b9:ae:40:7b:32:52:aa:41:3c:4d:5d:
b3:18:e9:e9:42:88:b8:73:a9:13:9b:72:9d:da:2b:59:48:a5:
14:60:da:5c:b8:0b:14:5e:47:0d:5b:e2:60:41:b1:f0:8f:e1:
ad:28:85:fd:73:2b:bc:fc:be:29:d9:c4:b8:01:f0:8c:84:3b:
d4:e8:4c:f5:6b:0f:75:ed:6c:d0:cf:4d:7a:88:45:19:06:e2:
e5:02:96:5d:a0:7e:79:2d:fc:14:08:58:b0:22:ff:d7:51:cf:
0a:30:10:92:20:81:07:4a:8a:4e:0d:7a:5b:ed:aa:60:95:5a:
3b:cd:53:12:a3:0a:64:3d:c9:e0:56:b7:88:8f:3d:06:0a:cd:
d8:0f:5f:87:3e:d9:17:c6:af:d1:d4:29:f1:f0:ac:33:02:08:
66:b5:fb:b5:cf:b3:3c:d0:41:d8:2a:e3:66:f5:43:22:c4:2d:
ee:ea:84:b5:f5:55:1c:91:9e:9f:ba:b7:95:04:5a:fe:ca:77:
80:dd:0c:cb:84:e5:e9:81:89:dc:13:77:7b:1d:b9:6d:5e:63:
13:06:3e:84:13:eb:2d:f4:2f:b0:4e:01:5d:36:74:03:7e:ff:
87:a6:3f:1d:58:55:c1:72:dc:ec:83:14:79:14:c4:b2:b4:d3:
1b:ad:fe:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:52 2025 by rpki-client