Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: F7rAA/2J4Fs51+QdfW+O1Slb6zpUMZCBWbs412U45QQ=
Subject key identifier: D6:D3:B8:8C:1E:8A:CD:0B:BC:88:EA:72:B0:3D:8A:3A:88:8F:DB:6E
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 0197B8C5BA17F931BCB11D4048D8894D56DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 0BCE
Signing time: Sat 28 Jun 2025 23:00:55 +0000
Manifest this update: Sat 28 Jun 2025 23:00:55 +0000
Manifest next update: Sun 29 Jun 2025 23:00:55 +0000
Files and hashes: 1: x9osegNwUKFrT1H1VZTt-kaY4bg.roa (hash: ZX93NU3lUgtZDAGcH0Q1U8yUfw/JO3m/vmWuhpphGKg=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: A5hJhSz9CeZOLIBxmR9OueQWjXkdKV+b87LaV7GjUmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:ba:17:f9:31:bc:b1:1d:40:48:d8:89:4d:56:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Jun 28 23:00:55 2025 GMT
Not After : Jun 29 23:00:55 2025 GMT
Subject: CN=d6d3b88c1e8acd0bbc88ea72b03d8a3a888fdb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e0:ff:9d:e9:cb:2f:8f:b8:0a:0b:79:db:58:
85:29:9a:4b:52:8a:a5:31:13:6f:01:b6:f3:da:51:
2e:b0:25:04:05:d5:07:f5:fe:b7:b8:fe:7a:54:41:
05:10:96:b4:68:e7:ff:2b:3e:25:14:f2:01:d1:b1:
c4:cc:7c:87:bc:98:08:37:00:7b:c2:2b:0a:e2:ed:
c5:07:43:a0:48:5c:c3:d1:dc:da:71:58:48:50:ce:
18:93:86:85:b7:b8:4b:83:64:86:e6:e1:41:ba:59:
72:40:66:b7:c8:1a:74:08:97:6e:70:8d:db:79:8e:
c9:0e:56:65:d6:81:3a:09:07:68:0a:f1:e7:f4:0e:
aa:fd:3e:42:18:8e:98:0f:8e:a4:04:99:5f:3d:bd:
08:f1:ff:dc:67:63:a2:3b:9b:af:b4:a9:01:06:5c:
4b:fa:86:97:f1:0a:de:c3:48:b7:44:2b:38:1a:a1:
1c:d4:db:f8:e2:3b:f4:6d:65:cb:5e:59:27:53:3d:
1c:ad:e6:fd:3c:b1:86:5f:0e:81:be:10:e7:d1:48:
e9:8e:03:30:99:ec:9c:a0:6a:26:e5:a6:a0:98:ac:
af:de:12:68:a0:e4:c2:ab:f1:6f:f9:e9:6e:f6:89:
f9:21:32:58:a2:12:0d:62:5b:94:51:14:e1:5a:83:
24:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D3:B8:8C:1E:8A:CD:0B:BC:88:EA:72:B0:3D:8A:3A:88:8F:DB:6E
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f0:c2:aa:6a:2e:c9:ed:24:34:65:4a:b2:48:d4:56:f7:f1:
ac:54:2a:b9:72:ac:5e:37:e9:18:78:a6:df:43:e8:84:ab:39:
b2:be:89:0c:07:0e:b9:e4:e8:7d:08:52:72:c1:ff:dc:71:78:
ed:85:db:98:0c:8a:9c:fa:b7:d0:29:d0:39:29:07:09:d5:ba:
4e:3c:7e:cb:5b:b5:df:00:85:d0:9e:c1:30:7b:65:6f:18:23:
d1:aa:a1:8d:cd:71:f9:2e:cd:8e:db:66:8b:58:93:ce:7d:f0:
e3:99:81:47:b3:92:17:ae:9b:e4:3f:7d:2d:54:f1:c1:4a:6f:
32:fc:f3:09:c4:44:5c:aa:99:c8:99:de:d5:f3:ca:71:6d:35:
ac:60:8b:ba:e7:4d:22:6e:c5:67:11:75:e9:85:03:ff:67:4d:
a7:49:51:17:79:64:16:82:27:90:00:b4:7d:67:11:79:50:bf:
39:a4:b4:0a:d6:81:6e:70:07:c7:a6:c6:3c:8e:bf:e4:96:1e:
e3:b0:d5:3e:41:20:cb:0b:b1:44:ca:58:63:44:43:f3:cf:b1:
38:74:e3:3a:9a:fe:2d:55:55:4e:20:91:e3:9a:7a:44:54:9b:
ad:aa:c8:10:69:4c:85:dc:c3:7b:db:17:ad:12:fb:22:7e:b7:
54:6f:07:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:11:55 2025 by rpki-client