Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File: RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier: Nmm1TT+fw4zJZV2LR7ziyA6VifewyIXIM1jqB3HdkGQ=
Subject key identifier: C8:CA:8E:09:44:EF:BE:B2:18:A4:58:EE:9B:8F:6A:AD:20:26:2F:29
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial: 0197CEE01F254A0404006EAC815722C86959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number: 0341
Signing time: Thu 03 Jul 2025 06:01:23 +0000
Manifest this update: Thu 03 Jul 2025 06:01:23 +0000
Manifest next update: Fri 04 Jul 2025 06:01:23 +0000
Files and hashes: 1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: OvwabALF3pou+W7yLlSAr2mYzWDRv91EBr7VPn3CEl0=)
2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:e0:1f:25:4a:04:04:00:6e:ac:81:57:22:c8:69:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
Validity
Not Before: Jul 3 06:01:23 2025 GMT
Not After : Jul 4 06:01:23 2025 GMT
Subject: CN=c8ca8e0944efbeb218a458ee9b8f6aad20262f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:2c:99:b6:4e:87:1a:87:97:cd:b6:2c:72:
f1:08:24:d1:62:76:ff:87:0b:d3:ac:61:25:1a:a2:
cf:25:e6:9b:f1:df:31:4f:9a:ac:ab:2b:7a:a9:ce:
18:2f:a5:1f:f0:3a:22:15:0c:c1:2a:2e:52:b3:41:
8b:57:b4:8a:7e:6b:4e:f8:5b:70:f6:72:f2:ce:30:
f2:62:b0:4c:60:3c:bd:a7:36:6a:95:7d:37:fc:92:
97:47:23:e4:81:5e:93:4c:0c:5e:5c:bd:b5:b3:a4:
ee:c8:08:12:8b:38:b8:19:6d:85:a8:58:64:88:a5:
8b:2c:61:3c:32:d5:30:f4:96:4a:7e:43:6d:75:24:
6b:bb:4b:b0:11:da:06:f0:fe:66:f3:06:8d:2d:11:
62:ae:47:95:b0:3e:08:4a:29:07:66:f0:26:ba:2b:
b9:f9:eb:c6:d7:9e:b3:c4:09:5c:ea:06:cc:6e:2a:
85:c9:97:23:47:2a:2c:c1:0b:17:c9:d2:b8:55:9d:
22:16:3c:2a:42:17:a4:f4:a3:3f:76:b6:50:f5:f9:
fc:86:06:00:7f:53:9b:d5:11:16:46:20:9c:bc:2a:
0e:0a:c5:4e:dd:41:68:b8:60:51:b1:70:fc:49:2f:
37:a1:e9:90:dd:77:ec:32:80:7b:6f:8a:2b:41:32:
d6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CA:8E:09:44:EF:BE:B2:18:A4:58:EE:9B:8F:6A:AD:20:26:2F:29
X509v3 Authority Key Identifier:
keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c1:5a:3e:e0:aa:97:15:37:f6:f7:64:e2:3d:83:7c:19:92:
e1:67:aa:99:a9:f2:2d:6e:4b:95:51:35:f0:50:7b:d1:fd:f2:
05:e2:4d:c3:22:39:b5:22:88:b2:1f:f3:aa:59:66:84:6f:8f:
54:3d:f9:fc:7c:2c:e3:c4:d0:19:42:ee:ed:e8:60:d0:44:10:
70:b2:d2:7b:f8:8d:7a:23:de:c6:e1:63:26:79:4f:71:c9:af:
e8:52:17:4c:f0:ef:d9:f2:8f:1b:0d:d9:87:e7:9e:fd:9c:5b:
2e:d6:35:36:0b:fa:90:34:3f:d0:a8:c3:b0:96:ad:ea:0d:b5:
b8:df:d6:8a:ad:1b:b7:96:12:f0:08:45:72:d1:41:50:8d:17:
4a:96:04:83:a3:ed:35:14:76:8d:34:d6:f4:3c:a0:17:ae:6b:
48:43:1f:7d:c1:01:f7:c7:76:72:40:83:75:83:8d:13:63:fc:
40:d9:37:e0:10:2a:06:74:63:9c:58:26:ad:6b:6b:ef:e6:02:
cb:73:9c:38:21:d8:39:40:ca:33:0a:6d:f9:f7:5b:e3:aa:2c:
59:99:2f:4a:79:9b:f8:30:46:05:75:20:08:b7:aa:b3:d3:cb:
7f:fe:25:80:49:a5:83:14:e1:61:ce:62:5f:01:8c:70:d7:e1:
e4:99:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:41:13 2025 by rpki-client