Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: gnvXKsdenRK+fAe+2tLnBKajF2vgoULcVbd+/6OMi+s=
Subject key identifier: 60:48:AE:62:6D:F1:39:A8:C9:FD:C8:FD:C9:42:25:B1:ED:5E:D2:D1
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 0197BFDAC36EC88B187C8FA9E08179ECCDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 0A49
Signing time: Mon 30 Jun 2025 08:01:14 +0000
Manifest this update: Mon 30 Jun 2025 08:01:14 +0000
Manifest next update: Tue 01 Jul 2025 08:01:14 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: CskEi6lY0F7Dhi+l9jCbx+a3qIS+Ktn34n+xptUJpJg=)
2: k-zbYqMjr7XFkjggYMsDTqkc4ZQ.roa (hash: s4TVKdERPvITqngL+4WwZ8o+fcmlm7A+ZBRKG7i/ppo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:da:c3:6e:c8:8b:18:7c:8f:a9:e0:81:79:ec:cd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Jun 30 08:01:14 2025 GMT
Not After : Jul 1 08:01:14 2025 GMT
Subject: CN=6048ae626df139a8c9fdc8fdc94225b1ed5ed2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:51:55:49:23:5f:6d:ee:c4:0e:82:40:e2:
b6:b3:4d:5a:71:fd:88:d2:98:74:a1:9b:c9:22:5c:
69:6e:8c:a5:37:de:2c:dd:29:a4:04:03:6d:6b:e2:
f5:e9:02:a0:ef:66:48:6c:6b:e4:5b:d3:c5:41:a9:
50:4d:6d:a2:83:2e:b0:12:eb:1c:f2:4a:72:ab:54:
4f:aa:80:ac:cf:3a:72:5a:53:fe:2f:49:dd:41:66:
c6:6e:0e:0e:f2:9e:14:ec:8b:e7:c9:d3:8e:b3:aa:
de:60:7c:49:77:7d:18:33:c5:c6:6e:e8:8e:88:70:
98:69:7a:e5:b2:5c:01:86:e4:fe:8f:62:6a:bd:b8:
91:6d:32:bf:da:c2:50:11:e2:0e:cb:07:c2:52:04:
07:9c:86:9f:16:02:dc:d9:35:39:fc:94:78:7d:ad:
eb:c3:6c:e0:60:16:2a:34:b6:f1:bb:7d:ec:5e:d2:
83:74:6f:f6:bc:32:8b:13:ce:06:d0:c7:a5:95:9c:
08:69:94:d3:4b:56:7b:cb:73:f2:68:62:84:31:32:
93:c9:81:cd:b0:8f:f8:85:e5:42:d4:9e:b4:77:a6:
65:2b:b3:2d:7c:92:85:a2:df:28:12:26:63:4b:4f:
ab:45:c1:b6:d8:e3:79:0f:4a:64:5a:4c:a5:fb:b4:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:48:AE:62:6D:F1:39:A8:C9:FD:C8:FD:C9:42:25:B1:ED:5E:D2:D1
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:41:72:e0:7e:b1:98:4a:c6:0d:e2:0d:93:17:71:56:80:8e:
c3:06:b3:54:34:ee:0a:6e:9f:69:36:40:60:c7:d7:90:60:16:
26:5d:50:4b:c3:84:c9:1c:2b:24:4e:15:ac:d6:e9:60:dd:cf:
4a:af:aa:2f:aa:16:cb:04:a2:6b:81:ba:98:ac:8f:dc:08:96:
f6:5c:4c:9f:0c:3b:98:1b:8f:ce:24:be:b1:4d:81:35:63:6c:
4b:2e:64:01:3d:a2:6c:f2:f9:f1:d9:26:e9:d3:e9:67:cf:91:
9b:f8:97:e5:77:ee:79:b1:fc:f0:d9:c3:da:98:03:c4:f2:71:
61:7b:5d:4a:fe:9c:23:bf:53:3e:88:e9:25:4e:22:36:1d:b9:
ed:7b:e6:4b:83:60:3f:af:2e:27:e8:7c:ee:8e:1c:70:0d:7f:
4d:d9:f6:de:79:fd:48:e7:70:f5:36:30:8e:1f:cb:10:8e:b5:
cb:64:96:08:c9:d9:86:4e:a1:bd:98:75:b1:e0:2e:92:db:ab:
e4:41:4e:33:a7:9a:85:02:d9:55:40:c9:04:b2:2f:0c:80:a0:
86:11:4f:6b:b9:08:bd:29:37:8f:92:2b:08:ba:09:3a:bc:ad:
73:24:d7:b1:89:e2:dd:7e:d6:a9:32:dc:82:b6:48:45:62:74:
20:21:eb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:06:53 2025 by rpki-client