Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier: oslF8mUTeb/MY1HmFKlcd8lpaTxEIETqPfnhu9GibYs=
Subject key identifier: 80:92:AB:DD:38:4E:6E:75:46:94:3C:75:4D:56:55:93:FE:A1:93:68
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 0197B6A06896DC63BA077B9818515F02D67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number: 0CEF
Signing time: Sat 28 Jun 2025 13:00:55 +0000
Manifest this update: Sat 28 Jun 2025 13:00:55 +0000
Manifest next update: Sun 29 Jun 2025 13:00:55 +0000
Files and hashes: 1: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (hash: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=)
2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: Xx/Y1vJ39EDleR2Nmwb/hl9TmildK6ZTaNyvYp6Qxnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:68:96:dc:63:ba:07:7b:98:18:51:5f:02:d6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Jun 28 13:00:55 2025 GMT
Not After : Jun 29 13:00:55 2025 GMT
Subject: CN=8092abdd384e6e7546943c754d565593fea19368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:49:c8:d0:93:33:48:2f:13:9f:46:73:06:
ea:2b:f6:3b:16:73:70:4b:06:bd:55:13:33:93:2f:
e0:91:1c:33:f0:55:c6:d6:13:0c:76:b3:d1:a2:2b:
6d:ad:7e:d2:d9:7e:51:64:db:9d:10:a3:3a:e6:73:
2e:8b:ad:7c:d5:10:af:d7:72:94:9e:ae:92:5d:dd:
4f:c1:bd:51:90:d8:85:94:71:0f:69:a8:a3:a8:21:
2f:85:56:53:3b:58:fd:fb:84:9c:04:9f:ec:b5:6a:
d9:ca:e1:d9:7b:eb:85:99:8d:e7:f6:32:65:7c:f8:
c2:d7:8f:61:e1:01:7e:f1:73:0f:e6:af:73:ab:b3:
df:d9:2e:05:3f:96:38:bf:ee:6c:c7:5a:2f:93:49:
03:3b:b3:60:10:f7:59:17:a9:7e:1c:2e:4e:1d:0a:
39:9b:f8:2b:e5:64:11:0d:8f:f3:3e:7d:41:a4:69:
2b:49:ef:f7:97:08:f2:c5:cc:6c:a1:7b:9e:7b:24:
ae:27:99:8f:be:7d:ea:e6:ee:9b:89:76:4d:03:b1:
0b:e6:31:e1:78:d9:23:5e:b3:e3:68:64:88:4e:6a:
a1:b7:13:35:09:9d:6b:85:b8:81:0c:15:f6:24:c5:
39:7d:45:cb:40:81:bc:8f:7a:3b:ac:99:88:a8:9b:
8c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:92:AB:DD:38:4E:6E:75:46:94:3C:75:4D:56:55:93:FE:A1:93:68
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1e:cf:1a:7f:72:1e:74:3a:ce:7b:f2:e7:79:d3:db:fb:35:
0e:02:f3:f1:8c:2a:1d:ed:fe:ea:9c:1c:4c:24:b2:e0:57:bc:
c4:a5:1b:41:fc:bb:bc:d5:67:cc:f8:b5:8c:e8:c1:2e:a5:ee:
39:a0:63:40:78:ff:43:a8:e2:ef:8d:ef:1f:db:ea:ae:5e:43:
f7:3f:a7:55:63:fc:5e:05:1b:e4:74:3a:cd:b4:9c:60:43:ce:
14:50:03:34:62:34:ee:e1:b2:b6:c0:3d:16:38:31:0b:87:18:
de:97:21:65:ff:66:43:29:44:70:f1:dd:bd:f1:53:65:d4:51:
a2:79:26:7a:42:12:4d:19:08:ac:2b:77:98:6b:0b:5f:87:49:
f0:d3:f7:ba:15:4c:b4:7b:f8:c5:61:6a:18:d6:70:0b:a2:4b:
43:83:c2:0d:93:90:d2:81:ce:56:7c:08:46:23:a2:e5:35:a0:
62:81:66:86:40:0f:e4:5a:5a:50:04:0c:f4:f6:97:fb:fa:a2:
22:be:8c:79:06:c2:7a:74:e6:46:07:52:f9:12:c4:18:56:ae:
ed:ca:d9:27:0f:9c:a0:04:5b:af:b4:bd:43:18:8b:22:d9:85:
f5:fc:e4:a6:6a:91:76:3a:37:61:21:59:76:7d:fa:13:51:fd:
90:a1:00:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:58:16 2025 by rpki-client