Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: 7hC0GZXreYcIGQu6BFkwPvJMfBp/L6sVH55x2ER+9Js=
Subject key identifier: 25:7E:93:6F:30:0A:E4:9C:01:9A:37:8A:4A:99:22:AE:2B:16:85:71
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 01989592C91C0821A88A748116B8BA6859B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 15BB
Signing time: Sun 10 Aug 2025 20:01:21 +0000
Manifest this update: Sun 10 Aug 2025 20:01:21 +0000
Manifest next update: Mon 11 Aug 2025 20:01:21 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: oVfrSERBtin+yIa4+VfNmkCrgVjT8BZBDhXn0DThLxA=)
2: 8weSLoMuWV3usouK6kCYa4DYS08.roa (hash: 7ICkBxIDMmpq8Ld9uPPV7RzwfZWRVUlPiTj2akXnPTs=)
3: g0yMZ7il9emhd1JLy44dXjFFySY.roa (hash: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:c9:1c:08:21:a8:8a:74:81:16:b8:ba:68:59:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Aug 10 20:01:21 2025 GMT
Not After : Aug 11 20:01:21 2025 GMT
Subject: CN=257e936f300ae49c019a378a4a9922ae2b168571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:dc:48:51:76:b7:1a:7d:70:51:02:31:57:
d9:2d:99:41:dc:bc:f2:aa:71:a0:8b:28:7a:f7:1b:
78:6d:6d:83:5d:f9:c2:1c:e4:0a:0d:61:75:13:f9:
2d:ed:a2:2d:ae:f5:a1:13:e1:19:1a:f0:52:6e:11:
58:c2:7f:92:39:89:9f:14:31:98:e4:00:42:31:33:
61:da:5a:24:6b:5b:6d:19:e4:39:1b:a6:d8:01:1b:
9c:9f:eb:0f:41:46:62:22:18:1c:4e:17:f1:63:7e:
5a:d6:9d:37:f1:a1:57:e8:32:ea:e9:54:dc:18:b3:
bc:f5:ed:58:ab:d9:54:19:68:29:65:62:30:96:54:
cd:67:61:b8:9f:c7:70:68:5c:40:d4:08:de:fa:24:
77:7f:d5:7f:f9:f0:5b:2b:34:aa:83:77:d9:10:91:
0f:f2:53:44:43:bd:d2:4a:4a:b0:ca:a0:62:cc:f2:
75:c2:c3:99:08:74:45:d0:13:68:4b:e1:62:16:66:
eb:1c:46:d1:aa:3e:39:92:4f:f1:1c:0b:4e:01:ee:
49:16:fd:c4:0d:4c:7f:62:b4:d8:94:81:33:d7:58:
e3:f8:4a:e2:00:a4:44:75:27:5d:6a:03:d6:7f:3f:
58:10:67:70:52:bc:b0:99:83:82:ad:72:a2:c3:2b:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7E:93:6F:30:0A:E4:9C:01:9A:37:8A:4A:99:22:AE:2B:16:85:71
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:17:98:d6:16:cb:6d:b8:93:36:4c:f1:08:7e:a9:51:9f:8e:
96:0d:2d:15:56:28:f8:66:6b:c7:88:5b:94:f2:bc:5d:fe:76:
cf:e5:8b:7a:55:27:db:b8:62:34:62:b8:fd:b7:09:ef:d5:67:
f6:b8:4f:94:6b:8d:dd:0b:3c:26:1d:d6:d0:7a:3e:88:07:05:
a6:b6:14:74:6d:2a:29:2b:29:4b:6b:8c:56:45:0d:af:be:2b:
17:e3:d0:ae:77:d3:c6:40:34:96:19:7b:5f:c3:96:56:6a:77:
e0:18:81:48:8c:53:01:d7:2e:bd:4d:6a:04:ba:e6:4a:06:db:
15:46:ec:f8:1a:3e:b9:0f:72:5c:41:18:30:2d:63:dc:58:91:
6d:16:7a:33:fe:e8:f1:15:4e:79:85:ba:cf:c6:d3:f0:11:6e:
53:28:c7:22:14:88:8e:72:2c:ee:aa:ec:37:63:1b:40:c0:00:
9d:38:b8:6a:79:f6:3e:b3:b2:10:4a:69:8e:01:21:a8:8e:fa:
e2:5f:ef:ea:40:96:18:af:62:1a:ff:2f:71:d7:9f:33:09:b6:
ec:24:7d:83:f7:78:03:ca:e1:19:50:4f:7f:7b:b8:0c:33:d1:
19:fd:ae:80:f2:d0:c1:70:df:6e:fd:92:3f:1b:a9:3a:b0:ca:
40:27:03:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:58:54 2025 by rpki-client