Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: DrYbbYJD+usVkb1j6PnRChCH0mq7ftxDe6ZVWY2XAbU=
Subject key identifier: D5:1E:B4:93:F5:55:FC:9C:92:C2:96:6F:69:99:E8:52:33:F4:50:30
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 019872CF383EFC9B81C9B0EA4FAE001808AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 0C8D
Signing time: Mon 04 Aug 2025 02:00:39 +0000
Manifest this update: Mon 04 Aug 2025 02:00:39 +0000
Manifest next update: Tue 05 Aug 2025 02:00:39 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: dyTfL5cvpqCtZSJNcicMzsRP/krZKe0jcB9PLhvj36E=)
2: 7d2ToMhT-5ZAU4qsYQXruw_MoIU.roa (hash: vm5X1sab9HJagyLFII3df7BekSqzu2gNn9apIe4J5uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:38:3e:fc:9b:81:c9:b0:ea:4f:ae:00:18:08:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Aug 4 02:00:39 2025 GMT
Not After : Aug 5 02:00:39 2025 GMT
Subject: CN=d51eb493f555fc9c92c2966f6999e85233f45030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:95:97:4d:94:a2:59:5d:b9:ab:05:c0:b4:
05:5a:9d:13:d7:20:bf:81:31:1f:e9:7c:98:2d:15:
a6:b2:c8:8f:3a:00:72:f4:69:e8:0c:95:59:f3:58:
f8:1b:a3:c6:60:3d:b7:88:83:ed:89:9a:9f:3e:cc:
fb:b6:62:58:d4:56:0e:ca:b9:c8:0b:0f:bf:be:43:
60:63:1a:84:01:c9:17:d2:60:4c:45:8b:16:2b:7d:
74:ea:22:78:40:be:d1:41:55:8b:75:61:37:b3:c1:
82:f2:aa:3c:97:57:66:76:5d:aa:78:7d:29:fe:55:
2f:d2:c8:a9:d6:f5:2f:5a:ea:ec:99:77:f8:03:b0:
32:1d:98:16:7f:1f:cd:c3:2e:8e:a1:1a:77:ef:a5:
f6:01:f5:e3:de:70:00:dc:33:04:a9:89:00:84:4d:
64:ed:26:1d:7c:90:82:6b:e0:05:39:3d:ab:64:bb:
9f:28:a5:af:6c:15:1c:37:d8:df:85:84:12:ac:0a:
05:5b:db:7f:07:d1:9a:2d:ca:d3:77:b1:8a:92:2d:
d4:c8:83:0d:c5:51:38:47:f1:3e:a4:47:ad:82:80:
8e:c4:4d:2c:9e:87:bf:1d:30:6e:ec:8f:11:6d:2e:
40:59:b8:f2:a9:fb:02:6c:7a:8a:ff:57:97:ee:f3:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1E:B4:93:F5:55:FC:9C:92:C2:96:6F:69:99:E8:52:33:F4:50:30
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:de:92:4b:ba:29:c0:e4:8b:9a:23:db:6f:df:8c:7a:1d:cd:
0f:2d:b0:31:b2:50:12:59:3e:36:64:51:90:fc:67:cc:97:a9:
70:67:5a:a3:42:0f:1a:e7:98:b3:83:7f:99:ec:c2:84:ed:bf:
5e:34:64:be:ad:4e:f8:f6:90:96:3c:92:9c:14:2c:93:14:cf:
6d:ce:57:72:e5:82:f6:2c:a1:98:20:0d:17:41:4d:3c:52:82:
5e:c0:75:0a:1f:62:75:3f:2e:b5:59:d5:55:d9:3b:90:60:1a:
ad:f6:17:42:63:51:bf:45:43:bf:27:c4:bd:85:a0:6e:6f:72:
87:75:03:8e:53:62:65:46:14:57:63:3c:f9:00:bc:48:34:ff:
e3:89:f0:08:63:bc:92:3e:8c:4b:af:a0:a9:5d:2c:37:e5:73:
f8:ec:82:fc:43:67:9a:e0:d0:b7:58:4e:23:68:78:b4:ea:7b:
45:d3:eb:7f:36:a4:59:94:f6:59:ca:2f:28:9b:dd:87:e7:23:
41:1a:74:92:36:f4:4b:fe:9f:e7:10:b2:4a:8a:35:a1:df:ac:
74:b3:0f:08:b7:3c:4e:bd:ea:eb:63:e9:d2:c3:55:63:05:d9:
b1:f4:cf:1e:a2:8b:cc:8c:1b:06:bd:b3:80:87:99:3d:9a:5a:
77:83:1c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:09 2025 by rpki-client