Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: 2LweeIbhQZGWaX12ZyvltdEmdnoif3oB/JKAkJGgX60=
Subject key identifier: B8:8C:B1:1C:62:D9:8D:4E:C6:D6:0E:89:41:5C:2B:BE:C2:58:6C:B2
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 019775D3476A9F3EBA9CBD510B00D04E3533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 0C0A
Signing time: Sun 15 Jun 2025 23:01:09 +0000
Manifest this update: Sun 15 Jun 2025 23:01:09 +0000
Manifest next update: Mon 16 Jun 2025 23:01:09 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: J2u4s+qjTNbP6eoru7tnlzOMjELndwGAEPYIKtQ5JFI=)
2: 7d2ToMhT-5ZAU4qsYQXruw_MoIU.roa (hash: vm5X1sab9HJagyLFII3df7BekSqzu2gNn9apIe4J5uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:d3:47:6a:9f:3e:ba:9c:bd:51:0b:00:d0:4e:35:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Jun 15 23:01:09 2025 GMT
Not After : Jun 16 23:01:09 2025 GMT
Subject: CN=b88cb11c62d98d4ec6d60e89415c2bbec2586cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b5:9b:fb:84:d2:69:87:3c:15:de:c8:5d:17:
7e:ad:a3:f8:af:87:29:d6:b5:9e:1c:4f:99:16:02:
27:db:03:21:03:87:72:f9:25:21:d1:1b:3b:f1:40:
7f:96:2f:e6:50:20:55:6f:a8:07:23:d4:3e:52:00:
5b:1a:5d:a6:12:1d:e7:c4:74:51:4d:f0:4e:14:b6:
17:96:8d:68:db:2f:4b:cb:38:c3:16:80:84:28:cd:
9a:ec:3b:dc:90:35:47:f8:67:73:ca:1c:db:49:3c:
c4:b8:4a:25:66:e5:94:15:4e:db:83:cc:b1:6c:1a:
c8:c9:eb:55:9a:f1:8c:4d:8d:1f:1f:4b:a5:41:f8:
93:b3:8a:5e:70:26:3a:f7:43:08:14:1b:30:64:13:
b3:56:cc:1f:d0:79:90:fa:be:92:df:e5:54:1c:89:
78:27:50:c7:54:ec:e1:74:66:2b:9e:e7:69:7e:f4:
9f:69:bd:69:19:bf:f4:ad:6f:06:53:a7:a5:66:aa:
96:27:76:95:29:89:b4:62:b7:11:bb:05:f5:4f:68:
21:64:c5:b5:74:a1:18:f2:c4:a7:1f:ee:70:d5:4f:
9f:cb:89:56:dd:29:b5:7f:c1:fe:fc:e1:c8:ca:4b:
f0:55:11:25:e1:b6:45:64:3e:3c:3d:ad:d0:0c:60:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8C:B1:1C:62:D9:8D:4E:C6:D6:0E:89:41:5C:2B:BE:C2:58:6C:B2
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ec:77:c2:c8:97:2c:c8:42:f4:62:f3:69:77:62:82:74:fc:
d9:65:e5:c8:7d:6a:f7:a4:e9:2e:05:67:08:24:74:d7:0d:82:
9b:2e:a8:72:4f:3a:4f:2e:ee:20:07:d4:8d:1a:b6:0c:69:65:
0c:b1:f0:f2:10:99:60:12:b4:ef:ed:c7:78:bb:19:70:f1:7d:
06:6a:14:b1:29:6d:e9:d3:6b:e6:a0:bc:61:c0:c7:bd:d2:69:
3f:fd:bb:74:5e:2c:b7:e8:94:8b:79:45:a3:5d:4f:bf:9d:6c:
a5:f4:16:2b:5a:96:6d:03:1d:64:62:a6:a1:96:96:18:83:12:
dc:c9:cb:ed:79:8b:98:0c:d0:23:b1:5e:c0:b2:7c:a2:7c:a3:
fe:76:58:ad:11:27:12:a6:7d:68:65:4a:4f:91:c5:2a:b9:95:
96:12:c7:eb:d6:35:1f:8b:2f:33:13:b2:75:ce:9d:af:e6:19:
8d:3e:5c:d8:38:9e:d2:b4:e7:09:50:1b:eb:28:90:0c:97:2a:
f0:fd:b5:f6:49:1b:5d:77:1e:b3:59:36:f0:79:ca:54:f7:3e:
04:7f:8a:6e:9f:2c:dd:4a:45:58:5b:34:37:15:60:01:f0:cc:
ff:6d:5f:3d:36:e6:66:f5:07:10:32:2b:9f:84:89:f7:8c:8b:
08:b0:4a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:07:08 2025 by rpki-client