Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier: azhiare2dfC2cAmHxr1U8EJEqRVc0p1PUs5fnTLpF74=
Subject key identifier: 56:C9:9F:0E:D9:50:59:BC:7B:8C:41:0B:A0:A2:E8:A7:35:AF:98:DE
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 01976CCFB7D4A8AA3F117ADAC7A5C154BFDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number: 0E90
Signing time: Sat 14 Jun 2025 05:00:41 +0000
Manifest this update: Sat 14 Jun 2025 05:00:41 +0000
Manifest next update: Sun 15 Jun 2025 05:00:41 +0000
Files and hashes: 1: ZfJgayjX3ZyY4keMrrK5ie3SiNQ.roa (hash: I356ijiy3DFzBI7A3YL8pZIG42TC++pOhoxAzv45n5Q=)
2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: 0r4wz24KgJlJMpq+dB19tJ7UdfhscPELBPno+mkoze4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:b7:d4:a8:aa:3f:11:7a:da:c7:a5:c1:54:bf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: Jun 14 05:00:41 2025 GMT
Not After : Jun 15 05:00:41 2025 GMT
Subject: CN=56c99f0ed95059bc7b8c410ba0a2e8a735af98de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:47:d2:43:12:9b:70:c4:a2:b1:8c:ea:9d:
24:b5:6d:ce:c1:be:ec:7e:84:bc:49:d1:cf:b5:2a:
48:4e:66:11:53:0a:2e:08:69:75:9e:b7:67:fc:2c:
77:36:21:80:9e:65:af:ff:91:cf:dc:d7:01:83:de:
11:40:f3:fc:bf:68:f3:46:f2:29:a0:7b:10:3a:1b:
ed:00:49:f8:c1:60:c1:72:5f:9c:c0:ab:94:43:24:
e5:2b:a9:02:09:a5:43:e8:92:a9:7b:7f:c1:22:0f:
6b:0e:c4:4d:bc:96:2c:10:51:6a:6e:26:ba:1f:32:
46:77:9f:b3:55:24:79:1b:45:34:e4:f1:4b:d6:2f:
9b:df:1a:5d:b9:57:a2:07:4d:c8:b6:37:e7:e6:a3:
32:7c:d6:fc:15:ea:9c:aa:d5:3a:4e:b8:cf:7c:64:
51:05:41:2f:b6:5c:ce:4c:3a:2c:fc:eb:fa:db:3e:
60:04:98:a3:39:81:6e:aa:0a:d3:5b:97:dc:94:eb:
28:50:09:0f:24:aa:16:3b:1f:6a:3b:63:07:47:59:
7b:e7:82:4f:01:55:88:b5:37:9b:93:7d:00:5e:c3:
d5:b1:f3:d5:31:c2:e8:35:36:1e:2f:a8:cc:ca:12:
7e:b4:66:1c:79:74:b3:7b:4b:40:bb:a0:88:1e:f6:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C9:9F:0E:D9:50:59:BC:7B:8C:41:0B:A0:A2:E8:A7:35:AF:98:DE
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b5:c2:ea:e2:ce:81:c7:af:91:bb:9a:23:72:24:fe:f3:5d:
cd:5c:ed:58:87:3e:98:b9:74:07:ae:7d:c9:2a:f8:e8:db:79:
f1:23:d1:93:ec:e0:f9:e8:27:a2:db:2e:8d:a4:0f:92:ed:46:
b8:a9:84:0a:1f:72:4a:d2:a3:f6:bd:8c:2f:0e:ad:40:00:f1:
92:4a:74:71:d8:c7:22:94:10:44:0e:ff:80:d0:cd:54:ff:e4:
96:db:49:2e:6d:08:44:e0:09:65:b7:27:b0:b6:87:ef:90:ca:
01:71:6c:b9:4a:90:ea:be:ad:e2:bf:2d:cd:2a:77:61:79:e9:
4a:f8:60:bb:2f:df:ce:69:de:ce:39:8c:f4:09:73:51:ed:48:
c0:15:24:3a:77:3d:db:61:99:00:6b:2b:49:fd:55:24:da:14:
22:51:cb:43:fb:38:23:50:09:61:41:a2:8c:ea:00:94:e0:af:
9f:39:d9:6a:ab:6a:73:0f:9e:2a:00:83:9d:b2:ac:07:b9:42:
36:d2:44:e9:52:69:8e:43:02:17:7f:5a:b6:f8:76:00:09:d4:
f9:13:f4:10:59:ac:b6:a7:ec:8c:c3:8d:ed:f9:7c:b1:8b:ec:
10:14:e2:a1:d0:03:6a:79:e4:8d:7f:75:82:f4:3d:f4:3a:b8:
83:b0:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:15 2025 by rpki-client