Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier: 1iQFcfVNlTLswX6moHp9lPAbR2Pfsw52EoEJib6pXNY=
Subject key identifier: AC:86:2F:51:0D:95:46:64:EC:30:3D:50:4A:BD:1E:B3:D7:F8:2E:FB
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 01977A8B7AC9B8C40B571BF777EC5A13D217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number: 1597
Signing time: Mon 16 Jun 2025 21:00:50 +0000
Manifest this update: Mon 16 Jun 2025 21:00:50 +0000
Manifest next update: Tue 17 Jun 2025 21:00:50 +0000
Files and hashes: 1: Hspj5PzkfsluTEqLIOwJGoQGOOc.roa (hash: gOBFADglYE5G0b4X+8zSKnsYq9fnevgLZFWvJSsuL9M=)
2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: dcvXespJwOGlJVgHebtI/pvan/UQZ7InTG9I4Ngv12g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:8b:7a:c9:b8:c4:0b:57:1b:f7:77:ec:5a:13:d2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Jun 16 21:00:50 2025 GMT
Not After : Jun 17 21:00:50 2025 GMT
Subject: CN=ac862f510d954664ec303d504abd1eb3d7f82efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4b:40:a6:81:1c:29:c5:a7:3a:45:01:47:7d:
59:2a:0f:bf:48:df:28:4f:8d:fd:fc:bc:c9:5d:00:
33:bb:31:98:57:aa:28:35:3c:ad:4f:b1:5d:08:db:
21:2b:c0:d8:c8:4a:66:c0:c7:d8:c4:57:f7:ce:52:
13:74:c5:8b:9e:6a:ae:aa:ea:22:f4:72:65:38:be:
6e:dd:82:70:90:89:53:38:e7:44:c0:46:b5:26:bb:
79:0a:9b:cf:44:0f:4e:89:ae:21:78:20:9d:b8:3e:
40:e3:e0:17:a6:f7:61:87:3c:cf:d6:06:ce:9e:cb:
c5:01:1f:5f:22:47:2f:9e:8e:dc:c2:32:02:e9:a1:
07:91:ab:7a:25:f3:6c:a6:fa:c5:71:25:79:09:fb:
e8:17:73:34:84:6d:d6:c4:0f:6c:15:b0:ee:cc:df:
20:61:f6:11:ec:f2:0c:a7:46:c5:15:70:21:ec:de:
b7:d9:75:74:7b:a1:64:54:4a:b9:44:4d:0d:31:e9:
53:30:29:0e:fb:f4:45:5e:23:6e:93:1b:ac:e6:8f:
6f:b9:72:b2:94:c4:c9:26:b1:88:25:af:11:92:c6:
3a:e5:a6:d8:eb:9a:4c:23:8a:34:e5:3b:f1:84:df:
41:5f:97:17:07:ca:04:34:32:ef:d3:3a:20:b4:c2:
b7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:86:2F:51:0D:95:46:64:EC:30:3D:50:4A:BD:1E:B3:D7:F8:2E:FB
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:56:ad:e2:3f:42:84:ef:93:d1:20:ac:65:ab:da:69:ba:c5:
50:f6:49:3f:44:d2:15:d1:99:8c:76:39:e4:e6:40:18:72:47:
8c:9e:f2:0a:88:19:96:23:5d:34:29:ab:62:39:ef:1a:7f:cb:
e3:67:95:f2:42:a1:84:a1:6c:0d:6f:45:d1:b7:a2:52:e5:d6:
f4:5b:e5:92:dd:98:79:59:90:f6:36:6e:6f:68:46:a7:40:c1:
a0:0d:12:91:99:af:09:f8:06:78:3f:4d:81:98:01:4b:80:69:
af:4b:57:12:57:99:95:af:09:69:ab:0a:b0:42:94:6a:ca:43:
34:79:c4:f4:72:fe:77:70:40:a8:ea:6c:1c:5e:2e:dd:76:44:
ed:a2:93:2f:ce:77:c7:92:c9:ba:2d:46:ff:2c:a6:a7:12:ce:
ef:1b:ee:a7:7e:a0:5b:44:75:9f:4d:ca:7a:03:8e:c6:cd:30:
9e:01:a7:bd:00:fd:80:8c:1f:56:d7:a6:60:dc:40:70:ab:c6:
26:b3:70:5b:14:4b:4b:0a:24:6c:64:0e:fa:1a:81:b4:df:50:
68:da:8a:3d:1d:1a:07:28:c4:9c:ca:83:fc:30:30:b6:5f:62:
3a:4d:c9:f3:db:23:52:65:f8:33:aa:60:fe:39:35:93:81:65:
58:24:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:03:52 2025 by rpki-client