Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: KMSjO1S5s5Nz4EOs2KSpsocApuDNHLQrgQMXRK6lBZw=
Subject key identifier: 28:C2:74:5A:E8:4A:51:A7:E9:A4:3B:7B:B3:94:EC:56:15:E2:B7:5A
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 0197887DB52498D0A2C4596E907C1D75080A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 03B0
Signing time: Thu 19 Jun 2025 14:00:28 +0000
Manifest this update: Thu 19 Jun 2025 14:00:28 +0000
Manifest next update: Fri 20 Jun 2025 14:00:28 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: /xC3W3LmkNqP60wQs/q9Mwz6MR1gC6IwLvlM1QholbU=)
2: devZOEgryptZR-bT6KNMpTw3Mfc.roa (hash: u3HbxNlq49urjWUiGXoyu0fcegzQ7OgqdK+RiiJSzRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:7d:b5:24:98:d0:a2:c4:59:6e:90:7c:1d:75:08:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Jun 19 14:00:28 2025 GMT
Not After : Jun 20 14:00:28 2025 GMT
Subject: CN=28c2745ae84a51a7e9a43b7bb394ec5615e2b75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:9c:29:6c:57:a8:f8:a8:f7:8c:e8:da:46:
ef:a3:c7:0e:51:f8:d5:a6:79:71:93:a0:ca:67:50:
96:f5:9d:71:5e:c4:67:70:8e:2c:a8:e0:9f:5d:e3:
38:fb:0c:15:be:15:23:1e:7a:1e:45:b4:f0:c3:52:
26:3f:6f:ba:29:79:bd:4d:7d:99:9d:b2:98:f3:35:
fb:04:59:d7:50:e0:80:bf:a7:f4:0a:38:47:9c:8f:
c5:b5:6f:96:2a:6e:17:69:fc:89:3e:93:e7:a0:1e:
55:91:45:b3:e5:30:00:e2:36:cf:7d:31:01:a1:18:
28:ac:dc:65:5b:6b:b3:af:0a:63:09:48:54:0d:4c:
88:c1:56:ab:b2:d3:27:7a:35:45:10:d9:f4:11:28:
fa:84:20:07:8b:00:e8:ab:2b:08:fb:b8:2b:da:6d:
bf:b2:01:68:6a:52:38:c9:1d:74:7d:a7:15:9a:84:
ed:53:6f:a8:c9:86:b6:13:1b:47:0f:73:33:7e:b1:
a0:56:17:44:f8:2f:b6:91:a5:26:84:5f:f1:82:8e:
ca:2d:b1:90:0e:0d:ab:d4:54:f6:d5:7d:2a:55:a7:
ad:5e:36:f5:dc:16:37:b1:f9:95:2b:0d:32:dc:d9:
a6:e7:e6:20:0c:56:dc:68:37:d9:b2:9a:e2:98:09:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C2:74:5A:E8:4A:51:A7:E9:A4:3B:7B:B3:94:EC:56:15:E2:B7:5A
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8d:bc:37:1e:27:be:09:aa:cb:0b:ce:06:d3:1e:3d:51:24:
5d:d6:cc:2e:a1:08:a2:0c:12:da:87:12:d5:60:3b:c0:1c:40:
75:c0:f9:f3:d3:4f:0e:dd:47:60:56:39:88:92:b9:35:1f:68:
fe:19:8b:c6:4b:db:14:53:62:3c:d0:c5:85:45:81:af:3e:7a:
e4:d1:15:39:c1:54:4c:98:f2:36:04:89:24:99:11:3e:6d:74:
5d:fe:fe:82:fd:fe:35:f9:58:63:3d:7c:5d:95:cb:b1:81:90:
83:4f:6f:ae:30:27:a1:a5:00:b1:1c:1d:9e:18:eb:32:da:9a:
c4:6a:db:c4:2b:20:16:a7:5a:37:90:7c:4e:ce:20:f9:be:c3:
58:82:9d:4f:51:9b:a9:c8:e5:8f:5d:77:eb:c8:62:24:90:08:
76:59:e1:1c:78:b1:db:a7:d1:6c:69:a0:55:56:64:3a:fe:4b:
36:53:c2:35:47:d3:ca:9b:3b:73:88:a3:0a:c6:31:4f:46:9b:
4e:90:d5:b0:d5:0b:f2:f3:85:f6:84:d8:4c:07:08:13:5b:d9:
44:1c:6f:1f:8e:73:0d:ec:1b:3e:d9:16:ee:29:f9:9b:b8:fd:
7d:fa:b0:7e:08:bc:20:15:3e:8d:a9:67:cd:bb:98:a6:31:63:
d9:07:d3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:04:58 2025 by rpki-client