Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier: IYxYO0FkIzryprfeiVUp2VEB9QhdT6I3VOlcEy11mms=
Subject key identifier: AC:F3:C6:95:6A:E1:FC:3A:33:30:3C:61:31:82:4A:77:26:68:D7:42
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 01987CE4DC9ACBA0F519CD88F803FD08516A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number: 05A0
Signing time: Wed 06 Aug 2025 01:00:30 +0000
Manifest this update: Wed 06 Aug 2025 01:00:30 +0000
Manifest next update: Thu 07 Aug 2025 01:00:30 +0000
Files and hashes: 1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: xQGoeNgjtFrljgK0aTM0wagUGi8Hp6rBEczp5OGYZiA=)
2: 3e96O0zql-DJprCN832OErRtWhY.roa (hash: YxeaSNUi71632qJZwGZv8Hu3idvAcvJX148wv4xYwpc=)
3: 6W_cfm-J8Jm0OpvUv8VEPziXvqU.roa (hash: ntUZRyHP+6WOiJkOEZN4Fuk1A/G3+Q9sIm3AVgN1jow=)
4: 7iPtEMlcS-95zv2l-9LcExzrIMU.roa (hash: wBjPWZtqDlytdLWUUgzq4RIZY24YAMcvhX1x0tSKKDI=)
5: w4HlqPi1OFmgM8LH-X3G7-isDzc.roa (hash: L9SAWLXqlEKX0McJ5PDoHev7KlGzu28LLCwZ81A7uqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e4:dc:9a:cb:a0:f5:19:cd:88:f8:03:fd:08:51:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Aug 6 01:00:30 2025 GMT
Not After : Aug 7 01:00:30 2025 GMT
Subject: CN=acf3c6956ae1fc3a33303c6131824a772668d742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:7b:cc:14:74:21:8a:94:64:cb:d7:56:5d:
79:d7:4a:5e:81:8f:de:10:c0:eb:84:6d:3b:42:82:
91:02:86:ca:8d:f9:a0:79:da:3e:0c:18:13:f1:84:
24:19:32:62:44:0a:8b:a2:fe:4e:5f:f7:ea:31:32:
94:c1:08:e8:84:85:c5:23:02:4b:a6:2f:8e:55:57:
91:df:f1:32:73:8d:d7:a7:d4:8d:da:ea:06:15:b9:
14:f8:4d:f2:f2:49:82:db:00:3f:79:53:22:b7:a3:
32:3b:35:c0:9b:01:a1:80:e3:98:2c:93:f8:dd:e9:
f3:3b:ec:dc:85:ea:d1:72:9d:ed:0e:e2:3f:28:1a:
34:7e:2d:6d:04:2d:f9:36:bb:6f:b6:d7:69:c4:33:
a9:de:b2:a1:44:9b:f9:5b:b2:5f:41:f1:d2:ae:bd:
43:fb:c5:c3:84:03:91:a9:a2:0d:67:a8:9b:8a:8c:
96:6c:da:17:d8:69:ca:4d:9c:49:b8:74:2d:33:4c:
49:c6:77:92:d2:ba:96:cc:e2:40:bd:4c:df:64:76:
06:94:79:09:19:28:79:f7:98:b0:9f:ad:3f:06:99:
5d:ff:5a:65:41:17:48:8a:7e:e9:a8:b8:44:d0:17:
76:86:89:01:b5:ed:c6:c4:32:76:ea:e4:49:5e:5d:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F3:C6:95:6A:E1:FC:3A:33:30:3C:61:31:82:4A:77:26:68:D7:42
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e3:79:aa:df:e7:7a:b6:1f:fe:bd:9e:e5:2b:f5:1e:03:76:
62:46:e0:46:5b:b5:14:69:e5:6c:73:13:68:10:7b:d3:9d:63:
72:1b:6b:11:24:c2:3a:89:9b:db:9a:d2:85:9d:b9:ba:77:3e:
08:b5:42:ce:50:e1:89:a9:a0:16:ea:94:e0:c8:2f:8f:03:c5:
8b:5b:28:d8:df:51:cb:7a:53:5b:d3:e6:b2:c2:65:42:68:a3:
29:42:72:24:4e:e3:66:31:7d:7f:14:eb:51:ce:94:a8:b4:84:
c6:ee:aa:be:f1:fe:fd:cf:e1:63:81:50:1e:96:0f:b1:43:e6:
9f:c1:53:f2:c0:1f:78:ae:71:97:9e:bd:ea:ce:52:82:07:91:
25:1c:a2:4f:e9:19:69:b4:cd:07:68:f4:16:7b:a4:e7:89:42:
10:94:e0:6b:84:9a:9d:5d:1e:43:6d:33:08:9a:93:09:5f:c1:
cb:bd:50:23:3f:cf:ec:24:7f:19:b7:a4:d7:29:7e:48:56:78:
24:32:51:08:93:3b:b8:95:09:1f:d0:84:41:af:3c:aa:c7:fc:
53:63:5f:c9:30:f1:08:98:37:04:cd:71:80:e4:06:6f:5b:f8:
38:1c:47:42:09:a8:83:a2:ff:a2:92:fe:e7:a8:1d:0a:a6:dc:
4d:d7:7a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:42:37 2025 by rpki-client