Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File: x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier: U8xB+7MhLaLnblULgjsLscuur1SLkmKGtn1MRCHEtxw=
Subject key identifier: 3B:5C:A1:0C:71:33:14:FB:B4:BE:7C:5D:C7:EF:74:D5:FE:78:74:CD
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial: 01977150F33AAE1E081F56FA2810D3307482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number: 12A3
Signing time: Sun 15 Jun 2025 02:00:19 +0000
Manifest this update: Sun 15 Jun 2025 02:00:19 +0000
Manifest next update: Mon 16 Jun 2025 02:00:19 +0000
Files and hashes: 1: 1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa (hash: 5WgQd9Yh0UTrO+r9EgLHuyHwMYhN32NKq3EDRy9j2p0=)
2: 7yURIEiYXPhLVZDi97wbUcsfcDY.roa (hash: Ol8VywPbGCR2MgIy9CM4htLL8MW0LNUUW5y21OBGiZM=)
3: I2QulkDn2KJ47c0S4-OMmVLx31g.roa (hash: 6xzBl4bZ4a5rXXVvnxUC4raf2cq3cMarrtfKS85kss0=)
4: RipMkwup9NsgAPIlQi1_XcX5wqM.roa (hash: PKXzaXWv76nde6R//GV8jsOM053aaHLrBAjby7FXNqk=)
5: b4vNMGbRo2o67bz3u22uz2ItyKI.roa (hash: F56Nx008CaMRp5Gdw8I8PExmWIZfZ1jjPIYQMLnTJ8s=)
6: hyGdIxYjhpqU0-02Qe9kMQYj3as.roa (hash: 9uhvciX7Lxjh2PeJ2H7HVv5jBuVg9P3AFweq88tYGFU=)
7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: ikeZJ4v9IbEBr0xV5atFuRXbwX0faeYOYjgaScg34i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:50:f3:3a:ae:1e:08:1f:56:fa:28:10:d3:30:74:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Validity
Not Before: Jun 15 02:00:19 2025 GMT
Not After : Jun 16 02:00:19 2025 GMT
Subject: CN=3b5ca10c713314fbb4be7c5dc7ef74d5fe7874cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:34:9a:50:20:f7:d1:73:31:96:f7:58:b4:
dc:7d:fa:fb:66:85:9a:66:0b:5e:4d:f8:74:e6:0f:
33:38:7e:8f:28:bf:da:cc:48:54:21:90:f8:a7:c1:
d0:f2:b3:f7:9f:51:2b:18:b2:16:ea:e8:a2:a6:69:
19:dc:f5:9a:c3:d7:d7:f2:ba:e0:13:52:97:3f:62:
67:cb:45:d0:a1:54:80:08:69:86:cb:80:ac:c7:81:
26:23:2e:f8:84:db:61:57:ea:07:e8:ec:11:d4:d8:
c6:c7:dc:a9:e8:5a:5a:61:c1:c0:37:e1:f4:1d:89:
66:ec:a5:8d:01:e1:fb:99:11:e8:15:25:4a:9f:9e:
06:91:b2:b5:1a:5a:9a:07:bb:a8:84:f4:be:be:85:
b5:85:e8:f9:b2:c2:98:3a:ba:06:b3:a4:8f:64:2b:
46:ac:83:b3:45:dc:79:71:f6:87:a6:55:13:cc:b6:
08:45:fe:0c:be:6e:bc:a7:32:d3:d9:87:93:14:b2:
17:cf:29:d5:dc:73:e6:b2:20:79:51:f4:3e:d0:fa:
26:e3:d5:64:4b:21:3b:26:dc:d8:30:96:7a:1d:8e:
95:1c:a6:8b:c1:0e:b6:2d:9f:78:15:9a:4c:8c:1d:
7a:bb:0a:57:e8:28:fe:bd:50:a4:fb:a7:af:8b:98:
eb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5C:A1:0C:71:33:14:FB:B4:BE:7C:5D:C7:EF:74:D5:FE:78:74:CD
X509v3 Authority Key Identifier:
keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:af:c8:2e:7a:b0:94:99:5f:8a:4c:cd:3a:e6:21:d4:25:04:
de:9a:ee:c9:d9:f1:a7:7d:35:55:14:61:f3:47:e9:4c:f0:9b:
83:95:8b:20:3a:3a:33:ce:ce:28:e5:f4:bd:7b:6b:1d:27:fc:
c1:2d:5c:ce:b5:8e:e8:b9:3b:04:78:b1:ad:2c:0d:3f:f0:83:
72:4e:2d:74:28:9b:75:72:95:d1:d4:12:b2:60:76:1c:ae:29:
e0:a2:19:00:9c:b8:84:08:4e:41:91:18:1e:d5:f5:1d:dc:61:
2a:11:4b:99:94:b5:ae:82:64:a2:72:7f:5d:23:33:01:11:9a:
d0:fd:0b:ea:00:a7:a4:5e:c9:eb:0e:28:42:e5:00:56:a7:e0:
71:19:5e:23:4f:b7:59:ee:d3:26:82:77:be:4f:41:71:ef:73:
68:14:18:31:88:43:ea:6b:06:9a:c3:33:85:e4:3a:39:d7:64:
a9:67:2b:2c:94:71:9f:af:20:32:17:24:56:43:15:10:a5:b8:
2b:c1:f7:8a:49:b1:1e:4a:fd:1f:82:c8:f4:7b:96:98:ce:f2:
b4:f5:f0:0e:84:9d:4a:89:df:a3:c6:f2:59:16:2d:07:d9:45:
70:50:31:4c:12:20:f0:b0:94:ea:11:fd:c6:82:60:8f:43:3e:
70:db:fa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:05:46 2025 by rpki-client