Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: kL2EEjFCwv9FkMeay9AaR8Hi5MwqmZ4qS0Ce+ZDBdEE=
Subject key identifier: 42:56:D0:2B:B8:AB:43:A0:B1:12:AB:21:15:26:D5:8D:15:79:E6:3A
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 019770E3671D73445F0DEFBF3907FDF35348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 1174
Signing time: Sun 15 Jun 2025 00:00:40 +0000
Manifest this update: Sun 15 Jun 2025 00:00:40 +0000
Manifest next update: Mon 16 Jun 2025 00:00:40 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: SCNHP942N2T0y/AFCZiDGJtT02xSQhGenugt8eLOB/8=)
2: q36KB3psJEdwM9htMyeD7v_JoOg.roa (hash: TalVhq3AmB2TIBAEtWkTlS4vjvUd3V9bg1ZpQQHry4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:67:1d:73:44:5f:0d:ef:bf:39:07:fd:f3:53:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Jun 15 00:00:40 2025 GMT
Not After : Jun 16 00:00:40 2025 GMT
Subject: CN=4256d02bb8ab43a0b112ab211526d58d1579e63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:44:83:2d:c2:1d:17:69:c6:f4:b6:63:d3:
f5:7a:7e:ac:09:8e:f5:7b:cf:a9:2f:a0:54:bf:70:
1e:e3:3f:69:b0:e2:21:6b:45:27:7f:e0:3e:bd:72:
23:b1:c5:66:2a:27:88:b7:1a:9d:e3:c6:97:e0:c4:
9c:74:a1:9e:9a:3f:ac:0a:e4:78:a0:55:74:0e:74:
79:24:7c:db:21:26:ec:c1:74:99:fe:52:0d:06:63:
cf:73:71:65:4c:f3:d1:d8:15:8a:07:7b:e3:ef:c0:
a6:41:58:fc:e6:c6:47:14:cb:d8:d2:c7:df:91:3d:
7b:89:c8:63:9a:16:b6:5e:7e:0c:62:4e:5b:57:40:
32:65:a9:37:fc:a7:f3:02:76:d0:35:9b:83:2e:cc:
00:44:b0:19:29:35:96:e3:46:3f:85:0c:d6:a8:9f:
f0:f4:16:f6:df:7d:b8:f8:a1:39:47:8e:9b:42:e4:
41:a3:fe:8a:c3:e1:4d:bb:f4:31:ee:ba:e5:58:c0:
de:b0:45:f6:30:ef:1a:2b:9c:f2:ab:cc:3c:83:73:
76:8a:f7:3c:bb:0b:0d:48:ac:49:8b:fd:8d:d3:17:
b4:8b:7f:c8:c6:ed:0b:f4:6f:e6:cd:d8:9c:cf:1c:
3e:03:ed:0c:a1:be:be:be:d6:67:39:27:ca:01:0b:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:56:D0:2B:B8:AB:43:A0:B1:12:AB:21:15:26:D5:8D:15:79:E6:3A
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f9:78:aa:22:cd:b2:6d:dd:1d:d6:07:1a:24:99:51:3f:e1:
d5:20:cf:ba:ff:40:c0:cc:8d:75:c9:33:65:a1:8d:89:e9:45:
2e:3c:b1:42:6b:83:79:ee:12:5e:33:64:45:91:2b:4f:d7:ce:
bb:49:3b:ea:3a:49:52:9e:37:96:57:44:3b:fb:91:e9:06:3d:
eb:54:e7:f8:cd:b8:72:87:07:c3:1c:bd:03:cd:f3:2a:58:6b:
f3:6e:19:fe:cd:26:80:18:5c:a3:09:2c:24:0e:0f:ff:de:6d:
58:e8:32:84:65:d4:6e:13:6a:26:71:de:a8:e3:c4:25:af:5c:
59:0d:2b:37:c9:0e:23:d0:04:53:df:c8:44:26:e4:1c:7d:c5:
50:c4:a9:47:5e:ca:9d:3c:28:4a:ce:8b:1e:a8:1f:c3:9e:cc:
38:fd:85:43:b7:69:9e:60:64:3e:2a:f7:08:c5:05:72:86:f9:
36:c3:73:f1:1c:b6:a8:8f:2a:91:c8:23:45:9b:30:8f:f8:ba:
93:64:93:75:a7:e2:cb:f3:93:1e:44:8e:f9:b6:2b:84:c6:06:
c2:a3:67:f7:56:b6:de:fc:ae:85:63:54:66:b4:dc:9c:07:a4:
bf:0d:c7:71:92:40:84:c9:64:29:30:e7:bf:e5:32:3c:9a:26:
c9:fa:39:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:29:49 2025 by rpki-client