Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: v0sJgv4uOaMOYy8OhmNzSRTW/48p9igh4x99Y88l0XM=
Subject key identifier: FA:08:50:8A:20:86:E1:AA:58:76:E6:63:A9:7E:1A:1D:CC:BD:7B:BF
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 019777C108C871EF40A603E98E853B764B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 0B40
Signing time: Mon 16 Jun 2025 08:00:28 +0000
Manifest this update: Mon 16 Jun 2025 08:00:28 +0000
Manifest next update: Tue 17 Jun 2025 08:00:28 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: PA4KHku0CJQuOKtGTqFxD083Kp6Y9Bm2ZFuGo1+d7vE=)
2: qHsLN52OLV40PkdsNg1LTDhrI1k.roa (hash: o2jlcmcZCFuQ0+N7Kss7ufNJs+2izJmB43Pkb+WDd2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:08:c8:71:ef:40:a6:03:e9:8e:85:3b:76:4b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Jun 16 08:00:28 2025 GMT
Not After : Jun 17 08:00:28 2025 GMT
Subject: CN=fa08508a2086e1aa5876e663a97e1a1dccbd7bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:d9:8b:78:e5:82:2c:fd:b4:20:f2:2c:47:
a0:88:2e:4a:fc:32:82:3d:c9:de:c9:99:9c:86:83:
e7:1c:3a:ca:66:8b:80:ed:94:9c:07:3e:28:96:58:
ee:f4:54:37:36:a1:94:da:fc:68:82:e6:79:ac:39:
29:c4:94:15:df:d8:a8:c5:43:90:b5:cb:33:08:0a:
31:64:35:4a:c7:c2:ef:1e:c1:4c:10:31:1b:30:95:
89:d7:1c:7d:6e:d4:31:e4:4c:65:e0:ea:71:84:3a:
3d:4f:cc:76:8b:c6:db:82:4c:42:09:13:44:77:d8:
62:6b:a7:2a:8b:99:b7:65:cf:df:5c:3c:7d:bc:21:
1e:6a:4e:b2:85:60:60:c3:10:6d:f9:2f:c5:53:b7:
48:0b:87:a2:f5:68:2d:76:29:0d:77:d9:a1:66:eb:
70:07:19:34:63:d0:69:7b:c8:07:25:91:64:37:54:
cf:e8:23:11:7c:c0:34:a6:4c:85:00:03:db:13:47:
38:50:8f:e5:df:ab:70:5d:36:0d:9b:da:1e:4f:ab:
25:00:14:16:3e:c2:c2:b7:78:1c:a5:89:93:fd:8f:
8d:05:8d:6d:f8:c7:96:6f:6e:b0:2a:9c:8e:11:41:
aa:d5:79:af:2d:fd:47:33:2f:4c:35:1e:08:b6:d9:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:08:50:8A:20:86:E1:AA:58:76:E6:63:A9:7E:1A:1D:CC:BD:7B:BF
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:55:24:5f:ab:08:8e:75:90:65:56:5a:90:a6:bf:3f:ec:e8:
dc:b9:bf:16:c4:4b:d7:18:78:5f:b7:27:e4:3f:cb:1b:d8:7c:
6b:de:3d:81:ac:9f:22:4e:ef:28:ce:b1:17:5b:ca:f5:d3:53:
1a:fb:8c:18:ee:17:ee:38:06:cd:5d:05:8d:56:5d:79:ca:ee:
e4:99:cf:ae:1c:29:d0:6b:f9:5f:47:b2:c9:72:96:44:27:66:
d2:ee:c8:f4:5f:fd:ab:19:75:0b:ed:45:07:6e:c9:af:03:66:
54:95:29:85:b0:1c:45:ce:c0:98:d7:cf:88:d3:b4:81:97:34:
4c:91:da:02:32:ec:bb:1e:d3:da:4e:b2:8a:19:71:c7:a0:6c:
cf:c7:a2:31:81:68:11:f1:fd:b8:16:91:2d:a5:8c:95:cf:20:
90:d4:8b:85:43:ef:75:7d:0c:11:29:5b:8a:9c:47:d5:82:18:
1f:fd:db:b0:30:84:bf:48:6b:3d:98:fe:ab:ee:df:c2:6e:d8:
d3:f2:37:4d:dd:20:b7:8b:66:09:51:e6:da:ac:f2:35:53:75:
1e:a7:36:e4:2f:7a:60:18:89:d0:31:78:4b:c5:ea:9c:c9:c4:
04:c9:9d:d9:fc:27:b9:42:c4:eb:5d:36:e4:b0:1a:bf:01:eb:
6c:4f:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:31:11 2025 by rpki-client