Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: m83/2vX3SjKOYtz1al/+pfzW9DE7qKOUREdQuNQ8K+M=
Subject key identifier: 3F:E2:D3:AA:20:0E:55:C9:95:0D:58:3B:27:D8:63:F5:90:76:CA:D4
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 01976D3DE3C0A0E937D99CBF2D16CE25BB05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 10C2
Signing time: Sat 14 Jun 2025 07:01:01 +0000
Manifest this update: Sat 14 Jun 2025 07:01:01 +0000
Manifest next update: Sun 15 Jun 2025 07:01:01 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: t+hK1OH+WkiDq1/LT0LG+1c+BkdK/JIQYQlPb4ZqfwE=)
2: p3WBjzteYXQZYIX5zj87ra338og.roa (hash: UdBIIG65TiaVNqypoeNqjZfjwvGuuMkdscTIPnMkAs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:e3:c0:a0:e9:37:d9:9c:bf:2d:16:ce:25:bb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Jun 14 07:01:01 2025 GMT
Not After : Jun 15 07:01:01 2025 GMT
Subject: CN=3fe2d3aa200e55c9950d583b27d863f59076cad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:92:12:05:b6:45:a5:53:fb:80:2a:07:e8:
e3:3d:d4:2f:64:aa:b5:08:24:0f:45:c2:2f:18:97:
0c:93:ce:1f:55:e1:25:f1:52:c1:5b:59:e8:a8:f1:
a7:e0:7e:1f:21:9c:01:ea:62:e9:b3:38:12:70:ae:
4e:47:85:7a:3b:c9:36:c4:e0:dc:af:4f:26:14:8b:
50:60:8e:e5:3d:30:3a:27:0c:de:cb:40:00:36:5e:
cd:e9:15:01:75:34:eb:1e:13:9d:1d:7d:07:0a:49:
66:c0:b7:01:22:76:62:81:3c:9d:fc:d6:2b:5a:a2:
0b:3d:b5:26:78:d7:04:34:32:48:99:ae:fd:2d:b6:
1d:f7:90:4d:1d:a7:6d:70:5e:14:a0:b5:af:19:2f:
44:b3:63:41:cb:97:38:ad:a6:fc:53:3f:3d:0c:74:
f8:f1:fc:80:1f:2e:67:0a:f6:92:00:c5:1b:70:95:
35:77:2c:64:a1:25:48:55:3e:25:e3:74:d4:69:ba:
d0:ad:02:17:46:bc:d8:63:fb:d8:be:9f:a7:14:75:
e9:3d:d2:8e:bb:3d:a7:cd:63:32:2f:57:78:ab:d8:
56:fb:33:b3:0c:ec:0a:53:f3:8f:30:0f:5a:9e:dc:
82:61:cb:59:4e:bf:cc:1c:df:b4:a5:30:03:e7:67:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E2:D3:AA:20:0E:55:C9:95:0D:58:3B:27:D8:63:F5:90:76:CA:D4
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b3:9e:80:c8:75:65:20:93:8b:09:26:67:39:97:e0:0d:3f:
41:31:55:d6:b9:f1:d9:de:15:fb:74:9f:13:6b:5e:4c:46:88:
be:f4:5a:f9:af:ec:06:d1:85:b9:34:fd:35:6f:2c:73:de:ab:
89:14:54:8b:55:20:f7:17:30:84:6d:4f:50:ee:11:58:8e:12:
85:35:6c:d9:ff:ec:13:55:d3:f9:f0:e7:10:89:f1:73:76:92:
a7:1d:82:a6:aa:1b:92:74:07:bf:c9:19:c4:2a:3d:d4:87:27:
ad:f4:0b:58:ef:96:9c:e1:13:1b:25:c8:ea:80:69:f4:37:c3:
93:0d:60:cf:14:53:6c:90:46:3e:54:a2:a3:00:6d:a9:46:8d:
6d:0f:b2:e0:b7:0a:91:47:ab:67:68:b9:2b:22:cc:52:8b:e4:
0e:43:ef:95:ff:93:a2:f3:5b:46:2e:c3:ed:90:13:6c:97:09:
79:c2:cc:22:79:fd:d9:61:98:1d:73:f4:c9:c7:65:27:04:da:
65:39:a9:b7:46:b7:09:e5:17:fc:36:68:d4:4e:03:d1:fa:7e:
4a:fe:53:fb:ad:f2:3c:4d:6c:8d:55:29:37:a7:63:f0:d4:a3:
85:9a:90:75:a4:5f:02:6c:5a:9e:a8:66:72:36:22:09:a6:ab:
95:8f:4c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:45:53 2025 by rpki-client