Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: gxcLlH7RON80HXzM7hVL2dOSnNpOW3ydfqmqOfEXar4=
Subject key identifier: 3C:E8:EE:22:DB:12:AD:8C:AC:1C:1D:C5:E3:7D:5B:25:50:38:E6:B3
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 01988CFE2716491DF2E554FEDEC6CE27256E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 126C
Signing time: Sat 09 Aug 2025 04:02:03 +0000
Manifest this update: Sat 09 Aug 2025 04:02:03 +0000
Manifest next update: Sun 10 Aug 2025 04:02:03 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: oKRWgGN0WPKJlv+QhMiJ4K6r5Sp4lwqIIjviOWbV4mQ=)
2: qlMHdAg_ZeG5jpZEikZxyiq5rOM.roa (hash: r9NbCVDLWns0v6U+hfflkmDI70L6VCrJW0Q5+div1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:27:16:49:1d:f2:e5:54:fe:de:c6:ce:27:25:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: Aug 9 04:02:03 2025 GMT
Not After : Aug 10 04:02:03 2025 GMT
Subject: CN=3ce8ee22db12ad8cac1c1dc5e37d5b255038e6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:b9:70:ba:a0:3b:49:41:95:a2:14:98:65:
48:64:1f:5c:a3:24:b0:1a:84:44:02:16:83:d2:d1:
f6:0b:04:6c:c4:27:74:e4:00:30:ee:3c:c2:98:44:
8b:b8:99:bf:ab:fa:81:89:2f:d9:ff:76:38:f9:42:
0e:e0:cf:1f:5e:2f:40:67:5d:4f:78:cd:12:8f:aa:
b7:47:a1:58:cf:7a:68:94:d8:05:76:9b:19:8e:c9:
8b:55:94:b4:dc:9c:86:af:f1:74:83:00:47:84:57:
4f:50:7b:90:b7:bd:10:e9:0b:b5:40:12:f7:c0:08:
6e:53:e7:f7:35:cb:ed:00:7f:9c:31:42:4d:88:de:
60:1a:79:6a:2d:a0:0d:f7:01:3d:5e:97:0a:f7:8f:
d5:26:f4:19:6f:26:69:4f:0a:c9:ff:b4:48:1f:4f:
f8:74:ab:6b:8a:07:58:23:d6:a5:86:5c:d7:06:b4:
db:65:f8:5e:c1:4d:15:a9:49:bb:01:28:b1:e2:5d:
d8:d3:a3:66:d6:68:02:c1:ba:c5:8e:a4:57:8f:02:
68:4c:8b:74:65:47:8d:36:66:a4:89:e8:70:77:fb:
e1:a6:46:f0:23:50:97:f1:00:b6:e5:e1:65:5a:3c:
95:66:5f:87:7b:8a:bc:63:27:a7:25:cd:75:a6:8e:
4a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E8:EE:22:DB:12:AD:8C:AC:1C:1D:C5:E3:7D:5B:25:50:38:E6:B3
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:07:9c:65:9a:e7:4e:1a:57:77:25:a3:b8:d0:29:6d:fd:b8:
0c:83:09:21:3a:be:f7:45:d8:5c:06:39:c3:46:2a:bf:ac:94:
c8:e6:c5:f5:33:a8:32:c1:b0:7e:66:4a:44:a6:aa:a3:68:d7:
51:b5:bd:a9:34:50:c1:05:03:e6:3a:86:8d:c2:d4:91:11:77:
ff:bd:08:94:83:f2:d5:cc:66:15:05:23:41:72:cd:fe:12:59:
3e:68:e3:1e:24:3c:df:0e:12:a9:1d:59:43:8e:6f:b6:df:80:
d3:ff:9b:e9:2e:5c:f0:00:da:86:9f:b5:4a:31:f8:a9:43:bf:
4a:69:37:cc:c3:65:eb:78:e1:69:79:83:51:97:07:86:9e:62:
c9:41:e4:92:d4:08:96:be:bd:8a:2a:48:73:58:c9:0f:59:af:
c1:9a:40:2c:05:db:ff:c5:15:3f:15:bc:96:d8:7f:c5:f9:b4:
ec:dd:38:75:fb:36:93:c3:27:1d:12:be:57:dc:a3:c0:22:be:
d7:e5:37:d4:dd:f6:87:1d:b3:1f:68:49:df:4d:fd:31:2f:e1:
b6:36:ab:99:6b:90:b4:52:91:74:e4:5f:ae:ad:50:b8:0e:15:
dd:71:79:60:0d:4d:e7:76:4e:c7:d9:6d:f3:3a:38:6e:c7:59:
90:38:83:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:34 2025 by rpki-client