Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json)
Hash identifier: 1jhNvrX5w6naQki2fUhCwnM+OHePzFE6h48mrzorYs4=
Subject key identifier: 94:16:49:76:48:D5:D3:A3:C0:EB:7E:91:7D:86:FF:B8:6B:D7:34:75
Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888
Certificate serial: 01977AC33A45AE18C10B237C2090E862A80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
Manifest number: 08F2
Signing time: Mon 16 Jun 2025 22:01:44 +0000
Manifest this update: Mon 16 Jun 2025 22:01:44 +0000
Manifest next update: Tue 17 Jun 2025 22:01:44 +0000
Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: VTfVBptzsYnVGQm9otUZrEeecmsAccnylV+bwigqFBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c3:3a:45:ae:18:c1:0b:23:7c:20:90:e8:62:a8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888
Validity
Not Before: Jun 16 22:01:44 2025 GMT
Not After : Jun 17 22:01:44 2025 GMT
Subject: CN=9416497648d5d3a3c0eb7e917d86ffb86bd73475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:c7:97:6f:38:73:36:f3:8b:b3:32:0f:a7:
86:28:e5:71:26:1d:55:88:e5:ea:fb:42:7a:a3:c1:
c2:54:2e:d2:1e:66:bd:24:11:43:11:e9:71:13:a6:
44:a7:ca:db:6e:b4:d2:ff:4f:c0:d6:72:0c:1f:dd:
84:d5:cb:db:5e:bd:9d:1e:d1:58:e1:30:fa:ac:ab:
39:a5:4d:5e:f8:42:48:54:f0:06:bb:7d:0f:44:70:
ae:6e:ce:98:c4:62:a4:b8:e1:cd:fc:fd:cd:c1:42:
a9:b2:cf:7f:7b:62:4d:25:0c:2e:df:6a:fc:30:f8:
36:68:96:ad:74:07:86:5b:75:26:c1:a5:d5:db:a2:
c4:71:1a:01:ff:7a:c5:1e:db:9b:4f:2a:f5:43:64:
9b:5c:97:46:e9:56:ef:a2:69:fd:c8:57:98:18:bb:
49:6b:91:e5:4b:14:8a:41:6e:70:f6:b9:46:01:29:
0e:6c:13:31:9f:1e:81:4e:91:5b:bd:19:12:3c:85:
86:72:17:32:bb:8f:0d:8c:7b:94:38:a1:49:59:32:
7c:dc:95:38:aa:26:27:73:56:bf:59:25:0e:b9:63:
ac:a8:96:d8:a4:52:35:96:c7:22:ff:25:79:82:f9:
0b:14:f9:44:50:2b:d4:4a:13:ed:ef:80:8e:e5:d7:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:16:49:76:48:D5:D3:A3:C0:EB:7E:91:7D:86:FF:B8:6B:D7:34:75
X509v3 Authority Key Identifier:
keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:81:f9:03:51:83:90:41:24:a0:0a:1b:8e:99:9a:f2:1b:00:
62:05:0d:ae:04:73:14:89:f8:57:9e:77:d4:78:e1:ac:97:28:
cf:67:19:a2:e3:d1:0f:d0:e2:05:81:61:3b:32:db:91:c7:11:
df:3b:33:ff:b2:36:06:e2:ff:b0:27:e4:77:b0:b5:f0:88:5a:
a9:38:fe:f8:3e:5b:20:4b:9b:ec:34:c5:50:fa:40:07:e1:71:
0e:70:2c:b4:49:a4:db:6a:6b:14:fc:32:49:ea:9f:df:8a:19:
ab:51:eb:00:4d:cf:58:13:ee:f9:04:13:c8:71:0b:87:7e:aa:
db:0a:f6:1e:42:d2:c6:30:bd:71:01:16:94:52:95:a1:13:73:
50:ba:20:a7:1a:1b:a7:9f:56:24:59:af:b8:33:69:ab:59:5b:
c1:a9:3e:ce:da:d2:ff:7c:e4:52:0a:48:c7:7a:16:44:7a:79:
38:59:ab:91:8f:b9:f6:b9:a6:cc:99:b2:7c:c7:ca:04:1a:ea:
74:4f:eb:1e:3d:fe:45:9a:d9:e4:49:d4:51:90:f2:47:1f:ac:
ff:49:42:db:e0:f1:5f:09:61:89:27:b8:38:c1:4f:ea:81:98:
e8:59:74:f4:0a:43:0e:30:9f:36:12:8a:0d:7c:02:bb:8f:7c:
09:7b:aa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:48:43 2025 by rpki-client