Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json)
Hash identifier: AIHPST+JWgJaeWAYHpQEQoumwkcn4jsnyomOkkS7ZjU=
Subject key identifier: 98:06:AC:BA:50:4A:6B:25:9A:7B:43:94:0A:F4:B6:19:88:34:12:A6
Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888
Certificate serial: 01987B9C09CEA4FE67AD7CCE80E516811F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
Manifest number: 0977
Signing time: Tue 05 Aug 2025 19:01:20 +0000
Manifest this update: Tue 05 Aug 2025 19:01:20 +0000
Manifest next update: Wed 06 Aug 2025 19:01:20 +0000
Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: n14HHd/VgGq6gYDhDcZ04WqUJ7AV5F7opw9LyhSd1LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:09:ce:a4:fe:67:ad:7c:ce:80:e5:16:81:1f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888
Validity
Not Before: Aug 5 19:01:20 2025 GMT
Not After : Aug 6 19:01:20 2025 GMT
Subject: CN=9806acba504a6b259a7b43940af4b619883412a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:18:8a:19:2b:8c:4d:2d:e3:7e:16:7a:72:0e:
1f:dd:ca:9e:c5:e4:b6:25:4c:02:8c:ce:55:3e:fb:
0d:8d:7f:8d:8f:31:c3:12:ed:28:ea:c1:5a:ab:d4:
9f:72:82:69:87:38:d2:99:5e:0e:f2:49:30:db:5e:
4b:c3:33:4f:7f:54:45:c5:c9:32:8c:fc:f4:30:b0:
10:cf:60:fe:4c:46:f2:8d:de:d9:71:f2:ce:c3:d1:
ca:fa:d8:fc:2c:f6:28:45:cf:64:64:a7:b2:2f:c7:
73:38:62:78:08:27:06:35:93:80:4d:e8:e1:83:76:
ef:33:7b:a9:f1:aa:0c:cb:a2:bb:13:b0:aa:e7:1d:
97:98:13:85:85:e8:15:b4:bc:cf:35:8d:1e:dc:4f:
ec:2d:aa:05:ab:30:55:cf:eb:7b:80:5c:a7:1e:73:
61:c4:64:c5:01:4c:78:bc:2e:9c:8a:03:54:a7:80:
43:3a:af:b1:b8:15:c1:71:d2:a7:2b:7e:b5:2a:6a:
d4:6c:c3:0e:93:e3:a8:da:21:9d:7b:e9:7d:70:d6:
36:2e:8f:46:c4:8e:7c:3d:8b:7e:bf:26:d9:23:ee:
ae:cb:9e:72:01:50:e1:0a:39:c7:87:1a:7a:6d:e3:
08:bb:1a:4a:d1:c2:b0:aa:48:74:58:04:37:89:b2:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:06:AC:BA:50:4A:6B:25:9A:7B:43:94:0A:F4:B6:19:88:34:12:A6
X509v3 Authority Key Identifier:
keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:11:4f:d2:d7:0d:78:48:f1:00:84:78:ca:86:28:71:ed:98:
f0:eb:b5:ec:a2:c0:17:90:78:9d:6e:ee:55:ae:94:4a:bd:40:
89:62:7f:44:26:65:e0:3a:6a:b7:7f:ee:05:06:c4:cf:cd:93:
99:3a:10:c8:27:d5:2c:9e:53:4f:71:a2:97:06:1c:d4:7a:51:
21:e3:34:8f:c3:9d:bc:9a:ce:f9:51:42:51:8e:b1:72:3a:ba:
30:89:41:48:79:28:eb:4b:a6:6b:e3:ba:b5:87:2c:72:3a:50:
50:f4:17:92:b0:be:94:96:7a:6b:44:3c:1b:f3:4a:8e:ad:24:
6b:25:44:e4:38:12:c3:82:e5:da:d7:33:2b:cf:16:de:f1:e9:
40:b4:3b:3e:d0:78:79:ca:24:a1:d3:72:93:a3:f0:63:da:0e:
db:04:52:3c:66:23:2d:27:51:4d:7a:bb:6e:57:eb:14:7d:a0:
57:4b:31:e5:a7:c0:23:1b:59:4d:bb:7f:18:03:78:b9:d0:81:
54:ad:74:6c:7c:8a:62:d3:73:b7:c4:85:83:69:28:40:f2:cf:
c8:2b:e2:f9:7c:92:2a:4b:45:8f:b3:09:b6:b1:8f:8a:b9:0f:
31:69:57:d6:6a:4d:b4:4b:98:01:81:b6:78:3a:81:78:e7:e6:
bd:6d:3c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:01:24 2025 by rpki-client