Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: vw0nPIpm/ymDl63MbOra2I0TMcmuaLe/4rveNKZHCC0=
Subject key identifier: 0D:57:8A:79:C2:8C:90:7C:A9:34:B8:0A:4F:99:95:F5:F2:E4:B7:CD
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 019776E634FCA744B7FBA24A708B06406CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 04:01:27 +0000
Manifest this update: Mon 16 Jun 2025 04:01:27 +0000
Manifest next update: Tue 17 Jun 2025 04:01:27 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: hI5rqgUaV2YoRU/VLsxDPmtytKvqjVx5Tdx+M6xMSNc=)
2: cvAMZ-azozJjAwqBJfc2rmmZkME.roa (hash: Gewk40CVQw5q21r2SfPnFc/pGMGpE0T4SZt3vyzVUaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:34:fc:a7:44:b7:fb:a2:4a:70:8b:06:40:6c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Jun 16 04:01:27 2025 GMT
Not After : Jun 17 04:01:27 2025 GMT
Subject: CN=0d578a79c28c907ca934b80a4f9995f5f2e4b7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:ba:6a:c1:6a:f4:a9:05:16:40:be:5b:65:
77:a3:42:9f:7c:f0:55:eb:5e:d1:3e:4a:85:23:df:
c6:ac:fd:8c:4b:0e:9b:a5:bf:cf:b9:d5:c1:7b:d3:
37:40:23:86:72:48:62:af:02:3e:15:54:e8:58:f8:
2b:8f:86:3a:05:ba:b1:60:2c:45:6b:e1:40:e1:5d:
fb:65:25:49:85:38:1a:08:2c:a7:01:5e:f4:09:08:
4a:d4:e1:23:cc:dc:d2:94:8b:f5:75:16:3b:54:c1:
3a:5f:3c:17:36:7e:01:42:18:89:a7:e5:cb:3e:bb:
dd:21:1f:ba:31:10:56:ee:ef:5d:a4:c8:d7:5c:69:
68:1d:86:dc:f2:72:fd:ce:db:89:40:57:2e:1e:62:
d7:a6:9e:00:ea:f2:75:2a:63:5b:28:a3:e4:fe:e0:
06:78:a8:75:9b:d1:ce:dd:9f:29:29:a3:17:38:a7:
8b:cb:29:84:cf:f3:24:4f:f0:f0:a6:a8:0a:3a:84:
b8:8f:71:d3:af:9a:86:a0:4c:b3:6d:79:22:82:96:
4d:62:1b:46:98:0c:83:a0:46:fd:29:3d:14:a7:c1:
a6:55:4a:9c:71:16:13:95:2d:c9:fb:43:bd:70:a5:
28:48:27:ba:24:d4:99:ac:7b:d0:0f:4e:c3:d4:b9:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:57:8A:79:C2:8C:90:7C:A9:34:B8:0A:4F:99:95:F5:F2:E4:B7:CD
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ce:89:cb:e8:bb:a3:2a:ef:52:2a:a3:e3:8e:0a:88:cb:4d:
8d:3c:fd:a7:c8:0d:62:79:8b:50:bd:46:f8:5a:cc:f3:4a:48:
af:77:33:b3:f9:2b:30:7b:76:84:4a:53:a1:a7:3f:35:88:17:
ec:77:9e:2d:3e:3c:43:1c:a7:78:87:5c:1b:df:d1:f6:63:13:
93:33:e5:6f:e0:d5:41:9e:fc:af:e3:73:00:db:2a:ad:09:b8:
26:79:ad:d8:02:ef:b1:01:de:9a:1d:76:8d:2c:23:58:fc:b0:
0d:85:9d:c4:d8:9a:dd:b5:61:54:54:29:9c:06:ef:81:04:4a:
08:b8:b3:3c:43:6c:e5:5d:89:12:14:65:f1:e1:23:bb:da:35:
ed:e8:11:09:eb:64:ed:3a:85:84:16:f7:d9:85:df:24:a3:9b:
8e:1a:44:ee:e3:79:00:7d:c3:5b:f4:b4:a1:9f:f8:75:fe:87:
d9:14:f2:a4:9e:15:29:83:da:99:d8:21:fe:4a:2a:6c:67:69:
3f:02:03:94:ed:62:fc:ac:28:b6:15:27:90:2c:ac:fa:94:4e:
cf:10:76:8c:30:13:6a:17:09:8a:97:bf:b0:8b:97:f0:bc:59:
16:11:9c:c9:e3:d5:d9:c3:2c:06:f0:df:d4:f5:04:11:ae:c0:
d0:73:b1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:46:27 2025 by rpki-client