Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: duCHxu8U0A0OsZthl1xJ3cLYw+oeKRp5opR8mZE19a0=
Subject key identifier: C5:9E:4A:4E:D3:65:4B:E1:BB:69:9D:58:72:A2:60:C9:81:8D:87:32
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 01976BBD47034AF462E6CB33A1FAE4BF41B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 0F42
Signing time: Sat 14 Jun 2025 00:00:55 +0000
Manifest this update: Sat 14 Jun 2025 00:00:55 +0000
Manifest next update: Sun 15 Jun 2025 00:00:55 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: zckCOopOkrN3ALdL3+dJXw0USHzMg52zMtLkbXnChoY=)
2: c9o5omZ6L0iy-4hOihQzK8OPns4.roa (hash: 1kJZAp6d0yNMzeCujPn+gVtlVbLTFpBiKQFw2wsKEIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:47:03:4a:f4:62:e6:cb:33:a1:fa:e4:bf:41:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Jun 14 00:00:55 2025 GMT
Not After : Jun 15 00:00:55 2025 GMT
Subject: CN=c59e4a4ed3654be1bb699d5872a260c9818d8732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:02:3c:9b:75:41:2a:aa:34:d2:89:4f:c0:
e0:ad:f6:c4:b5:80:1f:82:55:c4:2e:fc:d3:4f:e7:
38:02:26:2b:00:da:1f:2a:7c:63:8e:4e:77:dc:37:
d5:de:45:76:34:1d:43:b2:b4:d1:16:cc:f4:d3:2c:
bb:bb:50:d1:f2:df:6a:6f:e1:0e:cc:a6:68:63:ab:
54:ce:a2:d2:00:9c:65:15:9a:ba:41:6f:af:34:a1:
f5:f6:3f:ec:14:66:39:65:2c:40:95:8a:85:cb:75:
af:8d:45:20:b9:05:34:d9:f1:4e:57:f2:36:77:69:
f3:dd:25:a5:2b:dd:f6:82:25:03:d3:9b:60:e4:f4:
d1:aa:79:20:e6:0f:34:6b:23:b2:0d:ab:21:b1:52:
b2:30:1e:ee:ad:ec:dc:60:27:d0:13:6d:8e:39:70:
b6:0c:fe:c9:c7:a2:8b:0b:b4:8c:3d:ac:98:e9:e8:
4d:b1:d6:95:35:f0:a7:32:80:0f:df:69:32:2b:af:
5a:52:da:73:3e:ab:0b:83:b1:27:41:f5:e5:4e:4b:
20:ea:dc:13:4c:e3:a0:ae:7c:aa:58:14:e0:87:12:
29:c5:03:79:e8:e4:dc:e7:4d:bd:c7:90:43:6f:00:
74:1e:86:a7:d3:ec:15:29:12:53:67:c1:95:fe:cb:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9E:4A:4E:D3:65:4B:E1:BB:69:9D:58:72:A2:60:C9:81:8D:87:32
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b9:22:d3:96:68:97:48:2a:8f:bb:6b:68:8e:a7:b5:fb:05:
a2:e0:4a:0b:12:b6:2b:33:55:2d:41:c4:2d:39:c5:23:84:86:
7b:a7:b1:b2:3a:e5:f5:c6:26:68:b2:e3:be:d0:60:38:30:7d:
6d:fc:70:01:b2:24:09:3b:83:2b:c6:04:8a:3a:43:e7:e0:85:
ce:ab:e3:d0:2f:67:c8:99:cc:a0:7d:f8:a7:4f:1e:e4:33:3d:
40:b5:f0:36:e3:f5:af:18:7b:70:01:e3:96:ad:c5:79:e3:bf:
2b:b7:c1:6d:b4:9b:91:81:1f:8a:5e:78:ad:8e:51:c8:04:3c:
f8:04:8c:ab:3b:bf:e4:8a:fc:fc:5d:c2:d0:94:35:83:64:6b:
e7:f9:d3:11:b1:e9:19:1f:73:c7:92:14:a7:08:36:70:f9:6a:
31:3d:ad:10:23:8c:e4:40:78:27:96:20:45:2d:60:45:73:cf:
bb:e2:18:64:b0:e8:b6:45:f9:bd:55:00:ca:e1:7c:f8:c3:64:
45:ea:a2:e8:8c:63:91:e0:99:9f:b0:35:f1:dd:5d:f5:5b:ff:
af:cd:a9:ad:da:a0:a7:2b:12:d5:cc:e5:2a:15:53:f0:c1:7c:
84:11:1d:c0:36:14:47:2f:9d:8d:ca:51:f9:96:59:62:1e:fd:
3d:91:df:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:12:41 2025 by rpki-client