Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: Jmhshkpn5J4UujGKgp2cBDKCORGOiZzIw4tu0SJWQYU=
Subject key identifier: 62:13:E4:65:ED:1D:4A:4E:0E:08:C9:8D:D3:86:BA:ED:D3:33:B7:C0
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 0197786639A593752AC09304A64316A987C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 13A2
Signing time: Mon 16 Jun 2025 11:00:54 +0000
Manifest this update: Mon 16 Jun 2025 11:00:54 +0000
Manifest next update: Tue 17 Jun 2025 11:00:54 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: 1kGJtoZHWNFZHA4Rqun/jWnhpXf7XRGXW9si5GQ4us4=)
2: UXWSLhVlTXSrRh4vQjiJGZfTc28.roa (hash: GwWbj030dqXFgPoZUUmrOygMcwYdz6TWzzcKF95NLWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:39:a5:93:75:2a:c0:93:04:a6:43:16:a9:87:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Jun 16 11:00:54 2025 GMT
Not After : Jun 17 11:00:54 2025 GMT
Subject: CN=6213e465ed1d4a4e0e08c98dd386baedd333b7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:76:99:73:23:ef:a3:f0:60:77:b9:a0:56:21:
64:00:7a:88:3d:35:7b:bb:5c:30:e0:84:4c:fb:05:
42:a1:b7:91:cf:a8:7b:e6:d3:61:2b:cd:ce:0c:3a:
ad:44:d0:fb:73:41:af:4b:17:ce:d8:65:b0:c9:b8:
7e:55:5f:10:2b:2f:22:12:ef:58:31:ae:2a:c9:85:
25:d4:67:99:df:f1:17:88:77:d0:d7:40:d1:7f:c3:
5d:4e:f1:9a:32:d3:79:d7:fc:7d:ac:34:66:4d:26:
d1:fa:80:c4:6c:77:16:54:1f:2a:25:1f:96:9c:f4:
9f:6e:84:3e:5a:5e:b7:32:01:c4:9e:f1:77:b4:a5:
77:53:8d:e2:ed:10:ce:30:8a:df:67:8a:b1:b1:2b:
2b:9b:d1:e6:86:3f:65:9f:a0:b3:cc:80:0a:fd:bb:
44:a0:72:79:ea:6a:b9:33:23:2f:72:4f:9d:2b:1a:
a0:db:9b:1b:24:b3:f7:4f:c8:20:62:9d:51:f4:c4:
35:f7:ed:30:ee:ed:09:85:a8:93:61:05:e1:f1:aa:
50:39:76:72:80:fb:5b:0f:11:bf:2a:e2:ac:0f:07:
23:cc:a1:0b:43:95:ef:5c:f7:20:a2:14:a0:92:48:
1b:03:08:23:34:87:ca:f8:cf:09:37:92:7b:c7:fb:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:13:E4:65:ED:1D:4A:4E:0E:08:C9:8D:D3:86:BA:ED:D3:33:B7:C0
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6f:9e:bd:25:1b:c3:1e:b7:48:4f:3b:98:2f:6f:5f:7a:9a:
c6:e4:bb:67:78:e5:17:27:ff:e9:e3:f8:ac:1f:af:bd:01:e6:
84:51:4e:5c:38:cb:54:ca:f4:34:e9:d0:0f:1b:25:dc:1d:34:
c8:e7:ad:1c:cf:91:c9:12:d6:2d:54:30:32:ba:9c:ae:df:d1:
ff:ad:d7:93:8f:2b:d4:4d:e3:1f:d4:4c:98:83:65:82:88:59:
63:b4:38:26:98:fb:dc:26:cb:a4:da:b6:ad:6d:9b:bf:e6:0b:
b1:17:1e:a5:09:c7:f9:bd:29:af:d2:15:7a:26:54:10:d4:80:
90:bd:94:66:09:a8:49:87:f2:f7:0b:ae:07:f6:99:f4:79:f6:
de:30:62:39:14:ef:b3:fa:9f:c2:c5:c6:7e:b7:b0:be:32:59:
b2:00:12:64:f9:74:f0:7d:8b:8b:fc:aa:9f:8c:44:92:4b:2f:
fb:f6:1f:5e:f5:b4:09:f1:3d:75:97:18:a9:e1:51:3c:a1:2d:
20:c6:77:70:5f:ad:7d:da:26:ed:42:4e:96:59:8d:17:3f:d6:
fb:b2:a0:69:ca:57:fe:4a:9e:65:68:53:6d:cd:64:2b:c5:f7:
05:a6:3a:3f:c4:b2:b1:c7:24:b3:eb:32:51:0c:b0:cc:a4:93:
67:7e:fb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:19:24 2025 by rpki-client