Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: L9+LPlJd/JR6NA5Xhllbyed4UCXeVnxpIppM3n44qHc=
Subject key identifier: A8:1C:68:54:AE:6A:27:DC:4B:97:4A:C8:36:5D:C7:E9:42:FB:04:A2
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 0198466493165E5DD52E9400713CD7347B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 1592
Signing time: Sat 26 Jul 2025 11:00:53 +0000
Manifest this update: Sat 26 Jul 2025 11:00:53 +0000
Manifest next update: Sun 27 Jul 2025 11:00:53 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: yQVKM+oZzDJczY2QocOuxbl1Wvb545z/5hIxX7pJTsY=)
2: 8weSLoMuWV3usouK6kCYa4DYS08.roa (hash: 7ICkBxIDMmpq8Ld9uPPV7RzwfZWRVUlPiTj2akXnPTs=)
3: g0yMZ7il9emhd1JLy44dXjFFySY.roa (hash: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:93:16:5e:5d:d5:2e:94:00:71:3c:d7:34:7b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Jul 26 11:00:53 2025 GMT
Not After : Jul 27 11:00:53 2025 GMT
Subject: CN=a81c6854ae6a27dc4b974ac8365dc7e942fb04a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:2f:5b:29:38:22:ab:c5:91:bd:ab:5f:3f:
d8:11:45:69:63:1a:91:74:45:fe:c5:1f:d8:db:b2:
52:01:8e:37:6a:c5:33:74:c9:93:76:01:64:c6:da:
cf:39:87:ad:8c:58:ee:36:b9:d0:a9:a9:5d:ce:1b:
46:01:12:1c:9f:b2:de:0c:90:e3:69:90:52:a7:76:
35:df:82:0b:5c:41:6d:a3:de:6d:26:64:01:10:a0:
0b:d2:f2:13:6f:08:32:c9:bb:3b:26:18:ff:45:62:
7f:40:b0:94:f2:83:19:b0:68:8a:1f:21:e8:66:4d:
dd:c6:b6:e0:15:a0:99:9d:72:63:9b:3f:8a:56:63:
68:26:c6:12:36:14:c3:cc:0e:e8:89:dd:7e:6e:f4:
5e:46:5e:c3:a7:53:22:c9:f5:ab:86:4a:bc:a8:93:
69:0c:8f:d7:ef:03:38:6e:32:df:ea:de:09:fe:3e:
39:97:88:6a:f0:d9:64:61:ed:62:dd:80:6c:b3:ef:
4e:93:22:f0:2f:f8:fb:91:02:d7:01:a6:0a:fe:6c:
41:0f:ef:55:89:bb:d5:92:18:06:18:8f:1a:d8:04:
bc:48:34:8d:3c:a0:bb:9f:6e:a7:d9:e0:6b:60:b4:
9d:86:4b:99:a9:c3:50:ef:71:67:d4:02:fc:62:fd:
0b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1C:68:54:AE:6A:27:DC:4B:97:4A:C8:36:5D:C7:E9:42:FB:04:A2
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f7:65:95:73:63:96:68:b9:34:25:d2:c9:27:be:e3:c1:53:
5f:91:38:3f:f4:95:c7:c9:a9:2d:17:3b:38:0d:6f:5e:c5:a9:
a1:9a:33:a1:27:b9:ed:04:2c:30:71:1f:42:ce:9c:f8:be:ae:
fa:c7:00:24:99:49:66:c0:5a:91:e4:3f:21:45:f8:ed:1a:7c:
39:77:21:98:9f:8f:92:6a:6f:bf:ad:f2:36:69:42:a0:2c:69:
a1:27:a5:47:be:64:b3:69:73:88:86:4d:fe:45:97:f1:6f:4e:
6a:a1:cf:76:2f:d9:c5:f7:13:95:11:f8:53:88:60:d9:7a:65:
a4:6a:d6:c6:fe:8b:2e:69:e2:b9:9b:78:47:7d:e5:e0:65:06:
59:c4:5a:fb:87:9e:e2:a5:70:45:00:11:53:4d:f3:a3:8f:18:
09:10:1c:b7:37:c0:a4:b4:6a:3b:c3:81:1f:95:be:75:0c:7a:
ed:69:a0:0e:c0:ac:cb:30:9c:97:bf:89:9b:cc:43:e2:79:21:
d2:c1:7b:7d:85:35:ba:3c:0d:4e:6e:31:3b:af:7b:2e:91:85:
9f:93:5a:66:79:9b:56:78:9f:2d:17:2a:23:96:e8:38:92:fd:
16:8b:0c:c5:41:d8:cb:29:18:58:75:61:90:e2:38:b0:cf:1a:
f1:0b:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:02:52 2025 by rpki-client