Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File: 3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier: MW67cXKbZkpg1wy2jCnS7WynAS4ulyQHWXVUvDR+WeI=
Subject key identifier: 35:9E:B2:5B:88:19:D1:F5:8B:88:CC:6C:86:0E:DD:1C:DD:A8:9A:94
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer: /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial: 01984A0A0819D3D46A2BF16487C40C17D46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number: 0B76
Signing time: Sun 27 Jul 2025 04:00:28 +0000
Manifest this update: Sun 27 Jul 2025 04:00:28 +0000
Manifest next update: Mon 28 Jul 2025 04:00:28 +0000
Files and hashes: 1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: I7FUiY+Vbix2IsDQCWNqtiyC4zTfIYG1IyLXAiJLiGA=)
2: wkcnsTzQjgo9eEySS50APSZKqWQ.roa (hash: SKv++65s2nAU0vbkJDBqrGiZUMw6xX7YKBnglQkJRuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:08:19:d3:d4:6a:2b:f1:64:87:c4:0c:17:d4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Validity
Not Before: Jul 27 04:00:28 2025 GMT
Not After : Jul 28 04:00:28 2025 GMT
Subject: CN=359eb25b8819d1f58b88cc6c860edd1cdda89a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:c2:6f:2d:68:59:33:3a:01:f1:ef:a0:50:
90:0d:5f:3c:30:b3:8e:f4:95:91:95:5f:92:d5:e7:
81:97:a0:75:d0:02:e6:d1:e8:50:8e:a1:1f:c6:79:
68:be:d7:89:f4:79:c1:d5:31:c3:30:50:90:63:73:
74:9d:44:9a:77:25:d3:2b:30:ff:35:82:7e:79:37:
9d:c9:f4:2a:1f:4c:83:b7:fa:b5:57:a7:65:af:f5:
3e:ff:fd:af:55:03:10:85:c4:c8:77:d5:de:28:e6:
b7:94:2a:24:6b:b2:ae:eb:2f:e3:c0:9c:da:d0:93:
7a:a7:42:c5:aa:59:4e:45:2b:8d:05:d6:ca:0a:f5:
18:5d:bc:25:f0:ed:fd:4c:0a:66:e8:58:5a:8f:89:
23:c1:e5:81:41:67:c3:ca:1e:04:82:46:af:e2:d0:
61:7c:c8:2b:a5:be:7d:0e:ad:77:7f:f3:f2:2c:3d:
52:59:54:5f:d6:8e:ba:d5:60:fe:db:5b:8c:e6:98:
17:3d:58:0b:c0:b0:70:18:4e:62:8e:a6:3a:a5:4b:
97:6d:9f:c4:56:c2:6c:04:0c:39:47:5c:8f:81:e3:
bd:67:24:d6:1f:47:d4:6b:ba:12:2b:5d:a3:75:99:
d0:0a:c0:bf:4e:47:51:1f:30:1a:c7:2f:00:81:1c:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9E:B2:5B:88:19:D1:F5:8B:88:CC:6C:86:0E:DD:1C:DD:A8:9A:94
X509v3 Authority Key Identifier:
keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5a:2e:51:c4:ca:2a:81:ec:99:b8:8d:b8:66:76:27:ff:6e:
5f:88:50:99:cd:dd:aa:7a:f3:eb:e8:a0:f5:6a:60:c2:c5:58:
05:84:02:d0:9d:14:64:06:55:d8:31:f5:c5:08:bf:d1:8e:6b:
b7:66:76:1b:51:f5:aa:24:1e:96:93:58:1b:a4:73:de:ec:ba:
59:1d:65:33:e7:ea:5e:e7:44:b8:84:b6:6d:f1:95:5b:b6:83:
c0:9a:08:63:82:06:c3:7c:d1:6f:22:2e:ed:22:d2:b9:e8:b5:
97:74:83:40:bc:46:08:43:7e:06:d1:09:d4:9d:6a:11:b4:d5:
b7:62:52:83:82:57:2a:d0:ca:b9:51:1c:8e:ec:38:06:1c:96:
20:76:e3:3f:44:ea:eb:ad:d8:51:83:ea:64:56:23:3f:93:f6:
5f:1b:18:b6:69:08:81:bb:65:50:40:02:bc:23:5e:50:ec:4a:
bb:9e:8c:31:0e:45:8e:6d:7f:47:48:4a:c4:5d:2a:c3:8f:3b:
a7:8e:c0:15:e4:39:9b:4f:b3:3f:ce:bb:17:c6:da:cc:96:c3:
42:95:f1:8c:52:d7:5f:3c:e5:01:0b:3e:0a:fe:ef:96:a2:5f:
e5:3e:6b:2b:66:a0:fd:b0:5b:e8:1c:ff:e6:1b:6d:1d:51:03:
cf:e3:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:28:44 2025 by rpki-client