Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
File: x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json)
Hash identifier: 3yyYd/xp+Lg2o+VhT0YoAlQYxTUTH9briCA2/up3EGA=
Subject key identifier: 8C:76:10:4D:AF:AC:A0:40:26:5B:70:21:CE:A2:FA:86:09:9D:A0:F2
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 019858D9AAD228951A77DBCB2C7540E10506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
Manifest number: 0AAF
Signing time: Wed 30 Jul 2025 01:01:56 +0000
Manifest this update: Wed 30 Jul 2025 01:01:56 +0000
Manifest next update: Thu 31 Jul 2025 01:01:56 +0000
Files and hashes: 1: 2HWaYe8To0qjjtVdcy7I7ttFbbg.roa (hash: va5+QSQ1VvFYIrECNgHjVJbI88Ftr5DD+GPYmuN05H8=)
2: 8RHKnf43EnDTyj22kIIfanQSEQc.roa (hash: HbgpO2hUs5v1oFq30hojEK1YQFHOK9Zr5sDwHkBpSCg=)
3: OHUMAhwuz8j9ycFP0uC93_9dMsI.roa (hash: K0wUqFGby+8hOwpjxyeCuygnkldFbJEc1krNUlngfaA=)
4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: OAG8+KwgQ2NJ4yNes4M2F6X4e2qNjzUrrJSYaHYCF1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:d9:aa:d2:28:95:1a:77:db:cb:2c:75:40:e1:05:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Jul 30 01:01:56 2025 GMT
Not After : Jul 31 01:01:56 2025 GMT
Subject: CN=8c76104dafaca040265b7021cea2fa86099da0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:43:e5:e4:d8:2f:b3:8b:26:cb:72:e5:fe:
2f:c9:dc:9e:fb:15:dd:34:b9:66:4a:c7:46:73:52:
18:53:78:d8:2b:86:90:93:eb:60:88:2a:b7:83:ec:
fa:ec:0c:8c:63:ee:bd:79:4d:34:5b:ed:3f:39:7b:
ee:d2:a1:7b:ce:0f:e3:94:de:06:ef:e6:c9:11:3a:
28:65:37:8e:60:53:28:94:c9:be:ff:f4:4b:fc:31:
9c:0d:ff:ed:ba:fe:37:5c:dc:70:7d:c0:fd:2f:b9:
4f:0a:77:81:07:fd:85:d9:03:37:53:26:28:e3:6c:
63:a8:ec:2f:c5:61:9a:15:ad:bb:db:0b:c8:14:35:
28:a1:1f:19:df:fe:9f:61:ae:ed:8d:3b:51:f0:b3:
9b:b7:f9:5a:e8:c4:80:a8:4c:8c:f7:a0:1c:aa:a1:
35:8a:de:cd:7e:fd:c1:63:0c:65:63:f6:a2:f1:11:
14:47:80:b5:66:55:ce:af:fd:72:8f:79:f2:0e:58:
32:2d:ed:95:2c:59:6c:d1:76:b3:40:2e:bb:cf:e6:
bd:ca:dd:ee:e7:0d:65:3d:a7:f5:35:a7:6b:8e:32:
6b:59:45:52:d0:c7:d3:5f:5b:9d:56:26:ca:9a:7a:
34:88:49:85:13:1b:ab:d9:23:12:21:b5:c8:cc:b1:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:76:10:4D:AF:AC:A0:40:26:5B:70:21:CE:A2:FA:86:09:9D:A0:F2
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:45:53:d7:f3:17:d6:fd:7a:29:1c:28:50:77:d5:06:9d:73:
f0:22:0a:88:c7:94:b3:1e:75:04:72:41:f6:0c:dc:94:15:9f:
f4:65:68:26:0e:6c:e4:63:d8:fa:24:74:2d:f4:8b:fc:64:05:
5d:cc:2a:07:39:0b:d9:02:a0:c4:53:68:f1:cb:3a:cb:10:c8:
fa:08:b9:3e:e5:93:73:c8:06:c2:a7:88:96:61:a2:88:76:10:
fc:19:3b:61:c1:5f:5c:0f:0b:a8:60:86:61:e7:3d:30:9d:d0:
c5:be:b9:df:f1:e0:0b:33:92:51:62:65:50:03:48:91:1a:cc:
9f:d5:4b:08:f0:ab:0b:fe:22:8f:a4:3b:62:d8:f6:ac:f9:16:
55:fa:53:74:38:cd:56:30:02:03:eb:90:cd:4b:b1:6b:6a:51:
16:31:b7:0e:f1:81:d2:a3:6d:a2:6b:42:40:c1:56:41:9b:7f:
ec:1f:3b:07:7e:5c:7c:56:e7:23:4e:dd:e8:bf:f8:6e:3c:07:
b2:e3:af:44:f2:be:b0:95:4c:ba:1e:0e:8d:40:61:31:e7:21:
c1:29:aa:10:50:24:96:bc:a9:0a:ca:9c:3a:62:8a:b2:e6:00:
10:13:fd:dc:1a:09:5b:8d:a7:ac:a5:14:3b:0d:38:dc:2d:2c:
58:7f:03:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:15:51 2025 by rpki-client