Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: LGz0pvLd+L+5OsFLOVAT/leUccP3PMSt75capC3Er2c=
Subject key identifier: 89:48:13:74:61:67:08:DF:5E:0F:85:BA:A5:85:72:EE:72:4E:C5:86
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 01984589E9E90593307FD36AF1A526DCBD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 07:02:02 +0000
Manifest this update: Sat 26 Jul 2025 07:02:02 +0000
Manifest next update: Sun 27 Jul 2025 07:02:02 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: 3g8WreUVuup9LXvBbbMsYXuFLzWG5umpWeuBRI71P+w=)
2: VU0FkvZgVaRI8EGkm-qXkP1h2_c.roa (hash: FXgImtBv7FeA5blXsKdg5pD7MuiscFVJi0Lfx25h6e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:e9:e9:05:93:30:7f:d3:6a:f1:a5:26:dc:bd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Jul 26 07:02:02 2025 GMT
Not After : Jul 27 07:02:02 2025 GMT
Subject: CN=89481374616708df5e0f85baa58572ee724ec586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:31:a2:65:22:30:d2:f2:30:11:15:ea:e7:
ca:4d:bc:0f:be:3b:3b:a8:64:3b:c0:dd:b9:ff:51:
9d:c1:b6:04:aa:30:3d:9d:ac:d0:53:f9:0f:26:18:
d4:06:7d:a5:9e:da:7c:56:18:4c:83:63:fe:37:39:
1c:18:54:2f:35:e3:91:76:3e:5a:ec:50:f2:29:2b:
2b:24:0f:c2:81:28:1c:8a:91:d2:20:69:90:02:1f:
0f:dc:94:a8:be:8f:a1:ad:76:34:9a:2c:50:1e:4d:
a1:4d:71:18:c6:89:04:80:1b:8a:39:52:19:5c:e2:
1e:38:36:ad:86:f6:d0:bf:be:0b:da:e1:05:71:5d:
40:e9:82:3c:d8:92:78:a2:f7:b3:86:c3:6d:f1:a6:
c5:58:fb:e0:c4:80:87:15:61:dc:a9:e8:19:3b:7b:
89:cd:6c:c1:95:79:22:93:db:f8:eb:1a:ca:ce:8b:
02:38:55:fc:b2:b6:7b:35:dc:72:4e:ef:7e:f5:c4:
f3:36:4b:5d:ac:89:fe:72:36:85:76:50:93:c0:ca:
9c:5b:41:4a:61:55:23:f4:d3:63:8c:e2:9d:0a:50:
0e:ec:21:8b:8d:f9:c4:95:b3:83:33:b5:8c:21:07:
0a:e6:63:e5:d8:5e:99:f8:f8:2a:ab:17:eb:f0:04:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:48:13:74:61:67:08:DF:5E:0F:85:BA:A5:85:72:EE:72:4E:C5:86
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c4:36:53:4f:e5:71:7a:a4:c4:f2:91:ff:f4:78:23:8c:fc:
d8:e0:db:87:d5:40:6e:26:4c:7d:bb:d9:95:bb:39:a4:8a:7a:
e0:12:16:61:f8:ab:03:be:56:4e:c0:de:d9:13:e8:1a:6b:29:
e4:33:4c:07:7a:86:b4:51:fc:43:08:1d:f5:a1:7d:e7:98:49:
13:6b:87:b5:31:bd:e7:d9:f3:0f:ad:39:d5:29:27:7b:ed:05:
73:bd:2b:78:e9:70:c2:6c:92:b5:7d:4b:e7:ee:71:3c:31:3b:
cc:16:93:29:f4:a5:70:30:ad:d6:30:5a:1b:39:13:83:10:5f:
8d:5d:ee:f0:cf:80:d0:d4:3c:6c:67:70:db:6b:3b:7a:84:ea:
59:b1:69:28:a1:6c:51:46:ea:c2:49:2b:51:dc:4f:fc:8e:a9:
98:9c:92:57:8a:3d:c6:41:eb:35:be:e0:ef:10:28:cb:8c:f6:
97:39:0d:11:2b:2f:6e:f7:33:1c:71:c9:2e:64:8b:d1:5a:ec:
c8:cf:1d:ec:8f:c8:a8:38:a9:87:6a:36:34:cd:cc:4a:f1:d5:
e1:39:14:4f:41:6c:b4:43:63:cf:47:b7:ea:01:93:6f:8c:61:
8e:20:a9:9c:01:91:72:bb:21:62:3a:05:58:98:88:a9:d5:de:
10:e6:25:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:31:37 2025 by rpki-client