Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json)
Hash identifier: sQn0kM+Nwpr9ZNo2uY2JVaVzAD/fMk4xBrX23hZm4UE=
Subject key identifier: 37:BC:45:D1:8B:7B:08:52:92:6C:AA:7B:5D:3E:84:0D:6B:43:7C:CB
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial: 0198541FDD8C4B8C974EDC9CD7FA191077AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
Manifest number: 1604
Signing time: Tue 29 Jul 2025 03:00:31 +0000
Manifest this update: Tue 29 Jul 2025 03:00:31 +0000
Manifest next update: Wed 30 Jul 2025 03:00:31 +0000
Files and hashes: 1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: vx5bBNhxoPLzxXVhsNhf8U7piWN9n4tU3L7wdN1bmQg=)
2: SlznhF9EiZYGKKClhlcBqpQpcMg.roa (hash: Jy5c7P7JMODRFjsTTWh43LUlPZcqwSCq10CJL1zOqOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:dd:8c:4b:8c:97:4e:dc:9c:d7:fa:19:10:77:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Validity
Not Before: Jul 29 03:00:31 2025 GMT
Not After : Jul 30 03:00:31 2025 GMT
Subject: CN=37bc45d18b7b0852926caa7b5d3e840d6b437ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:82:b7:f6:58:48:3d:b0:e0:fb:ed:00:30:
cb:23:0b:25:a4:a7:72:c8:59:2d:72:fb:b5:4c:e6:
42:a0:ab:67:e0:0b:bc:18:aa:91:9b:3d:d5:b0:72:
4d:d8:bb:87:54:91:42:16:92:e9:fc:f3:6c:55:23:
95:ed:44:56:84:ff:24:51:68:f2:a2:9a:c6:81:78:
0d:02:03:c1:af:4d:33:59:3a:5a:66:6c:00:3b:8c:
35:e1:ce:60:3d:d9:cf:14:10:80:4e:0c:dd:cd:24:
d2:92:fb:4d:0f:71:5c:b1:a6:4f:48:a2:ab:1c:0f:
95:77:c2:18:2f:c2:61:b7:85:10:6f:9d:c2:be:78:
fa:5d:6c:37:28:e4:1a:43:17:74:d9:2c:80:1c:10:
26:c5:71:4f:f7:d8:28:5b:d4:30:66:01:17:4d:1a:
0e:a6:ea:43:b0:d6:a7:9a:e3:06:de:e1:da:da:6e:
2f:1c:3a:ee:8d:44:ec:9d:f2:25:21:03:59:dc:47:
e0:82:c1:eb:8e:1f:90:1a:2f:42:2b:e6:90:39:da:
9f:8c:f5:d3:71:03:9a:95:36:36:c7:74:5e:97:b1:
84:ef:03:3e:53:68:57:b2:88:c4:93:75:9b:76:88:
f9:56:6d:55:71:9f:ac:08:64:40:8d:48:24:94:6b:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BC:45:D1:8B:7B:08:52:92:6C:AA:7B:5D:3E:84:0D:6B:43:7C:CB
X509v3 Authority Key Identifier:
keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c6:b5:07:81:78:95:df:c6:cc:e9:3b:aa:78:62:92:57:ac:
9b:b9:a3:72:0c:ae:d8:43:db:14:d9:4f:ec:d4:f0:2e:cc:0a:
5d:c5:7a:7f:77:4e:8f:6e:00:47:d2:86:d2:de:7b:3d:fa:a0:
1c:bf:2c:93:d7:6f:06:70:62:35:06:10:9c:3f:5d:44:95:0d:
f1:2b:be:ed:0b:8a:a8:5f:fc:5c:7c:ff:5c:c2:27:81:51:44:
ef:06:cc:3c:1d:2a:ad:d1:4b:4b:d7:39:a8:a9:4b:8e:fc:df:
d3:3b:f2:9b:6f:9e:75:88:3c:ad:30:d2:b2:91:61:a2:3e:99:
bd:e6:ec:f8:5f:b5:f0:11:c8:0b:09:55:f9:cb:47:89:f7:3c:
cb:54:60:be:29:4d:bb:bc:d5:7e:57:80:f1:f4:90:9c:f1:08:
97:8b:25:ee:ce:6b:ff:17:2c:84:1c:5b:55:4e:fc:23:21:ce:
4e:4b:fb:dc:68:e4:c9:33:1c:44:eb:0d:be:db:99:64:7e:57:
3d:71:e2:a1:61:56:9f:bf:b1:03:53:75:36:d5:61:ab:2f:4c:
d3:df:6c:76:64:84:96:87:da:4b:ee:52:be:fd:a4:22:aa:a4:
a9:e7:ec:c1:b0:ac:47:f5:68:18:78:62:8c:9c:2b:46:06:fc:
32:ba:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 10:48:50 2025 by rpki-client