Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json)
Hash identifier: GvBpucXymXJhsuaed96NaOREe28oyagvYkME4CnZhE0=
Subject key identifier: A7:A6:FB:E2:A0:37:57:E6:82:EE:DF:9A:FB:52:43:D3:0F:58:E0:88
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 01983570C0234E91FFD2ACF72D53648C324A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
Manifest number: 11F0
Signing time: Wed 23 Jul 2025 04:00:38 +0000
Manifest this update: Wed 23 Jul 2025 04:00:38 +0000
Manifest next update: Thu 24 Jul 2025 04:00:38 +0000
Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: bQkj21G+Sbwnh+uwDvoHpBc6QS/zFcPPp4zApQF/J7w=)
2: Swt5oFMQEQM3RtDOFxZCp2VObOM.roa (hash: d7VQjqZCXdGvodDw1gYlaDWjc+rRxAbFcC4KKSSYHOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:70:c0:23:4e:91:ff:d2:ac:f7:2d:53:64:8c:32:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: Jul 23 04:00:38 2025 GMT
Not After : Jul 24 04:00:38 2025 GMT
Subject: CN=a7a6fbe2a03757e682eedf9afb5243d30f58e088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:b9:15:0b:72:ba:4c:56:49:56:ce:23:03:
37:a4:0e:91:8b:c1:1f:f4:26:80:e8:64:16:7a:8f:
ba:3e:c2:75:9f:93:07:f0:22:0b:18:a4:0c:98:d9:
dd:cc:67:d2:ee:39:9e:ad:2e:09:2f:08:81:3c:cd:
b1:4f:c6:2f:8b:05:f8:3c:f5:27:8f:59:31:7e:81:
cb:9f:3b:ef:37:4a:95:74:f0:3d:8b:a7:3d:bf:c2:
b2:58:83:07:5a:87:c5:27:ea:9f:53:76:08:09:23:
b2:82:a3:2b:72:13:cc:c3:65:76:70:62:8b:d2:57:
ea:75:78:04:c8:e8:9b:ca:76:14:f5:75:a7:8f:15:
29:14:25:4b:da:e0:a4:d7:2b:5f:cb:51:7b:06:f8:
26:f7:a1:a7:ec:cd:87:b5:6f:c8:7d:c9:62:7a:66:
f9:9a:99:5c:eb:8d:c0:4f:81:70:85:cc:ea:7d:b7:
a4:e9:06:d7:27:1a:d5:24:1b:0a:c5:b7:5a:76:d3:
a3:6b:5d:d1:84:1f:06:8f:0f:69:37:e3:50:e9:46:
6e:37:26:53:4c:72:f3:47:a0:19:fe:68:c1:9c:3c:
ca:93:8b:0c:36:5c:03:70:7b:bc:fe:41:ee:48:f6:
c5:6e:e2:21:54:5e:c2:18:23:84:36:a7:de:bb:90:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A6:FB:E2:A0:37:57:E6:82:EE:DF:9A:FB:52:43:D3:0F:58:E0:88
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:45:d0:3f:59:3f:df:02:34:c0:c0:0b:e7:e8:dc:fd:92:ac:
06:ac:71:bd:48:5d:21:7a:f1:1a:c5:d9:11:5f:fe:5b:cd:b8:
00:a6:7b:de:37:3b:d0:1d:b2:85:0f:f3:08:20:dc:11:d1:a3:
c6:4c:ad:68:33:60:79:ea:8b:81:9c:79:58:cf:44:96:90:49:
bc:6b:57:0e:40:6d:29:99:77:01:3b:ff:e4:1f:5b:3b:bf:b6:
af:cd:a8:01:c6:e9:ff:f0:cf:3b:03:c6:f3:15:a9:40:79:9f:
74:a5:57:e3:e4:ea:d9:2e:e3:21:21:99:52:6a:d1:c8:70:13:
3c:f0:ac:e5:f0:27:e2:e4:ce:c7:e6:dc:1f:ae:b7:e1:85:50:
6b:54:32:93:1d:98:8a:b8:9f:1a:89:dc:03:a6:7f:a2:7e:74:
32:4b:be:f2:41:2b:b7:18:ce:a8:50:13:2d:02:37:5e:fa:09:
e0:8d:a1:ec:ab:e4:ea:d7:a5:29:9f:3a:bc:36:08:9f:5c:0d:
69:57:b2:f0:27:59:14:12:a4:28:03:50:3a:24:71:8c:9f:c6:
e9:df:68:57:2c:5c:45:8f:06:39:91:7f:84:50:fc:e2:b2:55:
9b:e2:0a:57:9d:99:0c:3f:11:2e:97:0f:65:c3:c1:6e:fc:33:
4d:85:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:16:57 2025 by rpki-client