Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier: rwb42gsRT4YvjVm+oSH48XUHOS98xjgLZMt8g002DpY=
Subject key identifier: A0:1B:68:D4:A4:9E:6B:43:EC:6A:63:4B:11:57:8A:A7:C1:8A:38:48
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 01974A0CD1E1B10EDFD2DE3038AE3E98A82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number: 0E7E
Signing time: Sat 07 Jun 2025 11:00:43 +0000
Manifest this update: Sat 07 Jun 2025 11:00:43 +0000
Manifest next update: Sun 08 Jun 2025 11:00:43 +0000
Files and hashes: 1: ZfJgayjX3ZyY4keMrrK5ie3SiNQ.roa (hash: I356ijiy3DFzBI7A3YL8pZIG42TC++pOhoxAzv45n5Q=)
2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: mXTDKOTlfpEs/ScdMZWyHzhco3bcda+y+exTcr4+lMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:d1:e1:b1:0e:df:d2:de:30:38:ae:3e:98:a8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: Jun 7 11:00:43 2025 GMT
Not After : Jun 8 11:00:43 2025 GMT
Subject: CN=a01b68d4a49e6b43ec6a634b11578aa7c18a3848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:a6:70:09:82:8a:d7:eb:a3:aa:1e:4b:51:
70:4a:a9:3b:7f:43:2f:cc:4a:da:fb:07:1f:20:7d:
16:0f:4d:75:e8:f8:45:0e:8f:ca:eb:80:4c:e5:03:
c8:54:64:8c:63:53:49:8d:53:07:6c:14:8b:e0:1b:
34:4c:ec:fb:9b:e6:a9:4c:03:8c:73:8b:c7:a1:20:
c5:d5:56:82:f1:5e:42:5d:48:85:f4:22:4d:ca:1b:
01:14:37:08:69:2d:13:8d:6f:b2:71:5b:7b:43:34:
72:df:ef:21:90:db:4e:63:18:ec:13:ca:9f:71:51:
85:30:19:96:2c:49:e5:0e:b0:35:89:f6:ef:88:27:
d6:f8:64:70:5a:bc:e2:3d:8a:6f:2d:04:9f:a2:71:
df:46:8a:6e:b8:53:42:9c:f7:57:d7:46:62:c4:0a:
69:51:b8:9e:f5:69:46:38:0c:f1:af:e9:de:95:d6:
95:00:76:0e:10:22:46:0a:31:65:95:29:f6:34:76:
69:87:25:b5:1e:01:99:8b:76:74:ca:f9:e8:e2:76:
59:f4:c7:17:95:4e:a7:8b:c8:cf:62:33:58:ab:a1:
a0:ea:1e:0c:ef:7b:df:6d:6c:f0:bc:0f:fa:9f:dd:
5c:cd:c4:24:8e:a0:92:19:37:e5:43:82:cd:f8:ba:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1B:68:D4:A4:9E:6B:43:EC:6A:63:4B:11:57:8A:A7:C1:8A:38:48
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0c:60:0f:3e:bb:f8:ea:ea:cf:99:fc:43:91:b5:c9:b0:02:
49:bf:ce:a9:62:9e:26:62:fd:5e:36:e6:20:b8:bf:c6:7d:63:
40:02:09:e8:8a:6a:96:eb:53:9b:56:f1:d5:6d:58:97:f6:b2:
48:45:47:cc:a7:b9:4b:04:25:ba:44:1d:8a:0b:ee:8e:7e:1e:
16:d5:81:3f:88:d8:40:f9:95:9d:25:0a:e2:c5:ca:82:78:f2:
54:f9:8e:35:99:af:b9:b4:15:fc:79:12:68:d3:3c:48:5c:63:
58:41:80:19:a1:f5:f2:e1:d8:cb:a3:7e:3b:68:64:d1:5d:e4:
75:9b:15:3c:53:63:3d:01:8a:30:e7:d0:53:cc:30:9d:58:09:
27:f2:fd:a6:00:03:c5:e4:ab:95:81:ff:34:95:cf:19:e6:01:
ef:4e:4a:a3:b0:32:e0:e5:e1:ba:4b:09:17:c7:6c:23:5a:99:
c1:b8:48:e8:f2:3e:63:c0:3e:2c:e9:00:f3:7e:1c:31:9a:de:
bd:3b:c0:da:4f:38:bb:d1:11:4d:a1:58:ca:5d:15:6b:0b:49:
c2:ac:d2:de:9e:11:29:12:75:69:12:e1:ab:7e:f3:43:43:84:
30:a1:cd:56:16:0e:3b:98:3c:7b:f4:a5:28:60:e3:46:ba:98:
2d:bc:67:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:19:16 2025 by rpki-client