Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
File: 06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json)
Hash identifier: BqSOa1qrIeN0MYkzX5ntGUCmLZahlMEer3SaUMe7Wc0=
Subject key identifier: F3:32:9B:90:08:04:35:F2:B8:DA:C9:91:A9:50:67:FB:C3:E8:F5:FB
Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
Certificate issuer: /CN=d3ac50e045822823176e47832dec8f211b74f013
Certificate serial: 0197488C5BD473CDCABAA3CDC57BB60386D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
Manifest number: 023A
Signing time: Sat 07 Jun 2025 04:00:47 +0000
Manifest this update: Sat 07 Jun 2025 04:00:47 +0000
Manifest next update: Sun 08 Jun 2025 04:00:47 +0000
Files and hashes: 1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: SWQt/dPdZcR5V/eZpX9d8qDHoxriLixeGaAi2DqeW+U=)
2: J7at31yuwr6xPDnvAJre3wzoR9o.roa (hash: RbmaLbG1z0L4l1ON8n9W5icIKF2KnmAyzavN38bNAhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:5b:d4:73:cd:ca:ba:a3:cd:c5:7b:b6:03:86:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013
Validity
Not Before: Jun 7 04:00:47 2025 GMT
Not After : Jun 8 04:00:47 2025 GMT
Subject: CN=f3329b90080435f2b8dac991a95067fbc3e8f5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:a9:20:7b:b1:3f:aa:a9:54:71:77:4d:b8:
2f:fb:e7:c1:66:e7:9e:17:10:de:84:c3:10:0e:12:
45:43:08:86:b1:74:ac:98:09:a3:d8:c4:71:b6:95:
af:59:61:70:82:5f:ee:ed:3a:64:af:82:5b:98:a1:
5a:c0:10:61:23:b8:83:8d:3d:21:b6:d0:ac:ca:1f:
ee:14:c2:c6:b8:95:da:72:a8:8d:fb:53:57:da:fb:
42:37:32:05:3c:bc:c3:04:89:d4:23:a2:61:0e:cd:
3e:98:d4:87:7e:c6:c5:57:bf:27:90:02:1d:24:e6:
43:12:23:41:56:ae:b9:a8:aa:c5:24:52:23:0d:46:
73:ef:5d:0b:cd:2d:4b:cf:86:8d:97:d1:57:76:d4:
39:96:2f:c1:05:ff:57:0a:1f:60:29:59:c9:f3:61:
5d:ff:f0:5d:a8:96:24:cf:1b:5c:36:55:a1:ac:d1:
0d:13:56:47:42:43:53:09:56:0a:f1:fd:b7:d4:ce:
1d:17:62:90:61:27:58:ab:61:4a:b2:3b:1e:43:6d:
b7:d0:92:41:5e:69:67:ec:e9:a0:54:d4:37:82:74:
ea:1a:1a:7c:96:3b:6d:46:b7:fb:d3:4b:e8:5d:10:
03:9c:92:22:14:e2:d4:d6:8a:21:a6:11:09:e7:36:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:32:9B:90:08:04:35:F2:B8:DA:C9:91:A9:50:67:FB:C3:E8:F5:FB
X509v3 Authority Key Identifier:
keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fc:14:ac:72:84:1f:44:48:54:7c:17:94:73:a8:10:9e:9a:
c3:39:45:28:b8:26:0d:37:2f:f0:54:13:5e:60:08:c8:9a:d3:
62:a3:4d:32:f3:9b:72:4c:c9:84:e9:7b:f0:2c:d4:45:ed:d1:
27:79:4c:78:3f:3e:93:d9:d8:88:a3:c1:f1:11:3a:5d:78:f4:
57:56:47:4a:65:60:00:0b:18:bf:0c:39:1b:6a:48:cc:97:db:
87:3c:0d:58:78:88:e5:00:d1:2a:46:80:a6:69:98:9e:b4:a3:
da:74:33:e5:8f:10:3a:a3:3a:17:a0:68:f6:e4:85:ad:de:93:
f6:78:95:a2:d0:90:dd:69:3b:f2:bb:ae:b5:eb:25:ce:f0:18:
30:f6:81:f9:36:bc:c7:39:6e:5d:a9:f3:a8:f4:f2:33:5a:f0:
c8:de:e8:6f:11:49:a0:e9:27:34:ff:65:6b:2d:91:1f:6a:c9:
8a:59:a7:b7:5e:3f:98:bb:64:fc:31:89:66:6f:fa:5f:43:c0:
27:44:e5:56:55:b6:07:53:21:96:a4:30:af:8e:c8:57:13:a6:
ce:84:8b:36:9f:2c:77:c2:f2:74:f1:b3:e3:2c:9b:cc:48:32:
04:ee:84:d0:89:56:83:39:d1:4f:fc:cc:b1:b8:64:6d:27:ba:
a5:ba:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:31 2025 by rpki-client