Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: t/LWeCTcWbVg94AxNQTFxcU+jG2j8j5RBZUVuZ6PQxw=
Subject key identifier: 02:18:84:BE:66:5B:F4:B0:FC:B7:D7:20:E9:E6:8D:11:64:8B:44:6D
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 0197C9F11C7F996EF2D68D1BD1F620B96DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 11A2
Signing time: Wed 02 Jul 2025 07:01:51 +0000
Manifest this update: Wed 02 Jul 2025 07:01:51 +0000
Manifest next update: Thu 03 Jul 2025 07:01:51 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: 1NIrdOnI0FiyPdh5qtO0vf4gjTSHQ+BLOhYkJK1y/Po=)
2: q36KB3psJEdwM9htMyeD7v_JoOg.roa (hash: TalVhq3AmB2TIBAEtWkTlS4vjvUd3V9bg1ZpQQHry4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:1c:7f:99:6e:f2:d6:8d:1b:d1:f6:20:b9:6d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Jul 2 07:01:51 2025 GMT
Not After : Jul 3 07:01:51 2025 GMT
Subject: CN=021884be665bf4b0fcb7d720e9e68d11648b446d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:df:43:01:81:8b:24:a7:0e:d9:6d:7d:5b:
1c:e1:5a:6b:08:3f:7c:ec:7e:cd:a7:2b:8a:89:c1:
b5:65:9e:ff:35:3e:70:e1:cf:7d:0f:c9:13:50:43:
6f:9b:8c:09:4a:a5:29:99:43:41:25:37:64:b2:c4:
7b:f2:3e:fd:a2:b9:af:be:73:b8:40:07:a1:0c:f3:
0a:73:33:e2:c8:48:b7:df:c8:ad:69:a7:ea:7b:8d:
45:3f:b3:ef:75:f1:e6:fa:a1:a5:ff:08:5e:7a:e9:
ae:7d:fd:7f:e0:03:8b:be:af:92:ce:ea:98:62:9d:
ec:01:5a:b8:ab:cb:a1:4b:b3:e1:8d:85:a8:a6:fc:
a7:89:ae:19:6e:3a:21:20:27:e7:e7:f8:fc:5a:12:
f2:86:2d:94:ff:f3:4a:41:e1:ff:d4:89:ab:16:30:
a7:be:fb:57:5b:40:d9:ba:53:a6:82:0f:03:2f:da:
a2:dd:e2:1e:97:da:cf:cc:ad:10:a7:6a:60:03:10:
a4:b2:f1:79:6f:1a:27:67:3e:22:32:2c:c6:83:cf:
e9:80:2a:88:9d:b8:bf:e4:32:d6:8f:b9:ff:71:43:
4a:c0:ab:31:c3:fa:b0:24:68:78:90:c6:be:ee:93:
3f:6f:84:1e:91:7a:05:9f:2e:c3:66:43:1a:c5:c2:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:18:84:BE:66:5B:F4:B0:FC:B7:D7:20:E9:E6:8D:11:64:8B:44:6D
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4b:d9:d3:52:4e:62:41:ff:11:17:e5:a2:af:6e:90:ef:84:
bc:a3:33:7c:7d:4f:91:a4:2c:44:90:16:c4:bd:fe:1c:39:71:
72:29:07:41:0b:cd:d3:ff:39:7c:84:dc:bc:90:2e:d0:e2:e4:
f2:0f:81:86:7a:b6:da:18:a3:9e:18:dd:02:a6:72:f0:93:dd:
7c:f8:0e:e0:71:0d:25:85:dc:99:a1:46:55:59:a5:86:0b:76:
36:4a:1d:5b:1b:09:7a:ed:b8:57:88:dd:f3:3d:3f:bc:24:8c:
93:32:fb:b1:14:f6:dd:32:52:35:c0:1b:ea:a3:64:b8:5e:b7:
22:6c:9a:e2:c1:38:3b:7d:05:ed:af:67:6e:e8:80:f6:cb:de:
70:eb:0e:08:2e:9a:51:9f:f3:bf:3a:83:a2:b5:79:d3:3f:a4:
9b:07:aa:2a:ed:5e:73:23:1d:18:22:a0:7b:ea:06:cb:3b:92:
41:7a:8a:1e:f0:2e:74:1d:5c:fc:dd:4a:c1:8d:bd:a1:11:a4:
07:d6:b7:0c:7e:60:67:7f:6a:f9:b7:af:fc:eb:18:a6:e8:20:
a1:31:b0:40:1a:7b:38:82:1d:f4:9c:3a:83:39:38:d9:9a:09:
46:c3:d5:d1:db:a1:9e:e5:47:8b:2f:9b:7f:fb:d3:7f:02:7b:
74:85:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:13:53 2025 by rpki-client