Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: mOEMSXwkHPY41Rz/Cn4IiK7jyCfvse1HNQ0DlVp67mA=
Subject key identifier: AD:60:D3:83:35:20:0E:9B:F5:9A:54:BD:B1:07:C1:B3:83:78:0E:43
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 019748FA8B1F669BC293698541C25BD7F27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 1586
Signing time: Sat 07 Jun 2025 06:01:08 +0000
Manifest this update: Sat 07 Jun 2025 06:01:08 +0000
Manifest next update: Sun 08 Jun 2025 06:01:08 +0000
Files and hashes: 1: Nt8U8Z3kL0IxgChONZlb9wxsuew.roa (hash: q3bR4XOi7x1iBnBhyEpixBllLru5p/ZAb3mokEcvE1o=)
2: Zzn898alwJ-ZQ7BYnOoh1f9BcU0.roa (hash: ZfOULEhZA5KSiQObf0XfCp/rLlK21I+b+ae43OnFfqk=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: jcntzZn4eGLK+kkzJZnOyEyFg3G/tqkjmRPdSyZOqG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:8b:1f:66:9b:c2:93:69:85:41:c2:5b:d7:f2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Jun 7 06:01:08 2025 GMT
Not After : Jun 8 06:01:08 2025 GMT
Subject: CN=ad60d38335200e9bf59a54bdb107c1b383780e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:d8:6b:e3:0c:c6:af:03:0a:8d:64:29:fe:
b9:41:71:a8:ca:30:32:c8:63:69:3a:b0:c3:ec:4f:
0f:19:ef:1c:ae:e6:8e:87:bf:0f:13:f2:73:d1:14:
24:36:ed:cf:15:a7:85:02:50:f9:0d:4e:1a:ce:c2:
18:04:90:78:23:9c:da:e6:d1:c8:dd:8c:8f:d6:d7:
32:2b:8b:90:a7:71:e2:2e:97:a2:56:04:ce:79:ba:
c0:26:98:de:5a:ba:1d:ac:81:71:e3:68:e9:23:15:
8d:1f:a0:cc:02:eb:ab:00:36:5b:0b:4f:9c:c5:18:
cd:53:f7:2d:c6:3a:70:01:50:84:c9:f3:16:f5:11:
e5:24:f9:10:2b:69:41:de:4e:a6:42:80:43:32:aa:
54:27:85:52:19:79:bd:e8:d5:0e:ea:71:21:82:8f:
32:88:fd:b7:0c:f8:02:9f:eb:d3:e5:dc:d2:fd:09:
81:c7:b2:db:0a:67:af:18:45:85:8a:c2:42:fc:e9:
06:1a:21:53:45:d7:2f:4b:b6:fe:03:a4:16:e6:aa:
4d:7e:d2:11:da:1c:f0:56:f8:84:39:e8:95:83:7b:
b9:c1:94:ed:71:ab:1c:43:75:fa:d2:fe:00:ea:b7:
85:79:cc:40:ed:1c:1c:d6:8e:8e:22:b0:bc:84:c6:
33:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:60:D3:83:35:20:0E:9B:F5:9A:54:BD:B1:07:C1:B3:83:78:0E:43
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:bf:9a:b3:c8:c5:e6:19:79:a7:df:a3:f0:67:6e:ff:1e:c2:
62:51:fe:05:35:44:8d:f8:f8:c1:00:ea:ff:68:1e:aa:e5:ec:
30:23:ed:75:04:22:c5:2f:ba:ad:cc:07:73:da:68:25:bc:45:
c9:f0:a2:3d:c8:e8:a8:4a:d6:19:c7:fb:99:91:42:a1:4a:ab:
74:1a:c6:13:8d:d7:be:f8:39:4a:34:b8:c8:01:20:3e:ca:74:
1e:8d:f4:a3:95:b5:a6:17:b8:4a:a8:3b:da:ab:cf:7b:f7:f7:
94:95:94:9c:e2:92:ab:02:f6:d8:c6:4d:f8:26:af:82:fe:c7:
0e:90:f3:d9:53:f9:c2:4e:c9:08:ae:fb:22:ed:a6:51:04:ae:
20:f9:2c:80:24:79:37:65:59:de:9e:83:d0:94:bc:e1:76:00:
30:b8:9c:79:16:96:5b:27:05:0b:29:cb:ea:43:c7:42:ab:bd:
eb:b8:e4:95:b0:03:67:92:18:4f:7a:2c:17:78:5e:3a:66:8e:
04:9b:88:d4:73:13:d0:61:41:11:a5:42:11:08:9d:a5:25:11:
38:c2:06:b3:ed:79:47:71:4d:3d:49:86:37:11:55:b3:14:eb:
b4:65:21:ce:7f:15:4d:6e:6b:54:ce:9d:c9:73:22:3a:4d:c9:
c7:5e:5e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:45:05 2025 by rpki-client