Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: /Q9DSUr0psNl7jC/Lh3WtUF1RFXR4GiGt04X1FnqZIU=
Subject key identifier: 0B:F6:79:F1:5F:A0:12:3F:91:B1:A4:34:81:E2:79:AD:6B:93:BA:1A
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 0197CB39DB73F082D34C27487B49A3ED3768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 0C57
Signing time: Wed 02 Jul 2025 13:00:55 +0000
Manifest this update: Wed 02 Jul 2025 13:00:55 +0000
Manifest next update: Thu 03 Jul 2025 13:00:55 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: mjjygMKV/mEcTIDD4A52B8sqNA1oOBoFqZEC8nUoyLo=)
2: mKsKKQCdLodyBncOeNIhWtaYAoQ.roa (hash: fizUUsz/TAb+LHuegB83yr/hnzwxKplkZhpso2ufXV4=)
3: xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa (hash: GuaLpdFfqfVEq3DS5+BP2JqM2gB3tItjQlR22xolKBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:db:73:f0:82:d3:4c:27:48:7b:49:a3:ed:37:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Jul 2 13:00:55 2025 GMT
Not After : Jul 3 13:00:55 2025 GMT
Subject: CN=0bf679f15fa0123f91b1a43481e279ad6b93ba1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:76:49:9e:51:95:20:c4:e5:0b:4a:23:75:be:
8c:e9:8f:a6:48:6d:ea:ad:d8:18:7d:8e:db:92:91:
4a:ef:d1:ad:1f:ec:cb:d0:f0:49:27:72:11:dc:b9:
f6:9c:7d:f4:98:f9:7d:60:d5:26:73:eb:68:26:87:
cb:01:b6:1d:43:24:f5:fd:c1:46:0d:d3:a9:1f:b4:
ca:59:43:cc:14:8f:b4:6b:76:54:cd:9c:93:16:b0:
24:bf:05:da:a6:9d:41:40:db:64:c3:d8:2a:f1:fe:
10:db:d7:15:24:df:f5:7c:86:31:ae:c4:e0:eb:ca:
29:7f:5c:86:70:16:25:01:91:0c:16:9d:d4:c7:a2:
de:3a:ce:72:3c:f9:31:f4:3e:77:67:49:95:9d:bc:
ad:6b:8d:77:5e:28:17:89:9f:97:37:a2:4f:82:fe:
b7:b1:7b:6a:0a:24:09:d7:0d:b1:8f:bd:12:e9:03:
71:73:96:c1:53:d9:0e:6c:a2:b3:33:a2:79:3d:28:
54:19:76:63:a8:82:32:f0:d6:ec:b5:38:bf:92:2f:
96:c9:cd:d4:31:56:e3:ff:78:d6:cd:c7:44:10:ec:
7f:f7:ba:2e:8f:0e:40:b5:3f:d4:59:52:78:53:8c:
87:42:02:c3:cc:b6:a4:ef:f1:e8:c8:c9:48:d2:e8:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F6:79:F1:5F:A0:12:3F:91:B1:A4:34:81:E2:79:AD:6B:93:BA:1A
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:19:01:bc:24:59:33:4e:fd:5c:f9:c5:8a:f6:dd:37:ae:17:
86:dd:2b:e7:68:f1:76:1f:b3:3a:a7:13:8b:f4:d4:4a:2b:3e:
7c:52:c3:e9:f0:c1:c3:fb:6d:82:fc:21:20:59:29:57:0f:8c:
e9:f5:d1:e2:4b:f6:ee:55:d4:1b:d0:e5:54:5b:61:f9:22:88:
41:99:c4:5e:ef:30:a4:37:97:80:8e:d3:e6:50:61:49:d6:60:
67:74:09:71:26:3a:2b:7f:ff:4d:a8:f1:94:16:b1:c5:e4:34:
14:03:5f:d1:72:33:bb:7e:12:2e:47:6d:dd:f6:74:b1:85:33:
30:70:3c:87:2e:04:d5:db:9e:90:6b:f1:77:56:d0:b0:82:af:
0c:0a:2e:0f:b3:13:b1:1c:59:2c:fb:ad:9a:81:82:cc:51:d6:
2d:da:c8:59:2c:58:95:85:34:ff:74:a8:88:6d:48:0f:79:a9:
94:e6:d2:48:60:e6:c7:48:b8:32:76:32:02:4d:1f:0a:e4:83:
28:08:3c:68:a6:e3:99:0f:c1:a7:c0:00:08:ff:b8:6f:b1:94:
2c:4e:b8:a4:29:d1:2d:74:30:67:7e:c3:c5:05:7c:47:6c:0c:
24:db:2f:30:eb:ac:86:93:68:d2:8a:13:cd:b7:1a:b6:7b:00:
a1:7d:c3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:46:23 2025 by rpki-client