Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: OvIXSxQQY+y/Iq682kTGupmsdAMoSR1GvKZ+qfrea8U=
Subject key identifier: 79:D2:38:C2:97:EE:06:CE:E6:EC:ED:5A:84:63:0D:49:D4:C8:6B:39
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 0197470C368EB61C0D34CC124E9597AF9BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 05AA
Signing time: Fri 06 Jun 2025 21:01:11 +0000
Manifest this update: Fri 06 Jun 2025 21:01:11 +0000
Manifest next update: Sat 07 Jun 2025 21:01:11 +0000
Files and hashes: 1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: qiLQcEV0vgZel/ZzyJMDyVBbKl7KuzUCEbS68qpBWdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:36:8e:b6:1c:0d:34:cc:12:4e:95:97:af:9b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Jun 6 21:01:11 2025 GMT
Not After : Jun 7 21:01:11 2025 GMT
Subject: CN=79d238c297ee06cee6eced5a84630d49d4c86b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:8d:70:7d:d4:b5:f0:1c:b1:55:e5:90:55:
b9:e3:1c:26:e8:4f:3f:2d:8b:d7:b3:f0:3c:3f:3a:
13:92:06:97:90:c9:b5:17:d0:8f:41:b6:a2:43:77:
2d:2e:07:7e:8d:8b:8f:f6:fd:da:81:40:22:56:3a:
fe:65:be:0d:cf:8c:ac:9d:f7:f7:81:d1:97:e3:74:
0a:09:bf:12:58:2e:a8:45:1b:56:99:cf:06:18:f5:
30:25:c4:68:a2:0c:99:01:0f:a1:9a:95:ed:e8:33:
24:3d:07:d2:39:25:e8:10:79:8c:74:06:1d:fa:b1:
28:15:c4:6b:5d:44:43:e6:15:91:0f:48:4a:a8:0f:
9e:70:ff:49:03:ec:d0:ae:78:d3:57:a3:cc:a9:ca:
da:bf:63:09:19:98:8f:f8:b8:bd:b1:c0:76:95:de:
8e:f6:de:48:98:1c:55:76:8f:aa:a4:1f:88:60:f7:
67:6d:43:f2:64:ee:ab:0f:67:11:64:c6:d7:64:66:
33:ce:b1:cc:0d:df:23:29:97:9c:3b:e4:80:89:e1:
bc:0c:14:cd:ce:1d:76:0f:b9:df:aa:de:91:33:ab:
09:78:4d:41:e9:f4:c7:fb:da:00:27:64:84:0c:ec:
dc:d8:bc:f6:e3:76:a5:4c:e7:7a:fa:84:a3:aa:42:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D2:38:C2:97:EE:06:CE:E6:EC:ED:5A:84:63:0D:49:D4:C8:6B:39
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:28:36:07:a0:c8:c9:4b:23:b8:42:75:6e:39:b6:78:45:fb:
f1:5e:cf:d9:c1:35:6a:c7:26:11:59:43:4a:bb:53:4c:c0:4b:
1e:6d:c2:d2:69:98:aa:14:46:66:6b:96:40:85:80:8f:5e:e0:
a4:72:9c:2a:f7:f0:75:d8:29:a6:d1:1b:fe:fd:a6:a8:10:59:
74:93:d7:16:5a:02:ce:2d:1a:b6:12:24:8a:24:5a:dd:14:3a:
de:67:6b:da:56:90:d0:f9:c3:41:d8:50:54:93:77:3b:2f:ca:
c6:ef:aa:a2:82:f3:72:ad:57:56:41:bb:9b:60:c6:f1:eb:26:
27:f2:cf:b7:98:59:19:16:ba:96:8c:77:45:fe:f6:7e:5d:0a:
e4:30:6d:a2:7d:a2:86:53:a9:d9:22:00:b6:1c:42:e4:20:74:
af:6b:be:01:fc:b5:2b:96:44:6a:5f:61:5a:2c:a5:a3:b9:6a:
f2:24:38:15:50:f7:c5:d8:42:0e:48:f7:3c:ac:36:d9:ef:c3:
53:41:81:25:af:e7:92:02:b3:99:df:29:0e:ab:2e:f9:72:69:
d7:a9:f4:fa:ad:47:72:f8:f7:5b:76:bb:b2:f3:a5:f0:02:c8:
b2:5f:5b:97:df:de:dc:29:46:e2:60:81:c3:55:03:93:94:85:
56:69:90:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:44:41 2025 by rpki-client