Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: JocLbdOKU6szBKziyLIOqKW95/bNeympeK4uVboF+1s=
Subject key identifier: 20:78:52:BF:45:1A:0C:92:96:CE:C0:22:1C:E7:36:42:1F:AF:45:68
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 01974AB1AC8688ECCEAFC775210F7ED4DEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 14:00:47 +0000
Manifest this update: Sat 07 Jun 2025 14:00:47 +0000
Manifest next update: Sun 08 Jun 2025 14:00:47 +0000
Files and hashes: 1: Bt61Duabnrfk_tvUxqrlxq35pFs.roa (hash: 3mTb4E/hZOVdEv0TkUnMgMT0a7EJ9fK0ZGjFdNjhe4g=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: DMhOx93B5H21u5mXDCBmabCKbbvLKAc3GVmIXInnFO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:ac:86:88:ec:ce:af:c7:75:21:0f:7e:d4:de:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Jun 7 14:00:47 2025 GMT
Not After : Jun 8 14:00:47 2025 GMT
Subject: CN=207852bf451a0c9296cec0221ce736421faf4568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:20:3b:50:d6:4d:50:5c:28:7a:3a:f3:36:
01:68:78:fe:d9:5a:b4:9f:ff:1b:20:07:8d:0a:99:
8d:3f:87:26:95:a4:8a:e7:c3:8f:d2:f7:2a:f8:3f:
2a:db:4c:ed:61:ed:73:ba:1c:05:64:78:fe:3e:76:
54:36:a8:d6:30:a6:ed:a4:2e:30:2b:d9:62:82:6c:
d0:4a:85:5d:6d:c0:37:e3:9e:08:a1:b2:96:12:f0:
4b:07:44:51:12:ce:a3:f1:d1:da:1c:fe:37:4f:a8:
14:d3:51:bf:27:84:1c:57:7b:30:02:53:d9:94:e6:
5c:6c:ae:d0:ac:cd:20:e0:19:59:f7:cd:cd:a3:4b:
24:32:e4:2a:1b:26:98:db:6f:75:f5:fd:00:1d:4d:
68:c3:cd:b5:b4:8e:d1:be:37:0d:72:07:c5:26:39:
e6:94:2a:62:ec:80:d3:50:70:dd:27:86:bd:c9:90:
08:ed:72:3f:25:2f:72:4e:2e:b4:a7:37:e9:f6:42:
45:5d:7e:40:1b:33:0a:b8:06:73:e6:27:f0:3f:21:
f4:7f:2f:87:87:c5:fe:d5:12:2f:85:da:77:f9:fa:
7d:5d:e4:7b:80:b8:af:7c:1c:1f:2e:fc:e4:c6:0b:
02:d7:58:a6:23:0c:32:b3:33:f9:a1:d8:bb:db:30:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:52:BF:45:1A:0C:92:96:CE:C0:22:1C:E7:36:42:1F:AF:45:68
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3e:98:ba:92:6a:d4:8b:57:54:d6:37:cc:6a:4d:28:ae:3e:
f0:b1:6f:08:fc:b3:1c:41:e1:bf:c5:89:78:d9:c5:0e:ac:3f:
02:e5:cf:d2:b4:71:26:7a:95:8f:80:de:c4:2f:d1:2e:94:b7:
95:81:65:d0:4e:f5:4d:b8:ca:c7:46:7f:24:c6:a7:c8:b5:26:
56:bc:55:68:48:a2:73:3f:e9:63:ee:aa:a9:3b:c5:1f:42:60:
f1:ed:6f:45:89:48:6e:f8:02:79:09:84:4c:ea:62:cf:95:da:
50:d4:68:94:80:ae:99:c2:75:4d:50:c8:fb:77:9d:1b:11:8c:
a1:a2:a5:f0:60:4e:d5:47:8d:ee:14:2b:7f:56:ad:fc:0d:a7:
d1:fa:ea:50:6b:f7:9a:c0:61:68:1f:38:6f:fa:17:d0:aa:43:
aa:22:aa:40:6f:a4:75:b6:e8:8f:93:1a:98:b3:c6:e2:23:c6:
9e:74:07:f8:ba:16:fa:72:5a:ec:09:56:90:47:c8:63:0b:1a:
c3:b0:6f:87:ec:a5:60:e1:f8:6b:fd:ad:ca:0d:5b:20:a2:1b:
c7:4e:9a:0e:95:ed:78:4e:03:b4:2b:1d:4f:c8:fe:ee:be:4d:
93:d3:80:e3:74:ab:35:75:65:86:9a:c6:8c:fd:95:63:0b:07:
86:3b:dd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:11:55 2025 by rpki-client