Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: 4u9hUJciOBtq/V8MNs7Tl/KcWi5yoUSUSkEu3MMv+v0=
Subject key identifier: 45:74:A4:2F:B7:96:D8:7C:1C:06:47:D1:C1:3F:F1:5B:A3:E8:D1:F5
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 01974A0CDE88FBA8705C6B5128AC662CFB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 0A0C
Signing time: Sat 07 Jun 2025 11:00:46 +0000
Manifest this update: Sat 07 Jun 2025 11:00:46 +0000
Manifest next update: Sun 08 Jun 2025 11:00:46 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: IFRpl4HSy/2wJXtaF1xDJ87+F0nlTHVh0Js9FZsY4P0=)
2: k-zbYqMjr7XFkjggYMsDTqkc4ZQ.roa (hash: s4TVKdERPvITqngL+4WwZ8o+fcmlm7A+ZBRKG7i/ppo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:de:88:fb:a8:70:5c:6b:51:28:ac:66:2c:fb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Jun 7 11:00:46 2025 GMT
Not After : Jun 8 11:00:46 2025 GMT
Subject: CN=4574a42fb796d87c1c0647d1c13ff15ba3e8d1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:b7:ca:5d:13:32:bd:23:a8:d0:6f:be:af:
4e:03:85:d9:c8:41:3c:05:6c:5c:73:54:72:dd:e6:
8b:b9:0f:4c:46:51:43:03:32:1a:06:80:bf:d3:4b:
d7:cd:f3:50:5b:10:40:39:96:bf:ea:4d:6a:f3:a0:
39:c1:e2:5c:6a:0c:19:08:76:09:e6:d5:5e:b6:3e:
a8:69:0a:86:bf:20:9f:b0:33:98:36:d4:fe:bf:19:
5f:fd:b2:a3:66:26:6c:00:5a:17:3f:0e:b8:2e:61:
61:dc:d0:3a:a0:c7:9f:b9:d0:59:69:4d:45:ae:4d:
64:50:e7:73:65:61:6a:2e:d9:e3:43:ae:2b:d9:24:
c1:46:20:d4:b6:10:80:1a:f8:4e:33:ec:12:bb:ba:
45:a1:1a:bc:a3:f1:d9:23:c0:24:1f:ea:2f:63:a4:
29:25:c5:65:4e:45:91:f1:24:15:91:b7:97:14:04:
da:06:50:e0:77:b3:8c:38:fb:79:2b:a5:a9:5f:0b:
02:4a:d1:71:fd:38:b0:93:92:b2:93:4a:da:32:88:
76:07:30:13:b4:b0:6f:7d:3a:05:73:20:8f:8c:95:
ee:8b:06:75:25:ba:b4:f0:3e:80:e8:81:75:76:8c:
ae:2f:48:ee:a8:78:6e:2f:df:6b:dc:d4:1d:55:46:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:74:A4:2F:B7:96:D8:7C:1C:06:47:D1:C1:3F:F1:5B:A3:E8:D1:F5
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:63:02:41:4e:db:73:a0:8b:3c:97:e4:4c:c6:24:aa:ce:94:
db:28:31:3f:4a:cc:d4:f7:41:23:fc:e9:72:0e:5c:12:01:f9:
b0:ba:1d:1d:f8:97:98:95:1b:e0:2f:b8:57:df:47:1c:93:41:
3d:79:d7:04:f4:48:d9:bf:d9:54:88:67:88:d4:4d:5d:e7:0d:
53:5c:c8:30:6f:4f:85:f9:a7:8e:dc:a0:62:d5:1f:f5:fd:0f:
46:43:05:db:c3:ed:5d:63:3c:71:3c:51:2e:d9:d9:c5:c9:18:
12:99:cf:f6:c4:7a:57:c9:be:49:c3:fd:c3:7e:6e:d2:97:66:
13:1d:01:fc:ce:a0:ba:a2:81:df:c5:bb:71:eb:4a:66:44:8d:
8a:c9:21:bf:43:78:90:d6:17:15:b4:ca:5c:dd:9e:1f:eb:dc:
ee:6f:a5:68:13:5f:54:1c:c3:5d:a5:ca:94:2b:9b:9b:f4:ae:
a4:02:02:9e:88:5f:06:88:cc:7f:7d:fe:08:53:20:c1:df:b3:
5b:5f:73:3c:74:24:e4:fc:48:2f:8b:ee:c0:08:16:2e:05:bb:
41:cf:97:bf:44:19:1f:75:25:e0:a9:67:69:ac:4d:2a:dd:75:
8a:b8:9d:6b:36:a3:1e:01:af:62:c2:6c:66:93:b3:f3:03:0f:
35:5b:30:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:04:02 2025 by rpki-client