Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: m08OfQYw/+I7vXGAYOrh9qws+m+K894128h80RSqOdA=
Subject key identifier: 12:B9:F2:3A:84:E5:ED:B8:86:A7:D2:B3:6A:72:35:20:E2:C0:0D:23
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 019893DB1F5AF32A5F04F3CE6A5BDD4C0B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 1633
Signing time: Sun 10 Aug 2025 12:01:07 +0000
Manifest this update: Sun 10 Aug 2025 12:01:07 +0000
Manifest next update: Mon 11 Aug 2025 12:01:07 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: MNoLGc2yjkmJf7zmLUUgPzGH5Zy7vFLBy+FCmznCKcA=)
2: DCDhVbD3fsODPYm5sUm8pjAvYC4.roa (hash: 7lv1CrpPPfO+TV6Xk6IsNlr9S02akSFzspE/euO4HYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:1f:5a:f3:2a:5f:04:f3:ce:6a:5b:dd:4c:0b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Aug 10 12:01:07 2025 GMT
Not After : Aug 11 12:01:07 2025 GMT
Subject: CN=12b9f23a84e5edb886a7d2b36a723520e2c00d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9a:fc:47:09:62:29:c5:f7:dd:7e:c5:46:08:
00:c4:3d:ff:eb:3f:4a:e7:d7:26:e9:c2:ae:11:66:
57:9a:fe:98:f3:25:7a:74:25:20:21:60:81:27:be:
c9:5f:98:e2:b7:4e:17:70:01:c7:45:28:32:d8:60:
ff:7f:03:a3:35:3f:52:d6:47:6c:39:14:9e:43:b9:
e1:b4:fa:45:04:04:0c:44:f5:e2:27:3a:ec:e2:88:
28:d9:24:f7:4c:23:9c:3d:c1:15:95:f1:ca:75:4f:
0f:31:eb:87:0e:b6:ae:e3:33:74:6f:42:f5:ae:52:
61:e4:53:94:d6:4c:31:d9:2b:02:eb:03:41:fc:85:
64:28:e5:8f:04:98:3e:74:79:35:7f:83:68:62:4a:
c0:43:75:d1:41:7b:a7:41:c5:06:05:89:79:db:4f:
2e:6c:83:59:c8:60:29:bf:64:8d:d7:ee:6f:74:2f:
3e:df:10:46:0c:00:d6:20:6d:2e:da:e3:f2:a9:3d:
70:d0:db:6e:60:f0:98:b1:81:ab:66:fe:01:2c:ad:
bf:d3:9c:1d:af:4c:09:7a:37:53:27:cb:f3:f5:8b:
38:b0:20:3e:07:d7:cc:5c:42:c9:4c:6f:a8:e0:ce:
88:9d:da:a7:3c:7d:1d:5f:78:cb:7c:81:f3:65:38:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B9:F2:3A:84:E5:ED:B8:86:A7:D2:B3:6A:72:35:20:E2:C0:0D:23
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:15:ce:fe:b7:72:04:53:35:40:6d:85:aa:ea:e7:03:c3:11:
01:8e:8f:be:9a:7b:5a:ee:da:cf:37:d8:c2:d7:14:64:ed:99:
df:ab:8c:38:36:b6:50:c4:62:18:d3:52:46:5f:5f:95:ba:18:
95:2d:70:ec:14:87:94:3e:05:ae:16:6f:6d:92:33:14:74:02:
48:ef:c9:08:8b:a3:17:c9:87:b6:5c:33:2c:97:43:e6:10:d1:
6b:c6:48:65:89:59:cf:47:a1:c8:34:78:51:c8:03:c6:5f:40:
81:e1:31:e3:0b:4e:e5:9b:de:75:e5:55:b9:e2:70:ac:b5:ad:
c5:ea:fc:d5:ac:18:13:8b:d2:8a:7e:fb:02:ff:a7:e2:02:c6:
d4:a0:eb:69:2c:ae:7a:15:9c:09:cb:48:39:65:36:8a:a7:6b:
6e:9b:0c:a9:f6:58:19:d8:2f:0b:33:f4:98:6e:c3:3d:ca:f7:
23:68:89:a8:fa:f8:e3:5f:bd:31:39:de:7c:24:5c:26:0d:98:
29:55:0e:b8:91:0f:20:b8:49:d5:8b:69:9f:ad:bb:5d:09:c9:
e7:8e:a7:48:f3:4e:cb:6b:da:76:18:e6:59:6d:bf:1f:62:a5:
dc:7d:54:31:f9:61:25:50:ee:6b:49:20:23:7b:3d:39:b4:d0:
de:47:9f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:25 2025 by rpki-client