Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: +5Xyc8dvZg1nbdV2r+u6/I4jhrtpkDlyXIK+eKSBvRo=
Subject key identifier: 58:7B:C7:E8:86:F1:34:B3:DB:D7:49:DF:06:17:74:22:85:C3:5C:DA
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 01976C987957FA2DD51608C1E6ED3ADFEECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 0F4A
Signing time: Sat 14 Jun 2025 04:00:21 +0000
Manifest this update: Sat 14 Jun 2025 04:00:21 +0000
Manifest next update: Sun 15 Jun 2025 04:00:21 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: TB0B47liorE9XbJODD7lRTZU8x/l6AIQzBSHYYSajGM=)
2: 6f05f7w22zRcUpz28tjM6XCdsYk.roa (hash: kl4KaLs8etslFAKNgVQw6su1C8PWL6O+HJhYp1T4Tak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:79:57:fa:2d:d5:16:08:c1:e6:ed:3a:df:ee:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Jun 14 04:00:21 2025 GMT
Not After : Jun 15 04:00:21 2025 GMT
Subject: CN=587bc7e886f134b3dbd749df0617742285c35cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:a5:eb:b9:1f:53:bb:ff:5f:31:b8:41:04:
74:90:d3:bf:ac:47:ac:1a:88:78:47:25:7c:4c:1f:
61:d1:cd:cc:cc:51:6e:18:cb:61:d8:71:46:3b:7e:
03:2f:36:65:a1:df:2f:b5:0e:c1:4f:e6:6e:7d:f8:
77:e5:b8:42:47:c2:07:50:d4:90:95:62:1e:bc:ea:
78:9b:6d:61:86:54:ec:7c:18:c6:8d:76:4b:21:e4:
6b:5c:60:94:a6:5f:69:4a:e1:cf:c6:77:6e:fe:9e:
4f:b5:6b:c8:38:7b:60:71:c1:c5:70:a8:4c:55:ee:
3f:82:ee:19:9b:e3:1d:22:d4:21:b4:b7:38:ff:d1:
a2:f3:6f:c4:82:66:02:07:32:01:c4:02:0b:01:49:
a7:61:b2:3b:9b:bd:f8:04:43:99:83:ad:34:4f:3d:
86:73:ee:08:2e:34:7c:12:a2:5c:92:22:19:86:5f:
da:06:53:a6:9b:2f:90:1c:08:a4:09:88:cb:12:bb:
89:f5:4c:89:6e:c5:e1:35:a9:97:5c:b7:a7:da:8b:
90:9a:70:bb:28:42:21:61:fb:19:af:43:5b:a7:17:
a7:05:38:80:c9:1c:ff:7a:3e:b6:f6:67:80:96:b0:
df:93:b4:a4:4f:22:f4:04:41:16:f1:53:ed:3b:85:
c2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7B:C7:E8:86:F1:34:B3:DB:D7:49:DF:06:17:74:22:85:C3:5C:DA
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9f:9c:4a:ec:4c:30:d4:60:e2:09:1b:5c:b1:bb:40:c2:30:
d9:6a:81:c6:e9:a9:78:0d:29:6a:c1:9e:bc:cd:bf:36:c7:b2:
b5:5f:57:f2:fa:da:dc:d3:9b:10:d8:18:df:33:87:20:00:70:
99:b3:9f:ae:a1:85:dd:80:58:45:d9:b9:60:b6:13:de:bc:f2:
06:cb:2f:7c:93:bc:6a:fe:e9:83:01:fa:35:c2:17:6a:7c:4c:
e6:e8:9c:5b:b3:78:79:85:fd:0e:bb:8c:b5:8d:cd:56:6d:93:
0e:6e:9b:af:a4:ea:40:1d:34:45:0f:73:6c:5a:68:bd:6b:cd:
f5:aa:fa:c9:b7:84:21:a4:4c:6e:2e:bd:ae:10:dd:88:d8:bb:
7f:7b:27:05:74:78:89:64:ac:d2:8e:71:49:16:2a:a7:c9:3e:
fa:77:e5:1f:2c:e0:21:fd:f4:0c:be:c7:dc:a2:c1:e5:34:23:
e6:47:c7:ba:11:c4:33:f1:2b:a1:cf:29:59:b7:a9:9b:85:9f:
01:5e:15:84:e8:62:97:2b:0e:93:12:3d:63:c8:38:a9:0c:9a:
de:9f:2f:eb:fe:13:5a:4d:b7:8e:4a:aa:70:85:9f:46:64:5f:
5d:05:e3:ce:78:b8:a7:36:98:93:06:f9:a4:17:7d:20:aa:b1:
8a:3a:b6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:02:09 2025 by rpki-client