Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: YPEhQ9+x3DE+Sjcsit94y/dY9bLeR54EuID0TzOd14Y=
Subject key identifier: D3:B8:2D:17:7C:1E:A8:EA:CD:4C:7D:3A:79:04:C0:E4:9E:E0:27:18
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 0197911319F22D70367E756372A85266EC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 0490
Signing time: Sat 21 Jun 2025 06:00:37 +0000
Manifest this update: Sat 21 Jun 2025 06:00:37 +0000
Manifest next update: Sun 22 Jun 2025 06:00:37 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: fAlqTbbOVQazepqbxuOgKFkCjleVlOXknNOoyO0+CYY=)
2: wLvB8cGiUEUZNSS38jCt0kGtb0w.roa (hash: m3dcBbH2bIeKi8Ap8eHL2CuPz3vf7Stl96ekMV6tjIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:13:19:f2:2d:70:36:7e:75:63:72:a8:52:66:ec:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: Jun 21 06:00:37 2025 GMT
Not After : Jun 22 06:00:37 2025 GMT
Subject: CN=d3b82d177c1ea8eacd4c7d3a7904c0e49ee02718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:2b:6b:a5:c4:dc:a7:08:93:94:26:b9:55:
4d:49:d7:7b:a2:dd:b1:cf:f0:64:9c:8f:a3:13:d3:
a7:32:64:ee:5b:f0:23:e2:db:f2:89:03:ad:52:52:
1c:6f:4c:59:dc:1d:79:87:13:7d:30:4e:2f:41:ed:
af:12:5c:cf:21:ad:2f:e3:8f:bf:3c:74:bc:84:da:
b6:5b:6b:7f:b2:c1:ff:cd:5a:5e:98:b7:be:f3:f9:
78:5d:dc:60:8a:e8:32:50:8f:76:4f:9c:39:b2:65:
16:69:c6:3f:83:a4:c5:ce:3f:2f:8b:84:8a:5a:db:
fc:7c:ea:e3:53:78:95:47:77:ad:a3:d5:23:14:7b:
46:76:6c:25:57:87:61:c0:79:c0:14:fb:2e:b6:70:
bc:29:6a:08:30:ad:48:96:d4:06:e3:b0:e3:b3:e6:
8f:fc:08:82:46:a6:50:fd:f9:06:6a:33:50:1c:a6:
16:4b:ab:c0:66:e3:e9:d0:e3:73:8d:31:8b:b0:f5:
85:e1:81:ef:7a:3a:03:6a:af:14:aa:37:7a:51:0e:
f3:35:18:90:c6:21:b4:bd:56:55:e5:d7:c9:2e:5e:
41:a3:7e:e5:24:71:4c:b9:da:7c:db:62:d2:50:e9:
63:e9:45:f5:7e:4a:08:55:48:b6:d3:f6:12:85:43:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B8:2D:17:7C:1E:A8:EA:CD:4C:7D:3A:79:04:C0:E4:9E:E0:27:18
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:75:f5:42:ea:9c:8c:15:02:32:d4:64:ee:fd:33:0b:fa:cb:
b0:73:0f:98:20:f3:af:77:ab:30:d5:a4:4f:0f:9e:c2:68:39:
99:04:6a:0b:a2:39:a7:76:e5:eb:18:2a:61:56:41:80:82:cb:
2a:01:78:97:0e:10:27:c0:42:13:d5:38:e1:ce:28:80:8f:56:
97:1b:2e:cc:0d:09:35:59:c9:37:84:8e:d1:54:84:f3:bd:f8:
30:5d:a3:b4:27:de:25:c3:d1:7f:58:90:02:7f:2e:19:dd:08:
97:b8:20:37:40:0e:6d:0d:f1:5d:da:bb:cd:b9:27:0e:26:cb:
da:06:04:c6:a0:9e:60:23:42:3c:e4:da:d5:ec:95:4a:6e:dc:
23:05:ef:30:7f:d6:e0:f4:fc:fc:89:6a:b5:03:61:b3:d5:6b:
20:1d:0c:41:2e:1e:16:b2:1c:34:f3:47:29:0f:21:a7:cc:61:
75:ef:af:a3:25:31:2d:67:7b:8a:74:a7:22:da:37:f4:5f:9d:
1d:08:03:70:63:b6:fb:9a:e2:dc:ac:f4:7c:32:24:a2:8c:49:
d8:8a:3f:3a:74:65:44:05:71:c3:a2:11:c8:bb:cc:15:9d:95:
53:46:18:16:fd:b4:a0:a6:e6:d3:28:f4:ea:f4:4e:aa:85:9c:
16:ed:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 14:29:34 2025 by rpki-client