Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
File: 3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json)
Hash identifier: V6jUMzKdWNjaSUCREra5I0FjAXMWXqZMaIaq3iMv5AU=
Subject key identifier: 33:0B:E6:D8:18:BA:16:11:A4:1C:18:46:A7:2D:81:EA:22:94:8E:B7
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 0197711ACA1D52EEA7356417CFE8939E798A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
Manifest number: 0915
Signing time: Sun 15 Jun 2025 01:01:10 +0000
Manifest this update: Sun 15 Jun 2025 01:01:10 +0000
Manifest next update: Mon 16 Jun 2025 01:01:10 +0000
Files and hashes: 1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: mxHnZv1hVjHSJoa6gLcw924zakO/2zBvvevM+naW0OU=)
2: WGy1cA3da99W4WDLy3MY4ZyczoU.roa (hash: SJ9b+hH7b3cVwCr6CT26WQO6ifaQhtn6CrsiD/nybF0=)
3: jkdGIndQz1w9lSn5gC2Ktns7PmQ.roa (hash: VwGNfeMCv18NN23Twwp0pPWxKthypMsuMJxPjN6yLC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:ca:1d:52:ee:a7:35:64:17:cf:e8:93:9e:79:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Jun 15 01:01:10 2025 GMT
Not After : Jun 16 01:01:10 2025 GMT
Subject: CN=330be6d818ba1611a41c1846a72d81ea22948eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:fa:98:61:1e:6c:66:07:3f:29:6f:b5:e7:
30:e5:db:cd:33:93:5f:e3:8f:d2:0d:5b:03:13:db:
8f:fa:26:4a:f2:52:45:21:12:ec:96:f3:85:fb:2f:
fd:ba:2f:78:44:71:1a:16:70:b6:25:99:4e:c9:a2:
58:15:b0:08:65:ef:7f:8a:63:a5:48:09:d5:05:68:
c1:ad:43:93:c1:bd:63:c7:be:91:43:fc:14:31:fc:
f2:88:28:d7:94:f2:63:58:16:6c:ca:ba:13:df:f9:
a6:7a:54:4b:a0:21:8f:10:2e:6b:92:9f:17:30:dc:
25:81:fa:ce:28:d8:a6:c9:9c:5f:58:52:ba:0a:37:
e6:04:11:c8:62:18:c8:b7:dc:5d:82:b4:d5:c8:c8:
e1:0e:bd:d5:bd:6d:ce:05:3d:48:75:0b:d6:8b:e8:
00:0a:3e:01:48:23:3a:01:21:15:fd:50:48:b9:47:
3e:f0:10:8c:02:24:98:96:0e:4c:c9:9e:a0:f9:4d:
00:25:f2:84:42:3f:9c:fc:f3:c3:a8:e9:98:4d:ac:
23:7c:e3:06:cb:ad:80:7c:68:93:98:3d:81:7f:49:
45:f3:21:4b:4a:7e:a2:f4:06:82:44:73:99:c8:01:
bc:1a:cd:bd:cf:c7:ec:44:7f:d8:f1:73:ff:b4:72:
4d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0B:E6:D8:18:BA:16:11:A4:1C:18:46:A7:2D:81:EA:22:94:8E:B7
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e7:92:0c:5e:2e:9b:ca:7a:c9:f8:76:2c:2f:98:1d:4d:2f:
e6:6f:5d:6a:c8:d0:30:26:9f:c3:8b:15:5c:0e:7e:24:94:12:
31:d8:a6:78:01:5b:0a:c1:9e:19:de:bd:1c:b9:02:ed:29:ae:
12:d1:c7:89:1e:bd:e4:f8:20:9a:c1:1b:a8:55:e5:8d:91:fe:
15:32:94:c2:b1:de:7e:fc:4b:75:86:84:2b:83:8c:a0:51:31:
93:af:6e:67:bb:31:1a:bb:f8:0a:a5:05:be:4a:29:16:ee:ea:
0c:ce:5a:d0:9d:88:02:b7:70:b3:9b:63:03:84:10:07:9b:ef:
6d:f4:00:71:4f:97:2c:9a:83:c4:6e:18:e1:b7:33:3d:65:93:
ad:7b:41:4d:d4:36:34:d1:a0:87:dd:b6:5f:bb:87:fa:bd:f2:
b4:1c:0a:74:73:af:c6:b8:a1:e8:d5:66:b6:2a:00:d5:5d:4d:
1a:25:e1:60:e1:a8:3b:1f:ac:8f:26:60:b9:6d:19:9e:02:13:
9a:ae:80:59:f7:99:18:9d:56:86:b3:54:28:74:97:5c:0c:18:
db:8e:b0:64:de:fd:33:d5:16:6b:ae:d9:f7:3d:ec:25:11:c3:
16:bc:9c:7b:0e:b6:5e:35:30:1b:9b:2a:0c:fb:be:9e:a2:69:
26:6f:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:43:43 2025 by rpki-client