Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: K08QepHIRs9VwMvw2KqfQN4QrhrX6tYikoRwxfC0PUs=
Subject key identifier: DF:90:E6:0A:1E:F7:FC:B1:71:A6:34:F9:F3:0A:E0:EF:15:46:1F:78
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 0196737930D137388C853B5512485335FCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 0FA9
Signing time: Sat 26 Apr 2025 19:00:44 +0000
Manifest this update: Sat 26 Apr 2025 19:00:44 +0000
Manifest next update: Sun 27 Apr 2025 19:00:44 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: zBWHtJ6ZSH/9T4JWWaM+f0dcjzosFiE3y0hNJ7uj99c=)
2: wfCvw7M0UWwwmqgY4ndwt7Ezdvc.roa (hash: nadXDZSO5g66NQALk/0GLGlBJpZj5fLYUofWKpN1pZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:30:d1:37:38:8c:85:3b:55:12:48:53:35:fc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: Apr 26 19:00:44 2025 GMT
Not After : Apr 27 19:00:44 2025 GMT
Subject: CN=df90e60a1ef7fcb171a634f9f30ae0ef15461f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:e0:38:b5:c2:53:01:c4:ca:74:aa:89:0f:
6f:33:c8:af:82:16:70:eb:20:c9:2b:e9:a7:01:11:
5f:95:4a:9f:c3:f4:d4:a6:0e:2b:30:f5:f4:e5:15:
d4:08:6f:b1:21:06:f6:3e:0d:61:5c:46:25:8b:0a:
57:47:17:ca:c7:6a:c4:56:f2:63:cb:8a:0e:d4:06:
8b:66:01:be:fd:70:e9:9b:9e:fe:75:6a:b5:62:36:
82:0c:ef:7c:4d:d9:d5:8e:1e:b1:53:cb:8c:3b:7a:
09:8c:32:67:2b:99:ce:57:c5:eb:ec:f7:93:f4:17:
9d:b2:fd:da:63:77:18:da:b2:a6:b7:41:2e:57:e8:
dc:fb:b9:12:f3:da:07:25:68:e1:58:fc:a4:26:7e:
7e:fd:f8:e5:e6:ff:9c:d9:4a:5c:f9:67:6f:4d:c7:
dc:a2:6f:f1:37:56:16:21:5d:18:bd:21:f6:54:18:
76:fe:5d:27:f3:05:c9:7c:cf:e0:39:f6:91:3d:97:
d3:bf:a9:07:86:70:d6:94:e4:85:75:d3:67:90:38:
32:25:74:61:ef:13:f4:cf:f4:5c:3a:eb:44:5d:0a:
5f:46:26:55:06:c2:21:c1:2b:c9:e4:7c:c1:25:a7:
b9:be:40:f7:0d:6a:57:e5:1d:55:f8:8f:d9:2e:9b:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:90:E6:0A:1E:F7:FC:B1:71:A6:34:F9:F3:0A:E0:EF:15:46:1F:78
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c0:9e:a2:1c:77:36:2b:1e:d6:51:66:cf:ef:38:d3:3d:c8:
23:3e:e5:9c:bc:ab:b5:a1:96:85:91:37:5f:f2:55:02:fc:75:
7b:d5:3f:54:04:a7:ad:8a:c9:9b:ed:1b:ec:33:5c:8a:03:ee:
32:d2:42:ba:ef:6f:52:59:9e:f0:e0:6d:a1:3f:04:4d:7a:2c:
f0:d7:e3:36:a7:e9:2d:76:42:b9:85:98:25:cf:fd:3a:e4:4b:
7f:af:49:9e:f6:a8:be:b8:2f:21:66:aa:cc:64:7e:f2:cf:1e:
e0:2d:60:de:16:e5:4f:ba:84:6b:0f:e5:d0:91:ee:1b:28:b2:
8a:4e:46:2a:86:34:d6:eb:f7:87:30:2d:85:99:23:7e:1e:c3:
fe:51:95:6d:5e:46:26:18:3a:cf:d5:1a:eb:53:67:65:3b:9d:
80:5e:6e:8b:04:a5:d8:bb:47:2f:0d:56:33:aa:3a:73:66:3c:
5e:c7:88:86:6f:b0:8e:78:1a:1e:b8:52:10:2d:15:ed:ba:d5:
47:35:f9:81:46:10:72:4c:ed:7b:ab:71:2b:0f:d5:43:cc:66:
47:1f:cc:e7:78:37:5f:be:68:e3:bb:7d:ce:ae:06:75:26:84:
e1:e0:18:2e:5f:13:f2:23:fb:b1:65:69:ba:27:4c:e3:08:05:
46:6f:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:43 2025 by rpki-client