Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: p5lJ9a0ElWZ3M5tq2c3fPv/55UerUa2mZS9TRmaWQl8=
Subject key identifier: D5:2C:51:94:B7:CD:6F:70:2B:09:A1:5D:53:C4:F1:94:F9:7D:CE:42
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 01987298E273E9A86AD9B12E6B5799B092B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 1128
Signing time: Mon 04 Aug 2025 01:01:18 +0000
Manifest this update: Mon 04 Aug 2025 01:01:18 +0000
Manifest next update: Tue 05 Aug 2025 01:01:18 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: B4m30zBIoOe3odQxbEXlJmDFMOcd+oQcurZzQmt2tVs=)
2: ruyaJPOfuuheWzXgHxMIwRIiRmI.roa (hash: dOziRNC4DuCftQxbewVCKgY2HoDJCSSxS8NFyfVWRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:e2:73:e9:a8:6a:d9:b1:2e:6b:57:99:b0:92:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Aug 4 01:01:18 2025 GMT
Not After : Aug 5 01:01:18 2025 GMT
Subject: CN=d52c5194b7cd6f702b09a15d53c4f194f97dce42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:b9:51:09:6d:75:8c:7b:ad:32:98:5e:11:
ce:37:56:9f:df:63:21:15:00:1f:66:21:76:ab:f1:
3c:fb:23:48:cb:d3:15:41:03:b6:22:25:f5:6c:91:
ed:27:fe:b1:02:8d:df:ed:fd:fc:c5:ff:0b:2d:e2:
75:5e:e4:53:96:42:dd:f4:2a:84:80:b0:46:22:24:
a0:f5:c8:70:34:15:e7:77:cb:36:83:79:1b:f5:3a:
45:21:20:6c:0c:b6:b9:0c:fa:c7:63:66:36:47:7d:
62:e8:c3:b4:f3:61:1c:c6:c7:a2:bc:bf:e6:4d:a3:
2b:ab:23:51:3f:d9:95:74:f2:e4:54:37:5b:86:49:
a0:1f:0f:07:5d:e4:3b:a8:68:1b:05:11:f0:d3:52:
f5:49:ce:b8:61:e3:88:cc:90:01:b6:f3:56:89:04:
c3:42:f2:ac:cd:74:40:78:d1:5a:ec:80:10:2a:8c:
da:ec:7b:43:ab:61:2c:38:7f:78:18:f3:4a:30:05:
d8:82:75:41:e0:52:4a:e3:c4:c7:72:a6:d2:96:86:
fc:20:56:2f:ef:6b:51:8a:d0:55:45:62:44:8e:d1:
cf:33:e0:63:9c:aa:a7:4e:6b:93:ac:d3:05:56:20:
8a:af:65:73:7d:58:81:29:a0:fe:d5:61:c4:bc:95:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2C:51:94:B7:CD:6F:70:2B:09:A1:5D:53:C4:F1:94:F9:7D:CE:42
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:56:ef:38:a4:c9:a6:90:b8:0c:2f:59:76:a7:3a:8c:69:1d:
52:f1:ef:aa:48:b5:fb:a2:4b:86:9e:bb:92:48:47:ad:f3:79:
60:be:81:3b:94:00:04:76:c6:08:12:bb:6f:b7:e3:0a:c8:e0:
c3:9f:d5:69:35:7e:05:59:f8:df:f7:8b:bc:4c:33:5f:57:84:
6c:ea:f9:e0:18:58:42:8f:f2:35:75:a3:47:b1:55:f3:9a:9e:
f3:13:3f:76:cc:76:6a:53:a7:22:4a:e5:5a:20:f8:87:7f:94:
11:19:fa:1b:21:5a:40:f8:bb:cc:28:a4:45:25:23:ce:69:d5:
32:e0:b4:86:5e:96:a4:29:df:09:5b:e3:58:ad:7f:b8:5f:fe:
39:cc:3c:c4:9d:5b:fa:ac:af:bf:c0:bd:e3:c2:75:28:8a:6e:
ab:e3:e6:aa:91:2e:77:ed:8f:da:25:24:9a:ed:1e:02:2c:f2:
8f:12:3b:9a:24:01:43:ea:65:d8:ce:1d:bf:91:15:e3:b5:9b:
92:d5:0c:b6:03:a4:8a:8c:72:7a:b0:65:b7:a7:27:22:ab:ae:
1b:35:72:bd:b2:36:0e:27:82:96:04:85:99:46:98:76:5c:c5:
75:33:1b:54:99:88:7d:df:7d:12:3b:a8:11:a4:11:b3:b1:21:
64:77:55:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:07 2025 by rpki-client