Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: BYxmDflvE0+Dv0537wTJVBlIeXMU9rK99smbs0nYyVA=
Subject key identifier: 08:D4:21:9F:6F:2F:9E:50:5E:15:CF:4D:B3:20:CC:6A:0F:93:8A:1E
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 01976BF3FFA0393A4A9C1DEA2F6458FD617B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 10A0
Signing time: Sat 14 Jun 2025 01:00:42 +0000
Manifest this update: Sat 14 Jun 2025 01:00:42 +0000
Manifest next update: Sun 15 Jun 2025 01:00:42 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: i7hwrBa04U//tx1PayXcVUMZG3Q4nx6X5TKylglyz5A=)
2: ruyaJPOfuuheWzXgHxMIwRIiRmI.roa (hash: dOziRNC4DuCftQxbewVCKgY2HoDJCSSxS8NFyfVWRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:ff:a0:39:3a:4a:9c:1d:ea:2f:64:58:fd:61:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Jun 14 01:00:42 2025 GMT
Not After : Jun 15 01:00:42 2025 GMT
Subject: CN=08d4219f6f2f9e505e15cf4db320cc6a0f938a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:29:64:a3:21:77:43:74:aa:4b:8c:80:5a:
dc:5c:d0:d4:ec:83:d3:dc:b8:fc:10:98:11:fc:17:
4a:52:a8:cb:c1:8f:2f:55:95:a7:7c:77:7b:1a:84:
44:b2:8e:a7:2a:7f:0a:7d:f6:d6:69:ab:9b:4a:31:
b1:29:78:77:df:29:93:9d:b0:54:6c:fe:e8:7c:10:
20:74:3d:33:d6:c5:02:05:e1:f1:c3:ee:c5:9c:a7:
27:9f:00:2f:c6:df:a5:23:dc:63:12:c3:e6:8b:2e:
c3:9a:b7:08:67:d3:c4:19:e7:d7:38:4d:5a:c0:32:
e1:73:36:30:ba:c4:85:0e:b8:e3:14:29:f2:15:fb:
e4:f3:ab:b0:09:8d:8f:3c:e3:66:75:7a:d6:e1:c5:
32:6f:15:a3:92:b0:21:ab:78:0d:c2:34:92:ce:52:
0f:7f:48:f1:5b:52:69:2a:a3:b2:a3:cc:6b:4c:37:
1d:3c:48:f7:52:7d:88:80:3a:2e:76:15:e8:11:60:
27:87:41:91:16:bf:cd:56:67:e6:00:69:2f:3d:95:
fa:85:bd:a0:7c:4f:f9:f7:86:67:9c:89:8d:8a:65:
64:09:17:17:ab:a2:cd:ec:d2:d3:38:ac:a7:28:2a:
46:d6:17:db:a4:2c:db:8e:31:fe:bf:d1:42:74:ae:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D4:21:9F:6F:2F:9E:50:5E:15:CF:4D:B3:20:CC:6A:0F:93:8A:1E
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4e:ba:71:80:9b:46:62:35:ba:dc:40:61:c3:a7:11:5d:8a:
f7:c4:46:72:f8:86:ae:6a:35:f3:3b:36:af:e6:71:9a:02:dc:
ca:6c:12:ba:96:58:0f:12:29:01:bf:a3:00:31:77:49:02:eb:
77:5b:a9:e5:3b:56:d5:fc:67:61:a0:90:54:c5:b9:3a:54:55:
aa:6b:cd:9b:32:8c:6f:f3:d5:e6:17:94:f3:fe:5c:60:a3:cb:
ad:a1:6a:40:3b:ea:be:c5:b2:a5:35:e0:f6:b1:08:45:e4:82:
52:ca:78:10:76:17:f9:4c:6d:eb:48:b1:23:4c:8a:5e:3d:19:
f7:25:00:b2:82:8b:f0:54:76:4b:70:96:59:65:ca:2a:e8:23:
2d:18:ba:b4:5c:6a:bf:02:dc:13:a3:b0:f7:bf:68:4d:bf:e0:
d0:be:49:1b:be:3c:68:20:7f:f1:94:32:dc:88:98:98:7e:5f:
9b:9f:3b:3d:71:f1:52:d4:ce:18:af:78:c7:e9:b3:f1:98:1b:
2f:0a:28:a8:b9:93:c7:80:f2:7c:8f:e7:9f:89:bd:bb:22:52:
16:05:70:df:ac:44:4e:47:c6:6c:85:e8:6e:55:10:8a:9f:ac:
cc:1f:2b:21:6a:dc:ff:b4:a2:c1:cf:3a:f3:a7:3d:6b:ed:17:
80:f6:cf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:41 2025 by rpki-client