Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: Y2IQ76fOVWR7UUrcXOAqm1uLncuDo9JCTRBKxMXHsG4=
Subject key identifier: A4:8B:5F:A8:7E:98:E1:96:C1:15:C6:BD:D8:F4:47:44:77:F3:04:2D
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 0198733D7749A2A849AB3CD50C3771886CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 1572
Signing time: Mon 04 Aug 2025 04:01:04 +0000
Manifest this update: Mon 04 Aug 2025 04:01:04 +0000
Manifest next update: Tue 05 Aug 2025 04:01:04 +0000
Files and hashes: 1: 1-7jWzqH7wT1n-L8XkfK1kEabKfA.roa (hash: qrQpcX8LTv3WT8M/1yXwPjm8/udCR9jmZNcZtjA7oMg=)
2: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: BRVyRNad060k646x5m40ReGkbVvSzLPHv12n2gbCiYw=)
3: kSKdo2q0O6OXBsJw6ZYyr7eJXbs.roa (hash: IDSSisdvZb6ZBfLMmbXOfW59dICKAwsuQknOYmnY4dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:77:49:a2:a8:49:ab:3c:d5:0c:37:71:88:6c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Aug 4 04:01:04 2025 GMT
Not After : Aug 5 04:01:04 2025 GMT
Subject: CN=a48b5fa87e98e196c115c6bdd8f4474477f3042d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:7c:d3:b6:dd:30:c7:6c:22:50:4c:9c:2a:
f4:9f:e6:bc:08:4e:c5:9a:ae:57:f1:16:d2:f4:26:
9f:4d:9c:bd:83:e8:28:1b:8e:8c:f7:aa:52:58:37:
cd:28:31:84:d8:72:fd:15:ca:f0:bb:8a:22:3e:a0:
95:e0:34:1b:11:3a:31:84:de:b3:61:7f:4d:a7:56:
b4:bd:e7:00:01:5a:40:37:db:56:f4:95:1f:20:d5:
34:3b:cd:98:8d:11:a1:58:9e:41:2e:6f:74:9b:18:
65:36:3d:0b:e0:3b:c6:e4:db:d6:17:13:74:0e:06:
f3:ce:33:70:9f:c4:02:ac:6c:d8:b2:76:c0:c8:da:
4c:fa:39:4c:c9:2b:c4:ea:72:44:89:07:26:fc:f5:
42:b9:f5:03:2b:12:8b:b4:24:e4:e2:00:f0:c6:03:
28:c1:55:60:e0:28:c0:0a:81:a4:2b:a2:0a:97:b8:
9c:c8:00:6a:33:c4:c4:3e:1a:a3:a4:90:b1:53:94:
29:21:f5:8a:36:6b:e4:f6:f9:ce:4f:40:61:be:2a:
07:13:5a:a8:15:84:4d:36:3a:d0:75:31:da:b8:e5:
a8:1c:e1:53:96:25:03:df:d7:c9:f3:01:11:61:59:
8c:5c:0f:58:d2:f1:ce:a2:8d:24:a4:0e:3a:b0:62:
f4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8B:5F:A8:7E:98:E1:96:C1:15:C6:BD:D8:F4:47:44:77:F3:04:2D
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4f:76:13:35:8b:9c:f4:2b:ad:82:09:db:67:60:9b:80:6d:
7f:11:ce:24:f7:59:ce:86:2c:04:5d:5f:80:c2:6f:f2:3e:d9:
7a:ef:ae:0e:bb:59:47:af:2a:8f:53:45:40:c8:65:bf:ec:a4:
cc:3d:22:47:43:69:c8:86:f4:71:82:d5:7c:a1:23:da:db:bb:
6e:e5:e7:23:5d:5f:c2:7d:92:5b:b8:02:c9:36:99:fd:c3:d2:
9d:27:fa:0a:a3:d9:1f:42:1a:bc:1b:da:1f:f2:a7:a2:62:75:
e1:f5:3d:9d:22:10:77:cf:bb:c2:b7:f6:7e:99:8a:c8:44:7a:
3e:4f:ef:e1:a8:22:20:49:75:c6:7e:d2:e1:4d:1c:49:c4:e0:
cf:86:52:ef:9d:89:e2:d7:52:b2:0f:68:e4:54:99:93:8e:82:
a4:c3:91:9c:d4:8d:09:3b:2b:46:24:08:28:4e:d0:e7:da:ea:
db:ce:41:a6:90:1f:c7:57:c0:02:23:8b:cd:f2:0b:0e:c9:fc:
14:f4:02:2d:d4:5c:6d:82:fe:ff:e7:cb:5d:53:54:28:6c:da:
ab:96:f3:58:f4:38:34:9c:c0:5c:0a:e2:31:a8:aa:24:57:c7:
26:c5:dd:a3:84:6a:e5:a9:95:5d:b6:83:38:05:a7:cd:82:74:
21:3a:d7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:31 2025 by rpki-client