Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: fvxbnEq5hfPjqx/PymGECtb3uZVepwuy5Bz7AyR0UgE=
Subject key identifier: AF:E1:73:9E:55:84:98:2D:3F:69:6E:73:09:DA:A2:38:BF:43:81:14
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 0197B70E97E34E9BFDAC7998B7858B8307CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 15C0
Signing time: Sat 28 Jun 2025 15:01:16 +0000
Manifest this update: Sat 28 Jun 2025 15:01:16 +0000
Manifest next update: Sun 29 Jun 2025 15:01:16 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: PGchgv3IvmMN+0jaL/ABFSQ+b0jDRy6rHosT/ep9KZ4=)
2: XeTdM9cnm-nj4Gui4gyEqLrQLaw.roa (hash: byMWJNOsSPMVajbPUM5liOZkm9+BQbQeZEZJwK73A2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:97:e3:4e:9b:fd:ac:79:98:b7:85:8b:83:07:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Jun 28 15:01:16 2025 GMT
Not After : Jun 29 15:01:16 2025 GMT
Subject: CN=afe1739e5584982d3f696e7309daa238bf438114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:5e:ff:6c:bf:21:02:6b:d5:59:41:f1:bf:
7a:20:09:fc:1a:80:4b:17:c8:e3:00:df:96:fd:02:
ae:3b:ea:a2:01:54:3e:b6:c7:12:14:33:e5:09:a6:
fe:6d:8c:ea:9a:63:ae:01:fc:fd:c3:d5:b6:6a:ae:
6b:92:4e:44:6a:95:88:44:56:e2:8e:b9:53:3f:4c:
d2:c2:ab:7a:3f:a3:f1:15:25:8f:c5:28:27:76:2a:
79:50:1e:06:23:12:42:3c:61:3a:66:7d:3b:e0:8f:
1b:0e:b7:d7:4f:85:d2:71:4b:26:86:bd:f9:ac:8d:
92:b2:f7:84:64:c9:18:07:ee:8d:33:58:f2:61:b3:
72:a8:7a:88:b8:df:ed:a7:4e:d1:2c:5e:7f:fa:be:
a2:44:11:18:88:46:0d:b6:bd:aa:18:52:f9:b9:fb:
54:34:72:be:67:19:c6:1a:ad:20:51:d5:00:1e:e2:
93:f4:72:55:5e:d1:0c:6b:b3:d7:30:14:fe:d4:67:
29:10:f6:05:49:2b:b1:f5:d8:c3:ad:d4:0e:4a:a3:
66:cd:55:5d:dc:00:0f:8d:a0:71:5a:80:f7:a8:9a:
21:d1:3b:72:eb:1a:e9:af:9c:ed:80:cc:3b:c3:c6:
0d:51:c2:cd:b3:ba:9c:df:e8:cf:57:61:c0:3b:3f:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E1:73:9E:55:84:98:2D:3F:69:6E:73:09:DA:A2:38:BF:43:81:14
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1a:19:93:00:9a:10:4e:ac:3c:74:94:2d:44:85:af:1b:66:
99:dd:f8:f3:48:12:e4:78:e3:e5:f4:56:d9:f0:d6:bc:93:77:
c1:d2:0e:2f:31:7b:7a:0f:41:5a:a1:32:10:52:a2:06:25:cf:
a3:6a:d8:3f:4a:06:bf:0a:c7:1c:6e:dc:ac:ab:cf:79:a0:43:
67:f5:90:c0:66:c2:2b:88:66:a5:71:61:86:fd:3e:f4:b4:12:
db:52:ef:b7:53:2f:94:3b:29:23:e9:58:ef:1e:99:31:2b:b9:
a9:ad:d3:f2:44:55:da:c2:32:03:78:08:3a:f6:f6:6c:cd:0b:
83:98:63:78:a2:04:ed:88:70:0e:39:73:4a:49:23:8f:c7:b3:
95:fa:2b:f4:6e:95:b0:dc:bf:59:a6:b4:48:b9:83:23:2d:4f:
37:9e:08:2c:59:e3:8e:25:9b:cd:de:fc:4c:3a:5d:29:7a:91:
7c:c9:6f:7a:3b:e0:1b:e9:d3:94:de:b0:aa:a2:39:cc:90:5c:
3f:77:64:2e:a4:7e:5c:79:af:7b:09:85:6a:51:ec:bb:ba:71:
6f:92:87:50:90:72:e9:62:ce:23:ba:fb:3b:12:cc:d9:29:65:
22:5f:37:1a:47:dc:0e:8d:3b:72:b2:28:6d:9e:bb:a4:99:29:
87:07:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:54 2025 by rpki-client