Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: 6U/tNRkUdmGAvcn/iT4D0R+foqSwtNTDWpz2SvQ+Y1s=
Subject key identifier: 64:F0:2E:1B:A7:99:51:58:0E:2B:00:D3:AD:4A:8D:16:75:4F:FD:69
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 0196B8231929B3E45A55A18A3231A91A5832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 153C
Signing time: Sat 10 May 2025 03:00:29 +0000
Manifest this update: Sat 10 May 2025 03:00:29 +0000
Manifest next update: Sun 11 May 2025 03:00:29 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: zNN9d20KB0JnnUVXhs6W1eoGiie6Z97Tye8YQwn4VoI=)
2: XeTdM9cnm-nj4Gui4gyEqLrQLaw.roa (hash: byMWJNOsSPMVajbPUM5liOZkm9+BQbQeZEZJwK73A2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:19:29:b3:e4:5a:55:a1:8a:32:31:a9:1a:58:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: May 10 03:00:29 2025 GMT
Not After : May 11 03:00:29 2025 GMT
Subject: CN=64f02e1ba79951580e2b00d3ad4a8d16754ffd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:b8:3e:40:6e:d2:b5:b1:b9:2b:f0:2e:e9:
0d:75:1b:9a:93:68:a1:dc:fc:73:e3:6f:71:91:d3:
94:8a:44:ef:9f:91:50:ba:91:bf:f8:2f:40:38:a4:
d9:1a:61:d2:ee:03:18:d6:fd:f5:98:c6:60:d4:94:
9b:a4:32:91:2f:c9:96:29:dc:17:bb:de:39:d5:a8:
53:e0:9a:a7:5b:93:e3:15:b8:70:13:c6:cd:90:fa:
af:55:ff:85:5a:dc:b0:ba:22:19:3e:b1:52:cf:8e:
46:15:28:b7:29:6e:e7:59:f5:3b:ca:d5:f6:01:47:
85:fb:43:9c:19:3d:6a:c0:67:5e:e8:66:06:e4:59:
b6:92:fe:13:6c:f2:c9:c3:03:ff:83:24:8e:9a:e7:
25:c8:52:50:85:5e:ac:a3:fa:45:49:38:b4:c5:35:
79:25:a5:9e:eb:92:a7:e4:8a:af:fa:ba:9e:04:b3:
c5:5e:8d:20:31:91:64:5f:e6:c0:f0:ea:bf:43:49:
87:ff:a6:16:e3:4a:01:09:4f:34:1d:02:9f:69:8c:
07:b0:b3:42:2f:10:a6:60:7f:84:a2:0d:e0:cf:1d:
b8:41:71:99:db:3e:78:e1:2e:e4:6e:b7:24:6b:55:
9c:2d:d5:b8:de:48:8b:c8:90:e0:98:33:c3:9d:fc:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F0:2E:1B:A7:99:51:58:0E:2B:00:D3:AD:4A:8D:16:75:4F:FD:69
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:59:d6:19:8d:7d:76:70:70:9f:9d:6e:b7:5d:38:2c:5e:01:
89:bd:d6:d3:12:c7:84:ba:ee:5c:e3:86:fd:72:fa:09:8c:81:
2c:82:03:0d:78:c1:6f:fb:dc:2e:c7:28:ff:69:88:3b:9f:0e:
c1:01:ed:a7:ff:ab:e0:f5:c6:5c:37:0e:d5:91:87:99:cf:11:
9c:54:40:4d:ae:f1:d9:6e:f2:67:79:69:12:9d:74:32:dc:ed:
56:72:1d:41:fd:f9:fb:37:ca:c3:1c:22:03:86:15:44:4f:15:
d8:81:f9:44:71:17:6c:64:32:32:61:44:bf:f9:1b:41:8f:0a:
a2:69:2f:ac:f6:d3:df:2c:bc:d6:57:9a:0a:65:08:a4:3c:93:
41:53:69:92:e9:37:3a:80:4c:00:d6:a6:f0:61:78:7f:8b:b0:
92:c1:b5:ed:cf:2d:81:4f:d5:1c:f3:09:5b:31:09:67:27:05:
a0:1f:3e:50:fa:d6:7e:1e:9d:43:16:40:0e:c8:7c:d5:5e:7c:
3e:b6:7b:05:dd:e6:49:c6:9d:15:ab:48:e2:49:ae:1b:08:16:
4f:ac:d1:83:22:7b:af:0a:11:fd:cd:5b:d7:5c:38:7a:a0:ae:
80:03:73:97:6e:77:fd:bf:81:56:e9:2f:12:da:bf:a8:20:03:
60:40:d2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:48:17 2025 by rpki-client