Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: kPuUNXdceZziB8L3N3YsY31u+Qe8kGH38MykFtxtbR8=
Subject key identifier: 43:B9:C7:C6:F6:C9:FE:A4:EF:B6:3E:0C:7B:F0:6B:3D:37:B7:FF:4F
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 0197D0CE2FF8E7DAB94A24EA74C451E6B60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 04B1
Signing time: Thu 03 Jul 2025 15:01:02 +0000
Manifest this update: Thu 03 Jul 2025 15:01:02 +0000
Manifest next update: Fri 04 Jul 2025 15:01:02 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: bwRGKqRBQUf9iGMH+1bgNlydXjbrlMXJLCj/qJJ09WY=)
2: wLvB8cGiUEUZNSS38jCt0kGtb0w.roa (hash: m3dcBbH2bIeKi8Ap8eHL2CuPz3vf7Stl96ekMV6tjIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:ce:2f:f8:e7:da:b9:4a:24:ea:74:c4:51:e6:b6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: Jul 3 15:01:02 2025 GMT
Not After : Jul 4 15:01:02 2025 GMT
Subject: CN=43b9c7c6f6c9fea4efb63e0c7bf06b3d37b7ff4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:3f:ff:25:14:b2:2f:54:26:65:1d:98:b5:
6d:0b:74:b6:a8:83:13:6f:c6:3c:0a:61:48:01:85:
98:f8:f7:13:0a:a2:6a:7b:56:03:e0:6c:e4:a2:ed:
ee:8f:d3:a0:33:fa:f7:2b:63:4b:8f:b1:33:3d:8c:
94:4b:dc:60:98:ba:e5:b4:44:f0:9f:8f:1e:a7:fe:
fa:f3:46:ae:25:7f:10:33:79:ce:64:9f:3a:c6:cb:
40:c8:70:e1:28:3c:93:38:51:f4:dc:b9:8b:15:b3:
8b:30:9b:9b:ee:85:89:18:e3:9d:5d:e5:a2:94:cd:
23:24:6c:a4:bf:20:46:79:dd:60:17:fb:eb:29:59:
1e:79:07:6b:d4:64:b7:c6:7b:40:c4:5e:f4:2a:c2:
83:95:f8:41:dd:22:e4:23:22:df:97:53:d5:7d:3d:
b2:f0:a0:b9:48:1d:01:2b:62:2f:9f:c0:6f:92:28:
06:4b:15:0e:cd:c9:be:75:0d:15:10:5e:2d:36:c3:
e3:94:fa:df:c3:b8:3c:87:ca:9e:00:51:4e:30:16:
28:b6:4d:78:66:27:9f:7b:51:f7:85:bf:bd:d4:ae:
4b:c2:26:ed:64:c8:6f:3b:c2:be:3a:6c:e9:ab:9a:
e3:05:08:53:e6:d5:87:a3:1c:24:b7:98:60:8f:18:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B9:C7:C6:F6:C9:FE:A4:EF:B6:3E:0C:7B:F0:6B:3D:37:B7:FF:4F
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:e6:99:09:7d:39:bc:f9:d2:7a:a4:27:77:d6:90:06:c7:57:
4a:65:42:80:0f:c2:b2:e7:b6:f5:eb:d9:7e:47:ad:a3:56:c5:
b8:96:24:a5:64:51:57:45:d7:62:dd:d5:86:ad:30:b3:e0:b9:
1e:f9:50:de:4c:30:2e:e6:43:46:53:ea:a3:17:d5:76:a7:0d:
f7:6e:b3:5b:bd:4c:d9:ba:34:3a:65:b7:d2:17:1e:19:13:a1:
22:b4:ec:af:0c:d9:38:32:86:2f:83:6d:fd:f5:a7:38:db:fc:
70:50:72:ed:47:5f:62:6b:4d:cf:bd:21:1c:41:81:aa:4c:ae:
20:9f:4c:78:57:1c:d5:4d:fd:6d:f1:9d:f9:76:51:2a:a2:30:
d1:8f:eb:1b:18:43:f2:e2:1d:3d:5b:10:e1:19:74:cf:f2:b2:
78:ad:bc:b0:19:ee:7d:b8:5a:2f:ad:9b:d2:ef:d2:6a:a2:ae:
d8:2f:2b:5d:4a:fd:79:71:aa:a1:a0:f2:1a:d6:22:76:b6:0f:
47:72:1a:74:6b:ba:d0:e5:47:b7:a4:3a:83:75:d7:92:b8:c5:
63:13:63:4f:2d:83:93:16:d2:7e:38:d7:6c:4f:0e:eb:44:74:
48:da:3c:2d:59:f3:16:bc:0d:b1:98:08:7a:14:d9:1d:2a:6e:
c1:aa:c0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:48:22 2025 by rpki-client