Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: x/xCOp5ss9dbmKxnAyE2pW/EmdZjpPC58iwVvOb0bkY=
Subject key identifier: 1B:A8:64:1E:48:B9:A7:1F:7D:12:BB:9D:67:1D:92:C2:04:A4:9F:87
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 0196D99C4E7D7770566D6F01567337766AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 0431
Signing time: Fri 16 May 2025 15:00:21 +0000
Manifest this update: Fri 16 May 2025 15:00:21 +0000
Manifest next update: Sat 17 May 2025 15:00:21 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: 5CScpi0ZdI1GcWpciQaHW/DZLSVN1p60T37aPNEG4uQ=)
2: wLvB8cGiUEUZNSS38jCt0kGtb0w.roa (hash: m3dcBbH2bIeKi8Ap8eHL2CuPz3vf7Stl96ekMV6tjIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:9c:4e:7d:77:70:56:6d:6f:01:56:73:37:76:6a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: May 16 15:00:21 2025 GMT
Not After : May 17 15:00:21 2025 GMT
Subject: CN=1ba8641e48b9a71f7d12bb9d671d92c204a49f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:cd:cd:dc:73:20:19:88:57:11:99:1f:9e:
11:9b:3e:28:75:06:fb:84:d1:f7:14:87:f5:ee:ac:
2a:82:62:71:23:a4:41:38:3e:9c:ab:63:c2:2b:2a:
c3:b9:a1:0d:71:b8:b0:6c:23:e9:e5:5f:03:e3:9e:
21:62:41:18:9d:1e:65:12:73:63:f9:74:09:e5:c8:
aa:f5:5b:45:ed:48:27:95:5e:bc:f6:4a:97:8d:aa:
9c:7d:18:35:8d:72:b2:e8:ad:0e:51:25:35:1f:5b:
8d:1e:f0:6d:5f:a2:6c:9a:45:c2:d0:f0:63:6e:39:
f3:dd:09:0d:62:a8:cd:53:2c:96:74:1e:d6:b2:8b:
9c:27:2a:aa:31:07:9c:e2:86:5f:36:08:b0:b0:ee:
63:e7:ba:b8:c7:61:b2:3a:ed:90:a7:8c:b0:09:4e:
1b:c0:cb:49:8c:db:4f:98:39:c9:64:48:06:10:83:
e8:d8:67:2f:46:28:e3:44:99:41:b1:eb:9e:75:bc:
07:97:c9:7c:34:87:aa:54:03:89:65:a8:61:ba:8f:
95:f7:40:65:44:a6:e1:d3:9e:c9:26:8f:29:da:9a:
88:3f:1a:03:a0:c3:e7:f8:5d:99:23:84:bd:a8:4a:
1a:c9:91:24:a4:bf:2a:e4:ad:ee:af:d4:ed:aa:2a:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:64:1E:48:B9:A7:1F:7D:12:BB:9D:67:1D:92:C2:04:A4:9F:87
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b9:b7:ff:a5:b0:3d:ba:f2:62:2e:2d:40:f8:d6:87:03:69:
45:2e:b6:31:5e:90:55:06:8f:73:18:45:35:9a:0e:3d:87:ef:
c8:46:23:b4:bf:3e:52:45:34:e4:e5:c7:ca:1f:08:0b:71:b8:
92:5b:47:18:eb:52:2e:68:13:11:97:70:0e:b3:6f:b8:d8:8b:
dc:0c:4c:85:62:26:c8:a0:9f:97:b9:32:8e:88:01:3b:59:47:
64:48:fc:9a:de:67:8e:f5:d5:2d:e2:4f:f3:8e:3f:94:c9:03:
29:50:2c:11:73:79:ee:44:5b:41:e6:d0:4f:4d:dc:c3:49:69:
66:94:34:87:80:c6:db:28:2a:a4:89:31:c1:ce:60:73:a2:55:
7c:27:c2:7a:f0:d8:6a:c5:6b:13:08:0b:f1:70:d4:a7:ea:4e:
60:47:69:a3:a5:77:3a:1d:02:16:a9:bd:2d:2e:1a:35:d8:65:
d9:65:0e:80:71:91:b0:25:77:56:26:30:cc:39:78:4e:9f:f4:
38:38:d0:51:9e:bf:e7:19:84:7c:df:fd:4e:33:23:d6:86:75:
09:9d:dd:2a:4a:61:78:23:de:59:06:0d:33:8e:68:2c:4a:db:
0d:86:5b:bd:37:c0:3e:bc:85:0f:b6:ea:de:ba:60:18:59:b8:
84:a9:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 01:27:42 2025 by rpki-client