Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
File: 3KLzDk5paSsbT-zrrpH9VgS97JM.mft (raw, json)
Hash identifier: gXHuCCxv8sA6ZxC4QOSiBsgeCjuL4LP5z8P34vZSDS8=
Subject key identifier: 8C:C3:F2:54:C1:62:95:88:30:60:F6:8C:C2:35:DD:5B:F4:56:A5:5F
Authority key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
Certificate issuer: /CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Certificate serial: 0197B6A1A97F18E0A5921128A4E7250F36E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
Manifest number: 056E
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: 3KLzDk5paSsbT-zrrpH9VgS97JM.crl (hash: sDyqcVQIDnhEbr3b8blNiaWh6uEDoVDVdF2UeSX+C5w=)
2: AJoKV4qloK-gv346yQRe9jE_1Lc.roa (hash: cy9XY0oo3u/4Yi8UZQJSoFS5/DHP0ILoCjdTHcKoQDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a9:7f:18:e0:a5:92:11:28:a4:e7:25:0f:36:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=8cc3f254c16295883060f68cc235dd5bf456a55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:d4:8d:75:17:18:d3:6a:24:b2:6c:fd:18:
c9:7f:41:92:77:d4:45:9a:82:7d:21:34:94:25:c9:
82:b9:6b:3c:1e:22:6c:63:e2:e8:95:f4:b5:db:09:
4f:79:96:9d:67:54:a6:97:99:bc:a8:bb:37:8b:5d:
5f:76:2b:44:33:77:88:f5:49:1f:40:4d:c2:a7:96:
eb:b1:e6:1d:52:72:01:e6:6a:10:e8:08:b8:5c:2e:
fb:76:31:e7:14:92:38:66:d9:6d:17:05:55:62:ee:
e3:15:f7:5c:fb:a1:ca:8e:c5:7c:fd:af:13:cd:46:
15:dc:49:71:18:cc:3c:31:99:4a:9a:e7:c0:12:07:
02:41:ab:67:ca:1e:82:78:22:9d:27:51:88:e6:36:
f4:5b:ef:b6:24:8d:50:54:ca:74:7d:1b:a3:39:e0:
e5:31:a5:52:78:84:a9:e3:b2:23:bd:b0:b8:b9:01:
bf:0a:9d:c6:c1:7e:18:a9:3c:f9:b6:c3:be:29:70:
10:ac:3c:33:dc:60:7e:b6:f7:5e:7f:79:24:14:cb:
b3:77:11:4b:a4:a6:e4:d8:3f:44:ea:3b:67:0e:57:
1b:20:d1:16:e1:a4:4d:f8:c4:a6:a4:59:8a:d8:18:
8b:1b:67:b7:0e:6b:b4:77:df:3b:fa:dc:c8:29:9f:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C3:F2:54:C1:62:95:88:30:60:F6:8C:C2:35:DD:5B:F4:56:A5:5F
X509v3 Authority Key Identifier:
keyid:DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:95:ad:e7:30:b8:6e:1b:d4:f6:6a:df:dd:c2:5b:cb:50:7b:
ad:14:5d:d2:cf:eb:32:de:19:fd:e6:11:b0:2a:03:44:08:bf:
5f:fe:59:3c:ed:cb:94:1d:5f:4b:6a:db:f5:82:97:0a:5f:35:
3a:b1:63:bd:dd:d6:c2:6f:c0:2d:35:91:9d:74:fe:b3:0b:41:
c6:3f:c4:aa:0f:d2:df:38:75:6f:78:c1:18:52:c5:17:b6:29:
80:33:83:cf:49:41:14:ed:d0:ab:3d:a8:ca:ad:98:a7:d2:ba:
96:f9:02:0b:be:7d:b5:05:5d:40:9d:5d:c3:b5:58:0e:d1:5f:
5e:a0:d7:ca:ef:6e:88:54:07:8e:3d:31:c8:c6:50:44:72:1f:
63:0c:32:63:ee:82:b7:8f:67:ab:26:52:a8:59:5d:b9:69:0c:
b0:bb:92:79:dd:7c:4e:6f:19:15:ce:de:c2:84:70:40:f9:13:
bf:da:31:90:63:94:6e:b1:53:84:3c:ef:3c:80:28:44:07:db:
74:e3:18:1d:10:89:37:bc:44:f3:c9:de:ae:21:05:4a:ee:1b:
27:73:c6:6c:ee:ab:b4:05:e4:bd:dd:84:89:91:97:17:4b:81:
75:bd:65:ac:be:a3:c4:78:7c:07:9e:c5:72:d3:44:22:00:77:
b8:d5:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:36 2025 by rpki-client