Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: n7HiuS6lpt/Wyka4ipRBom6LRwgPbpiH1mayed6aQgA=
Subject key identifier: 7A:82:F7:04:1E:76:88:A3:55:45:A7:48:FF:00:D5:4D:40:52:E8:16
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 0197B5FBCC2A7978FE08D3ACD0D9ACE85B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 1050
Signing time: Sat 28 Jun 2025 10:01:07 +0000
Manifest this update: Sat 28 Jun 2025 10:01:07 +0000
Manifest next update: Sun 29 Jun 2025 10:01:07 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: cbvV+X35U7nKnZkWDMzALfNLGWVhNbOJMSBnPQy1ZKQ=)
2: wfCvw7M0UWwwmqgY4ndwt7Ezdvc.roa (hash: nadXDZSO5g66NQALk/0GLGlBJpZj5fLYUofWKpN1pZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:cc:2a:79:78:fe:08:d3:ac:d0:d9:ac:e8:5b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: Jun 28 10:01:07 2025 GMT
Not After : Jun 29 10:01:07 2025 GMT
Subject: CN=7a82f7041e7688a35545a748ff00d54d4052e816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:e6:4c:c4:42:ca:5f:aa:fe:63:74:19:08:
58:9b:9b:8c:b1:0c:76:c1:31:6f:b4:a5:02:c7:99:
16:ec:08:c8:ee:02:8e:3a:dd:97:8a:6f:2e:92:0a:
0c:b2:9e:46:e0:13:93:05:dc:33:10:01:ea:e1:a4:
eb:9a:02:c6:fc:85:cd:a1:9c:8e:47:f6:44:88:42:
9c:37:81:4d:23:b4:d5:63:1e:c9:d0:6a:f1:b7:2c:
cf:56:1e:35:f4:41:ea:66:04:70:ae:40:2e:34:fd:
9d:6d:3d:11:01:e3:16:6f:75:00:39:98:72:c0:d0:
39:b1:33:62:7c:24:f4:96:ff:6b:b5:4b:85:7c:04:
b1:9f:97:3b:8d:dd:15:40:62:84:21:dc:b5:39:1e:
8d:68:75:56:0f:d8:e2:8b:db:c9:5e:e1:c7:c8:99:
90:35:c2:3d:1c:91:a7:66:35:a0:cf:2d:dd:6e:33:
5e:6c:71:3d:2b:69:4f:1c:34:22:58:5c:56:9e:99:
97:7e:fc:76:39:a7:5f:67:3e:0b:e3:f3:cc:51:76:
03:f6:33:d5:13:67:21:8a:98:3e:9b:9b:13:2c:39:
b7:4d:6a:cb:3f:56:78:86:a3:d8:f4:5f:02:d8:90:
85:3c:79:e5:07:4b:0c:9c:48:92:f6:7b:1e:d8:60:
0c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:82:F7:04:1E:76:88:A3:55:45:A7:48:FF:00:D5:4D:40:52:E8:16
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:01:94:de:11:f9:0f:51:89:59:7e:b3:ca:5c:84:a3:3b:eb:
d4:6e:82:49:5c:d4:5f:0c:9b:af:e2:2a:53:c6:bb:3b:ba:a4:
5f:1a:5d:d7:3a:2d:8c:bf:e8:3d:e3:1f:42:4e:e0:a1:ff:57:
fc:9e:42:1b:b1:6c:f7:e4:49:e2:2f:79:80:91:ab:46:b4:0d:
14:a7:b1:43:e7:32:10:be:08:99:f2:89:68:36:4e:f2:48:34:
09:6d:2b:d9:b9:04:ba:90:c4:8a:b0:af:72:12:03:08:11:f9:
fe:b8:6b:f2:fc:a4:03:67:4a:e8:6f:7b:11:de:06:b7:11:0b:
ae:eb:ef:2c:b7:56:37:f0:95:b5:5d:2b:a5:5d:97:a0:02:0f:
67:c0:cd:21:b5:4d:5d:b3:16:77:c0:3e:78:3e:73:94:26:2a:
7f:60:73:f6:f4:28:b2:c2:8d:f3:dc:ef:18:d8:74:50:c7:b2:
4f:e2:d1:da:61:03:2d:49:85:2b:c0:62:ff:fa:ed:ac:b5:18:
44:4b:93:b7:f6:00:77:97:5c:46:9d:f4:24:10:36:cc:5a:84:
79:94:54:34:a7:0a:c9:a4:ca:80:8a:8b:b2:1b:02:dc:93:40:
91:f6:64:8c:ed:15:a1:1e:5d:e2:d6:d2:d6:54:9e:da:5c:f6:
16:cd:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:11 2025 by rpki-client