Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: BLfBVOBiwV9oWVGDzGBXTFusldqqlkUc+Df+7bcUNzE=
Subject key identifier: F3:AB:87:06:A4:D9:DD:DC:66:49:F6:35:F7:2A:0C:C7:7F:43:03:D6
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 0196C2A67CC1346A96E0D3B1C7A17FF2C484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 0FD2
Signing time: Mon 12 May 2025 04:00:12 +0000
Manifest this update: Mon 12 May 2025 04:00:12 +0000
Manifest next update: Tue 13 May 2025 04:00:12 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: TrrXA8EkcLOQw101lMDR04Pha7u0tdx0dSMz57CJM8A=)
2: wfCvw7M0UWwwmqgY4ndwt7Ezdvc.roa (hash: nadXDZSO5g66NQALk/0GLGlBJpZj5fLYUofWKpN1pZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:7c:c1:34:6a:96:e0:d3:b1:c7:a1:7f:f2:c4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: May 12 04:00:12 2025 GMT
Not After : May 13 04:00:12 2025 GMT
Subject: CN=f3ab8706a4d9dddc6649f635f72a0cc77f4303d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cd:d9:10:64:16:6a:f0:dc:f1:48:ec:8c:66:
02:88:a6:4f:ed:2f:29:70:11:2d:81:a3:69:c6:d8:
ef:b5:22:f1:17:fd:0a:d6:99:0a:fa:4d:38:8e:e4:
1c:aa:52:eb:f1:93:c9:5d:4a:16:ba:a6:74:85:f8:
b0:ec:61:da:f1:02:7e:4a:78:af:b2:19:4b:59:3b:
1d:97:49:9c:fc:e2:b8:2e:97:19:57:5a:e8:38:55:
a1:b1:03:d1:45:e4:c0:6a:77:84:af:84:ed:62:6d:
b3:99:1c:21:64:1c:63:d2:14:07:8b:0f:9e:2f:2a:
11:0c:bc:a7:ee:c0:e9:9d:4a:a2:fd:f2:ba:60:25:
dd:ae:e7:aa:7d:07:8b:94:4c:39:3d:c5:e6:b6:3b:
19:d3:e7:b4:c2:51:d7:53:96:11:5e:8a:bd:51:ad:
59:fc:38:1b:9a:ee:fb:80:b0:c6:02:75:a1:0f:d9:
7d:fe:04:e2:4e:1c:47:f4:3a:36:7f:09:4e:05:0e:
19:3b:39:08:76:ec:08:56:b1:1d:87:cf:9d:19:75:
bd:d6:66:c2:ce:7d:0f:8c:e7:97:9c:c0:5c:39:94:
91:35:d8:b4:9e:0b:f2:7d:1b:b5:c7:8f:96:8b:e7:
cb:09:30:36:52:d5:99:2e:7d:65:4b:c3:46:2b:9d:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AB:87:06:A4:D9:DD:DC:66:49:F6:35:F7:2A:0C:C7:7F:43:03:D6
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d6:e4:89:79:91:51:12:31:f5:e9:52:e1:d0:6f:fd:37:be:
b2:e8:8e:55:de:22:4f:93:51:44:4e:7a:8a:59:02:5a:0d:fc:
6e:b3:e8:67:b9:a5:78:84:31:fc:cd:53:bc:3d:ae:50:bd:05:
96:39:08:3b:e1:e8:0a:33:83:c2:40:60:e7:e5:86:10:da:5f:
f8:03:57:5a:52:58:46:3d:06:d4:df:da:a5:fc:df:7e:f4:c1:
f4:ed:93:89:50:59:b4:77:5a:9c:5c:07:10:f9:3a:e6:32:1e:
b6:81:81:5e:fc:92:1c:57:f4:f7:22:41:7a:8d:63:7e:b9:95:
d5:5b:1e:88:1f:7a:a6:6f:df:3c:87:79:2b:41:a9:eb:6e:57:
82:94:f1:02:25:5e:79:23:a6:a8:11:42:32:8f:d1:f0:3a:d8:
6c:2b:eb:07:03:ec:8d:f5:46:18:08:02:68:5a:45:06:0e:f5:
d5:2f:d4:50:9b:7f:d2:c2:24:f7:2e:e9:9b:d1:2d:51:fb:27:
c1:f4:fc:c5:93:b4:80:b1:dc:1a:8d:17:9c:ee:ef:bb:fe:db:
20:7f:24:d3:ea:e1:f7:23:02:2c:39:1e:13:00:e9:9c:65:0b:
62:ca:bc:8b:8c:b2:87:af:fe:8e:1b:12:be:f8:68:25:e4:4e:
ce:89:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:49:40 2025 by rpki-client