Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: y0MuxSR8dEdL+8oWZ/Va1HhiJZxaP9G1NHU//fIxVd4=
Subject key identifier: 12:4E:39:90:E8:7C:2A:5A:92:81:52:5B:4D:25:9E:B9:66:D6:74:84
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 0197B74507BD3D72A04E3AC2F568F892B6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 10C7
Signing time: Sat 28 Jun 2025 16:00:43 +0000
Manifest this update: Sat 28 Jun 2025 16:00:43 +0000
Manifest next update: Sun 29 Jun 2025 16:00:43 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: oJarXHFWz/pw2ktKgx8UGCDzUOtdc49iP9E75Skh8Y0=)
2: ruyaJPOfuuheWzXgHxMIwRIiRmI.roa (hash: dOziRNC4DuCftQxbewVCKgY2HoDJCSSxS8NFyfVWRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:07:bd:3d:72:a0:4e:3a:c2:f5:68:f8:92:b6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Jun 28 16:00:43 2025 GMT
Not After : Jun 29 16:00:43 2025 GMT
Subject: CN=124e3990e87c2a5a9281525b4d259eb966d67484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:10:4b:75:aa:e5:cf:bb:18:b5:a0:20:2b:
cb:ac:e7:66:ee:d9:3c:7f:5c:63:67:ee:5e:31:4b:
25:7c:f7:f5:0e:5f:f9:b5:11:75:5b:e3:35:30:bf:
5a:2c:7c:ad:c0:6b:84:8e:03:10:aa:bd:27:1a:95:
27:b8:48:96:15:75:e5:23:e4:2f:f5:28:15:d4:05:
78:d6:e9:d5:ba:4a:0f:d6:5e:7f:45:28:56:f8:97:
22:bf:41:7c:53:46:69:fc:94:d1:0c:d9:d7:0c:a4:
8f:2d:2c:dd:41:b2:21:9a:7d:ac:16:ba:fd:ce:c9:
7c:35:5b:98:c6:93:45:51:56:24:f8:11:20:7d:dc:
ce:6d:e5:8c:c6:11:b9:b9:ed:63:b1:27:73:d3:35:
46:9d:57:a3:47:14:9a:10:9b:b0:79:00:46:69:06:
24:b9:a8:70:fe:72:3d:86:f1:92:20:6c:47:ec:5b:
7d:34:c9:db:6b:80:93:ba:ed:6e:49:01:f9:2a:9d:
bd:f2:a6:0a:df:cf:9b:2c:ee:d3:e4:94:2f:b0:da:
39:68:5f:24:18:ab:fc:13:63:34:b4:66:9a:0b:28:
ca:37:fd:25:f1:d2:40:b3:ab:45:d5:68:78:0c:45:
88:13:fa:08:b8:3d:76:f2:eb:a0:1a:ce:21:06:62:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4E:39:90:E8:7C:2A:5A:92:81:52:5B:4D:25:9E:B9:66:D6:74:84
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:0a:9f:6e:46:4f:9b:2f:c6:f7:71:fe:24:5e:a3:16:e6:d3:
41:da:d5:a4:98:64:23:3d:50:7f:11:21:ff:d5:db:7f:67:5b:
c1:32:11:3f:7e:bd:a2:83:a1:d0:82:6a:2e:55:a4:9b:59:af:
5d:7c:76:03:51:80:05:78:fd:7b:06:6d:d0:a7:6c:05:e2:7f:
32:f8:94:54:c2:1c:e7:9f:c4:7c:1c:bb:53:d5:6a:f0:dc:ab:
98:4d:dd:bd:98:9e:bf:2e:a0:d3:ed:39:ef:ce:bd:f9:62:32:
29:04:b4:5a:dc:05:96:22:d4:12:87:2a:a3:56:58:0c:6d:fb:
80:3d:d3:2f:c4:7e:3e:6f:c1:93:e0:9a:38:2c:dc:94:ce:5b:
e8:52:19:83:87:98:fc:56:b0:d5:52:82:de:0d:98:3c:21:b9:
ff:2a:79:dd:88:8a:99:63:32:60:96:04:1a:bd:42:5f:f1:b2:
76:26:f7:25:93:d1:c0:41:c2:92:69:6b:a7:7b:09:e0:52:6e:
1d:85:24:d7:9a:f9:37:dd:fa:0f:d4:2c:f5:c7:91:65:1f:55:
58:fe:6f:bd:d9:32:78:eb:8c:e3:3e:cc:1a:9c:7d:21:8f:64:
b2:3c:d0:0c:43:67:ac:d2:1b:e9:07:44:c1:65:ca:24:af:43:
df:50:8a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:56:00 2025 by rpki-client