Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: luOhca60+yscQBvINsylEUwhiBOqiRu3DYZLktBkMUQ=
Subject key identifier: 0C:CA:1A:87:8D:49:CF:76:DF:28:B5:0B:B7:6E:83:2F:D8:F7:EA:53
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 0197B5FC373D52F5A69F8AA82C69ABAE9BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 1510
Signing time: Sat 28 Jun 2025 10:01:34 +0000
Manifest this update: Sat 28 Jun 2025 10:01:34 +0000
Manifest next update: Sun 29 Jun 2025 10:01:34 +0000
Files and hashes: 1: 1-7jWzqH7wT1n-L8XkfK1kEabKfA.roa (hash: qrQpcX8LTv3WT8M/1yXwPjm8/udCR9jmZNcZtjA7oMg=)
2: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: D/OPUUC4ghimAaLXz8hv5eiQQvsCkLq5yd7sj6r9Dc4=)
3: kSKdo2q0O6OXBsJw6ZYyr7eJXbs.roa (hash: IDSSisdvZb6ZBfLMmbXOfW59dICKAwsuQknOYmnY4dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:37:3d:52:f5:a6:9f:8a:a8:2c:69:ab:ae:9b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Jun 28 10:01:34 2025 GMT
Not After : Jun 29 10:01:34 2025 GMT
Subject: CN=0cca1a878d49cf76df28b50bb76e832fd8f7ea53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:c6:a9:68:5d:a3:0c:75:6f:70:2f:9c:2c:
40:1e:20:a7:58:80:a3:fa:f1:25:bb:7d:44:30:21:
fa:b0:af:9b:98:79:07:c9:aa:b9:bd:26:d5:fb:a7:
d1:4f:a6:08:ef:06:53:d0:fd:a1:ba:d7:ba:20:f9:
3a:11:b2:1a:6d:1a:62:0a:7a:b9:da:00:a0:fc:e7:
86:88:59:54:af:4d:f1:fa:88:ae:56:96:6f:9b:a7:
0b:07:95:64:a9:6d:3d:55:4c:e4:93:1d:22:ab:92:
b3:a1:21:01:83:db:1d:bd:e8:1b:df:ef:72:06:fd:
59:19:0b:00:1f:1e:98:74:38:8e:04:c5:84:d1:ed:
aa:7c:29:ef:2a:f2:33:72:92:20:35:0a:3b:06:1b:
16:20:ae:51:81:29:27:70:2b:3f:f1:a0:06:85:c4:
a1:15:da:dd:d7:ee:7b:2a:d7:17:de:d9:55:16:3c:
02:5a:10:b1:53:1f:e3:86:9c:a4:2c:67:66:0b:45:
76:0e:59:3c:44:43:ff:2c:b9:ad:8e:f3:6e:2c:b8:
c1:42:dd:cc:0b:70:13:e0:07:a3:22:fa:2d:7a:11:
34:a2:9d:46:83:1f:6a:45:e8:70:08:04:78:58:29:
ff:2e:ca:f3:cc:90:ae:3f:c8:df:20:ca:50:99:62:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CA:1A:87:8D:49:CF:76:DF:28:B5:0B:B7:6E:83:2F:D8:F7:EA:53
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bd:b5:35:3b:68:48:7c:84:d7:f4:20:3b:9c:6f:3c:7f:e7:
e5:03:46:0d:88:95:dd:39:4c:bb:f9:f7:cf:eb:d4:dd:52:9d:
fa:87:e8:c6:c0:46:7d:e1:20:e0:08:93:ef:77:1b:37:1f:46:
06:b1:23:cf:db:fc:e8:da:0e:43:88:48:ec:63:0c:b4:bd:71:
75:3c:93:78:3a:4a:6a:a2:a9:22:06:8a:e2:9d:56:97:9d:93:
bd:90:09:af:16:78:f4:bc:a4:e0:be:bc:c1:21:d8:b0:d0:aa:
7c:c0:37:a3:2f:b4:8f:6d:ab:88:a7:59:8b:bb:ca:01:1f:da:
84:3f:d8:77:60:5f:b9:6c:40:e7:25:47:6d:1a:2a:c4:49:49:
c7:18:46:06:97:c3:9e:b7:0d:ab:4f:7f:8c:74:7f:e4:cd:7f:
fa:3e:0f:ec:69:08:d5:ca:6a:70:95:99:b7:f7:20:35:8d:e6:
e7:39:c8:80:73:9e:0e:fa:53:76:c6:72:8c:da:4a:2d:78:5d:
f7:c5:e8:66:15:1a:6f:7f:19:77:77:e4:e0:09:12:29:27:1b:
84:e9:cd:b0:c3:f5:e6:5c:61:ee:61:66:43:d5:fa:1c:3d:ca:
4d:62:4b:87:61:0d:f6:2a:8a:18:55:c0:9a:0d:5f:46:33:a3:
6c:2e:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:49 2025 by rpki-client