Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: Esv5xG/I6KYiPwxE6s89pAxLgJPGRJ6B5tTU4d2aEkQ=
Subject key identifier: E2:E2:1F:C7:9A:7D:ED:69:DB:7F:6A:1F:18:65:40:A0:96:C0:87:91
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 01965492B13386E32CC8E63F88A1CF309648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 0F99
Signing time: Sun 20 Apr 2025 19:00:21 +0000
Manifest this update: Sun 20 Apr 2025 19:00:21 +0000
Manifest next update: Mon 21 Apr 2025 19:00:21 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: dqXxkjnytKxCiprsxx9X0ps0uRoAvkYpWX2AywaPxlo=)
2: wfCvw7M0UWwwmqgY4ndwt7Ezdvc.roa (hash: nadXDZSO5g66NQALk/0GLGlBJpZj5fLYUofWKpN1pZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:b1:33:86:e3:2c:c8:e6:3f:88:a1:cf:30:96:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: Apr 20 19:00:21 2025 GMT
Not After : Apr 21 19:00:21 2025 GMT
Subject: CN=e2e21fc79a7ded69db7f6a1f186540a096c08791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:49:65:86:f5:3e:76:03:78:9f:29:22:9c:4f:
27:f6:77:31:d7:b5:84:7d:f7:ec:c1:b7:af:9e:c5:
2a:ec:4f:12:40:bc:b7:8c:95:c5:7f:83:7d:f0:7f:
80:3f:60:ed:f2:57:b2:56:30:98:bc:55:f4:4d:3c:
2b:a3:88:4b:de:db:60:be:5f:1d:08:22:53:6f:8f:
11:40:c7:dc:33:37:6d:c3:bc:d1:0f:fd:b0:33:63:
a3:78:20:43:d9:3b:ef:7d:e1:5e:cc:de:42:20:e6:
df:1c:37:c8:42:85:c8:f3:56:5b:a4:a4:1c:90:6a:
a0:cd:3d:2c:2b:fb:57:f4:ca:3a:23:d9:89:8e:92:
fb:38:56:cc:0a:99:eb:59:b6:38:66:ca:a0:7c:f5:
d9:00:30:e5:71:38:7e:d5:c9:81:e1:90:f9:6c:53:
dc:20:b2:c5:aa:ee:a9:83:c8:4f:12:14:83:5c:0d:
ce:c5:82:bf:ea:58:65:76:74:0e:08:bd:f4:00:b5:
7c:33:74:a2:7c:32:cb:fb:c0:eb:02:46:bf:7e:47:
b0:75:43:b6:40:ed:6d:f8:a5:c4:58:50:63:e4:13:
5e:b8:09:74:a6:20:1d:b0:5f:8f:28:76:68:57:76:
d6:0c:ac:f8:a5:91:9b:6b:98:87:68:d2:bc:0b:b2:
eb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E2:1F:C7:9A:7D:ED:69:DB:7F:6A:1F:18:65:40:A0:96:C0:87:91
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b3:8d:05:d4:88:79:03:e4:35:66:ff:39:c0:1a:84:b5:82:
99:da:db:a5:9c:b4:f6:29:15:76:54:21:91:a8:c0:b0:c4:1f:
3d:0c:ed:8a:3f:6c:80:0b:e5:ae:84:d0:83:18:c8:ac:15:ef:
eb:7f:1e:d1:b7:55:e1:fb:78:b0:ce:a5:02:f8:18:be:9f:98:
09:c0:13:7c:f3:86:37:e8:82:05:27:2a:70:8b:29:49:a7:4b:
50:07:f0:a9:a9:8e:de:8b:c8:be:31:75:53:c6:a6:3b:39:55:
21:8e:55:68:7f:68:d8:7b:92:3a:f3:43:da:40:84:fb:92:8a:
1f:c4:2e:71:93:83:82:e5:0c:80:61:51:0d:0b:77:62:76:10:
39:67:65:df:c9:de:5f:3a:5f:c9:23:fa:4e:0b:00:61:c3:50:
b6:1d:77:28:08:05:72:0c:5a:82:6a:ec:f8:f7:e2:f4:58:b1:
ba:ba:98:fa:f1:2a:ae:20:08:02:de:c1:59:94:7e:cd:d8:2f:
8b:0e:39:1d:a5:5f:57:55:e5:18:7f:b7:59:38:41:a3:c8:ed:
38:73:16:cb:b0:17:cf:95:e9:b3:a8:63:52:12:cb:5d:27:74:
42:b0:a5:7b:f0:2a:d0:e1:95:59:37:6e:da:81:db:3c:c5:54:
7a:a4:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:53:50 2025 by rpki-client