Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: PWEbBRDDYC7GRt5k/0NuSii8gNlPwF1edGs1Oh/Nf1M=
Subject key identifier: 74:D1:45:C9:F9:0E:B1:4B:D0:10:CA:CA:75:DC:46:76:60:AC:D2:A9
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 01984C9CF2AE17136F784B2181A6BA4674DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 109E
Signing time: Sun 27 Jul 2025 16:00:10 +0000
Manifest this update: Sun 27 Jul 2025 16:00:10 +0000
Manifest next update: Mon 28 Jul 2025 16:00:10 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: E88TGDnopIq1e3tfed0jdQU/ZHVU5qwZLQ+LM//SWyM=)
2: wfCvw7M0UWwwmqgY4ndwt7Ezdvc.roa (hash: nadXDZSO5g66NQALk/0GLGlBJpZj5fLYUofWKpN1pZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9c:f2:ae:17:13:6f:78:4b:21:81:a6:ba:46:74:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: Jul 27 16:00:10 2025 GMT
Not After : Jul 28 16:00:10 2025 GMT
Subject: CN=74d145c9f90eb14bd010caca75dc467660acd2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:b4:00:4d:3c:0e:39:0e:90:d0:51:73:2c:
33:cc:be:dc:e5:56:80:2f:7b:1e:eb:e9:54:eb:6c:
c1:98:65:86:56:58:19:7d:a2:8b:8a:7c:b2:94:a6:
ae:4d:ef:b8:e9:5f:70:e1:d3:b1:fe:e6:24:05:6c:
7d:ac:9a:d0:c9:2f:64:d3:31:6b:41:a0:af:e8:0a:
7e:8a:83:ef:1c:32:fe:66:48:66:74:2b:33:14:06:
12:9e:b5:f3:67:c3:d9:c8:02:08:7a:cc:a1:ee:94:
dd:2f:f5:93:2d:55:bd:90:6a:44:b2:88:28:82:93:
7e:cb:02:d9:a3:e6:21:e6:d7:60:86:42:53:ca:ce:
b0:14:d1:df:cb:fc:8a:8f:27:e0:19:64:4c:03:13:
99:8f:f9:4e:78:98:00:bc:fd:4f:f4:9b:7f:c2:8d:
7f:0c:85:a1:69:ab:b3:a7:51:e8:77:65:4a:61:aa:
41:b4:8b:8b:3e:56:70:fa:ed:1f:eb:f0:7c:ad:86:
84:b4:41:f5:02:8b:eb:82:b6:88:7a:65:ea:f0:ea:
f0:30:8b:cd:df:9e:97:4d:bb:73:42:8f:f0:35:65:
3a:36:e7:36:0f:17:b5:59:c9:2e:bd:3d:e2:4d:8d:
0c:fb:98:70:e9:5f:d6:4c:08:da:b2:31:b8:fb:6b:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D1:45:C9:F9:0E:B1:4B:D0:10:CA:CA:75:DC:46:76:60:AC:D2:A9
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ab:82:f4:e3:30:ba:36:56:2a:48:f9:f4:f4:96:23:a6:1c:
97:e1:61:e1:b5:4a:d6:08:5d:b0:85:00:2b:4b:9c:b0:0a:c9:
f8:fa:86:9d:00:c7:ae:f9:80:3e:1e:ca:c0:e3:63:08:7b:9b:
81:64:66:98:8b:3b:d8:e3:03:05:18:ef:ab:25:63:c1:02:fc:
fa:20:67:ea:ef:70:e1:e7:bf:59:f3:68:d5:95:07:d2:a4:58:
f1:44:76:c3:6f:97:59:ae:ce:da:19:c7:f4:8b:11:81:7f:6c:
bd:90:f2:67:91:8b:c5:c8:54:53:3d:c0:1d:cc:ea:44:47:86:
de:68:a1:07:d4:e5:e9:c8:6d:2b:90:74:9e:c8:09:50:1c:8e:
57:74:fd:2c:af:48:cc:6a:4a:98:d1:b3:51:e3:40:bd:7a:0f:
40:88:bc:78:a9:96:f7:30:62:9b:51:8d:d0:4e:72:7b:d8:f6:
03:12:23:9d:a4:f7:44:f5:33:f3:91:99:e1:bd:d2:ca:21:7a:
5c:b1:43:c2:d0:fa:ed:c9:de:f0:64:16:b2:88:4a:84:b1:e7:
51:8d:62:66:34:41:20:20:4c:26:b5:d1:06:b4:2a:1b:ad:c2:
f3:4b:14:c1:14:a9:26:9f:31:58:77:75:e5:d9:c4:64:0a:8b:
f9:f1:2a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:11:15 2025 by rpki-client