Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: WA3XnZvulb2hu0lxctqkKCx8m3ErbJCjMOWmSc0XfaE=
Subject key identifier: A1:F8:AF:F8:B7:2D:73:A4:87:BB:E3:DD:BE:B3:4E:F6:47:FF:CE:C4
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 019848C0B7D572357941488EE9BFC7706033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 155C
Signing time: Sat 26 Jul 2025 22:00:46 +0000
Manifest this update: Sat 26 Jul 2025 22:00:46 +0000
Manifest next update: Sun 27 Jul 2025 22:00:46 +0000
Files and hashes: 1: 1-7jWzqH7wT1n-L8XkfK1kEabKfA.roa (hash: qrQpcX8LTv3WT8M/1yXwPjm8/udCR9jmZNcZtjA7oMg=)
2: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: aFREOV7BVB/Q4j76XjdmPssV19AnaSvVbJ6VXwWLRHQ=)
3: kSKdo2q0O6OXBsJw6ZYyr7eJXbs.roa (hash: IDSSisdvZb6ZBfLMmbXOfW59dICKAwsuQknOYmnY4dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:b7:d5:72:35:79:41:48:8e:e9:bf:c7:70:60:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Jul 26 22:00:46 2025 GMT
Not After : Jul 27 22:00:46 2025 GMT
Subject: CN=a1f8aff8b72d73a487bbe3ddbeb34ef647ffcec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:c8:40:e1:a6:1c:b4:35:cc:d4:33:f7:ad:
be:61:fb:09:ba:9d:45:a3:ec:7a:0a:5b:3d:53:26:
98:2b:43:ba:46:b1:7c:f8:5f:fe:d1:04:94:d2:bb:
90:2a:d2:25:6a:52:c0:9a:7d:78:f6:a7:5a:a8:36:
b3:80:e9:a9:bf:e2:ce:67:91:d8:2f:8e:bb:c9:52:
ef:55:99:e5:b2:06:88:56:44:b5:51:7f:2d:8e:d1:
4d:07:e9:d7:e8:04:6c:ce:c2:e0:52:00:c3:5b:4c:
da:91:e0:25:2f:dc:34:94:a2:33:98:1f:85:cf:08:
3b:9c:47:32:2d:44:9d:2c:36:43:a7:a6:aa:e8:b5:
a2:c2:62:ae:c3:47:30:54:97:ec:16:f4:3f:cc:3e:
88:17:ec:35:66:b1:f4:1c:6b:dd:cd:c7:7c:97:03:
c5:26:e8:0b:b7:d9:69:78:48:7d:47:bd:57:44:3a:
a8:90:ec:24:0f:6d:a6:2a:2f:7c:73:e2:cf:86:db:
d2:58:4c:01:6c:6a:ab:ac:b2:a3:52:22:43:9b:12:
13:37:e2:62:a6:04:62:ec:e0:13:48:85:02:c4:0d:
cd:91:f1:1a:fa:eb:3c:c2:92:ac:c1:64:20:42:e2:
8b:ab:07:0e:0f:e5:6f:4d:b6:93:a1:f3:cd:1f:3a:
a2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F8:AF:F8:B7:2D:73:A4:87:BB:E3:DD:BE:B3:4E:F6:47:FF:CE:C4
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8b:8f:ed:c8:a1:c8:ee:be:52:bc:b4:45:9a:18:a0:fb:e0:
53:b7:45:61:73:d4:05:f4:31:45:99:65:a3:69:b0:98:83:b0:
7e:5b:9e:68:2c:63:86:e0:20:30:11:9a:62:00:be:9f:b8:74:
2b:ca:7c:89:17:e7:a2:c0:5a:f0:c9:14:e1:9d:03:d2:2e:b9:
3f:5d:88:d1:09:dc:ad:c1:f4:9f:c8:fc:c1:ab:be:66:a2:2e:
e0:51:3a:ab:57:19:5e:06:74:85:1d:9b:61:8e:26:02:ce:fa:
af:ca:d3:d3:41:02:fd:f7:c6:a2:29:66:45:1d:44:79:22:b7:
e5:6e:74:f0:eb:17:34:9a:1f:7c:0d:9a:41:26:03:bf:25:d3:
f7:48:73:e9:af:a3:0d:c0:c4:87:b8:89:be:fb:2d:38:b8:bf:
b9:89:2e:8c:41:26:64:55:cf:38:28:48:49:47:cc:64:df:03:
69:c6:72:1b:d5:d6:d2:8a:d3:db:65:d7:e6:09:c1:5a:db:ec:
04:6e:50:14:0e:b7:f5:36:8e:d6:95:dc:85:08:2f:74:d2:08:
bb:a2:28:9b:5c:57:75:78:64:ef:ce:c3:05:d2:11:65:47:98:
c8:08:1d:79:2e:9d:5f:b1:3d:3e:d9:69:0d:88:77:07:a6:0c:
ce:92:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:17:13 2025 by rpki-client