Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: c4Vo03B3GSP48Ki/cvWFrmRF87U+LpveGiZrNqNbSg4=
Subject key identifier: 20:F2:E3:B0:AB:97:65:5B:AD:19:54:AA:E0:0F:B3:62:23:B5:75:AE
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 0197518F4520306940B42898F631297AF60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 101C
Signing time: Sun 08 Jun 2025 22:00:33 +0000
Manifest this update: Sun 08 Jun 2025 22:00:33 +0000
Manifest next update: Mon 09 Jun 2025 22:00:33 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: Jg2dQhzjyrKTcYmmBUHLHKzDatmyfUrakT3JMOwvYPE=)
2: wfCvw7M0UWwwmqgY4ndwt7Ezdvc.roa (hash: nadXDZSO5g66NQALk/0GLGlBJpZj5fLYUofWKpN1pZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:45:20:30:69:40:b4:28:98:f6:31:29:7a:f6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: Jun 8 22:00:33 2025 GMT
Not After : Jun 9 22:00:33 2025 GMT
Subject: CN=20f2e3b0ab97655bad1954aae00fb36223b575ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:4a:7c:83:78:93:6c:f8:0f:11:e0:48:50:
5f:c4:3d:96:09:ab:01:e4:37:da:8b:30:3b:9e:6a:
71:3f:a5:84:23:9f:2d:0a:06:06:e8:e6:c8:28:17:
ce:e3:06:01:62:e6:a6:47:a7:e1:db:11:6c:76:34:
20:07:b0:2e:1b:ee:25:32:7e:44:73:38:47:7b:49:
fd:21:31:0d:ce:23:63:e6:86:80:7d:cf:1c:3c:b4:
5a:a6:a0:ae:9f:45:44:16:00:fd:45:a1:f7:c1:6b:
5a:df:71:b2:9b:5e:77:ba:8d:61:1d:a4:d7:56:31:
0a:94:fb:2f:05:90:f9:a0:8f:45:4f:b8:38:17:9f:
02:7f:b2:cf:0f:a0:bf:0b:00:0f:04:ec:ca:dc:03:
f4:c1:29:cd:f7:57:b6:81:d9:43:2f:7e:45:6d:13:
54:73:14:24:43:7a:56:cd:34:45:3f:9c:6e:89:57:
a5:03:7d:74:5b:29:e3:fe:67:51:d5:bc:ad:fb:0f:
3f:67:db:e1:7e:4f:04:e0:3f:4d:04:95:58:5e:d5:
c1:a6:d8:50:36:51:df:c0:dc:2c:5d:ea:e1:e6:9c:
29:e1:9a:f4:88:9d:4d:f7:3d:6e:e4:d7:73:6b:c1:
1b:94:06:90:68:f4:5a:0b:93:e3:0e:c0:4a:09:6d:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F2:E3:B0:AB:97:65:5B:AD:19:54:AA:E0:0F:B3:62:23:B5:75:AE
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c3:cc:23:ee:e6:f4:f1:3d:b8:39:86:6f:08:91:07:83:90:
ac:57:1b:db:5f:dd:96:20:10:33:5f:cd:bc:29:34:9b:58:74:
ab:c1:72:bd:86:b8:59:19:d8:9b:8e:91:cd:d9:0d:5a:3a:18:
d6:59:e1:db:29:f6:eb:d9:de:71:9a:e6:6e:47:59:4a:3c:e9:
24:1a:4b:aa:c5:a2:56:47:71:c1:c5:f7:e5:23:0e:40:90:db:
e3:f4:34:13:61:c8:fe:77:90:b6:0e:b5:43:fb:57:e0:e2:70:
8a:6c:bf:cd:d6:79:78:0e:c9:78:00:af:c1:7a:ee:cd:3f:e2:
09:8d:66:f7:6e:81:0f:5d:2c:42:eb:7e:0f:6c:2b:02:e8:8f:
18:e8:c2:da:51:1d:6f:54:d0:08:17:fe:77:25:9a:ef:e0:cd:
f4:2f:44:6f:6f:a0:2a:76:fc:79:56:1b:77:5c:7a:b7:f3:ee:
b1:25:66:a9:07:0c:9c:c7:05:b9:ab:f1:a5:63:54:e2:51:b8:
fc:56:71:36:f3:dc:21:32:16:ec:db:d5:18:d2:b2:c4:2a:3a:
19:03:92:d5:f5:f5:2f:a1:be:8e:cf:d7:ce:aa:61:55:30:28:
1d:33:8e:ce:8f:38:75:76:14:a2:25:09:d1:bb:b6:00:38:75:
89:32:ac:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:05:08 2025 by rpki-client