Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: 4WTmFOASw5wMSIZCbueNy/1ynswIbh42zhyglikNKWI=
Subject key identifier: 43:D9:B1:47:D9:53:CE:36:20:1E:96:E3:AE:AD:F8:4C:17:B3:E6:0C
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 0196C04ADA49FDF1BC14D5C4158EDBC62C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 10B5
Signing time: Sun 11 May 2025 17:00:53 +0000
Manifest this update: Sun 11 May 2025 17:00:53 +0000
Manifest next update: Mon 12 May 2025 17:00:53 +0000
Files and hashes: 1: NAckqIZ_cv_U6_Szqr3B6DGq59M.roa (hash: 5rHZMnA6S2Xi93gDSPJjpPOy7VNVc2TB29KreGnvwEQ=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: wWaNcINBgZCRq1LO/B4Vzg4Cz8B0S/bemtzFFJCizmQ=)
3: hPRhT7rkMq9JixnaKQg6MXIa6w0.roa (hash: 47HMse7zHITwF5pv9mb9OCNw4X4BUCmXu1B+299Il/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:da:49:fd:f1:bc:14:d5:c4:15:8e:db:c6:2c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: May 11 17:00:53 2025 GMT
Not After : May 12 17:00:53 2025 GMT
Subject: CN=43d9b147d953ce36201e96e3aeadf84c17b3e60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:93:3c:08:41:7f:9f:6d:69:6f:40:98:0b:
d4:bf:a4:d4:79:e1:8a:3e:a2:97:a3:f8:f3:e3:4d:
01:c7:7a:68:9e:eb:f9:a4:2c:2e:8d:46:8d:98:4b:
14:6f:aa:d3:1b:0d:23:06:c1:1d:04:83:0a:a0:63:
0e:37:06:93:55:20:65:ae:cd:dd:22:01:a3:ae:a8:
b2:d4:62:3b:16:07:95:c4:4c:55:0f:4f:12:2a:9f:
30:d5:9e:70:ed:c7:94:b6:a2:3c:51:f1:d0:68:97:
48:99:e7:0a:fc:17:f8:84:f9:f1:20:9e:b3:ab:40:
fb:b5:ab:89:ab:65:78:9f:fd:91:5c:e7:71:94:11:
06:d4:41:30:a1:0e:15:d6:18:6c:e1:62:9f:97:86:
6e:26:3a:56:ef:38:21:ea:3c:de:1c:87:ab:c6:6f:
dd:6b:0b:b1:ec:ed:7f:7c:ee:5f:12:57:95:96:e4:
5f:03:da:c2:11:0c:df:63:a6:42:d7:c6:db:d3:d7:
0c:35:7d:b3:24:c4:78:0a:b8:b1:1c:16:44:23:3d:
97:c0:06:4a:8d:21:3f:61:a8:9c:eb:c2:00:21:fc:
70:8a:54:3c:f1:f1:68:25:59:54:a8:fa:e9:55:84:
90:41:68:30:4f:4a:88:b2:83:8a:68:b1:9d:41:ec:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D9:B1:47:D9:53:CE:36:20:1E:96:E3:AE:AD:F8:4C:17:B3:E6:0C
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:68:18:24:73:1a:67:27:14:70:b3:ff:42:60:9f:12:2d:1a:
c9:da:4c:0b:6e:e9:e8:54:15:7c:5e:af:e2:50:4d:0c:b5:b2:
3b:42:b1:f1:7f:18:49:f1:48:24:c0:58:db:69:c2:f1:f6:15:
70:34:c3:02:52:1e:f8:dc:e6:56:c1:3f:6e:bf:2c:cb:82:73:
43:f5:d3:b0:50:37:3e:70:c9:50:f9:71:1f:37:3c:ae:f1:11:
f1:d9:48:59:49:82:00:fe:14:0c:aa:88:9a:ba:c7:f7:8b:31:
fa:65:97:33:3d:d2:88:91:c3:eb:36:62:88:b7:2f:95:00:8b:
63:47:ee:75:c2:ec:4b:5e:82:cb:4e:32:89:fb:ec:e6:5e:c1:
09:56:84:85:f6:a2:08:30:4c:70:56:ad:35:05:7d:6f:70:d9:
3d:f8:f7:99:98:c9:f1:44:04:56:d3:70:48:6b:2f:72:29:b0:
66:25:8c:f6:f8:cb:91:fa:0d:bb:a6:43:1f:eb:86:cc:6e:21:
a1:2c:97:cd:6a:22:2a:78:d2:3e:60:cc:c2:8e:c9:f0:85:a5:
af:b7:a3:e7:58:65:86:48:e9:c5:2c:25:b8:76:6f:4c:ca:2c:
62:83:cd:12:38:22:cf:44:a5:57:b9:23:98:a8:0b:39:48:f5:
2b:bd:11:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:42:04 2025 by rpki-client