Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: FXFqPG2INXC1+HWJg51gySvlgm/papqXjCkXQps4f3g=
Subject key identifier: 63:AD:22:02:A3:DE:D9:43:7F:75:25:BA:FF:28:6D:AF:BB:C1:5F:54
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 0196C23933C7AEFF35442F0DF15101E4F802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 153D
Signing time: Mon 12 May 2025 02:00:50 +0000
Manifest this update: Mon 12 May 2025 02:00:50 +0000
Manifest next update: Tue 13 May 2025 02:00:50 +0000
Files and hashes: 1: QSiu2o8yvX-7lTIYlrRdn3A1iGo.roa (hash: 7IpNvDtHzCXBqYppLIWhOXhyXloL9H2f5Plfi2MJpdo=)
2: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=)
3: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: VK3Y5B/jKq2jGhL+ijSQnqRy0dREyHXLFU/IW0Q4EmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:33:c7:ae:ff:35:44:2f:0d:f1:51:01:e4:f8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: May 12 02:00:50 2025 GMT
Not After : May 13 02:00:50 2025 GMT
Subject: CN=63ad2202a3ded9437f7525baff286dafbbc15f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d9:e2:9d:80:cb:00:40:44:b9:25:1d:95:7f:
e2:97:9c:56:d9:6a:23:c0:4d:98:b0:40:27:3c:a2:
4e:26:4b:df:a4:73:2c:8a:d5:9e:0b:88:5f:33:ed:
85:25:b5:d6:9c:fd:bd:78:be:9d:ce:bd:be:7a:11:
22:f5:03:b6:3b:1f:14:0f:0c:23:cc:3e:2d:4f:cb:
16:cf:47:e6:26:08:1f:33:18:32:ed:00:5b:7e:a8:
43:d6:41:d3:ed:b1:a6:de:a7:92:25:b3:ca:8a:32:
68:7b:e3:0e:2d:80:5e:51:8c:09:49:c2:5a:35:95:
28:3d:b2:ef:a8:76:63:51:81:da:00:d9:c6:8f:a0:
03:1a:6b:2e:64:a2:56:ff:d0:94:64:c9:9b:6f:a4:
52:bd:d9:4e:9e:f2:25:a8:cc:06:6d:71:f1:07:97:
72:a9:f6:ef:ae:5a:c5:b1:2a:8f:33:50:3e:ed:e6:
fe:01:d2:92:46:ea:7a:a9:cc:19:b2:0e:dc:58:44:
6e:09:c7:b1:ce:34:ec:b6:e1:e1:b9:3e:09:ec:ab:
63:df:a8:4c:0b:26:99:64:b3:a3:99:c1:cd:ef:38:
23:8f:c6:7f:97:6b:bb:54:69:7c:47:90:a7:0d:47:
b2:40:18:2c:a4:86:18:f5:ea:7a:1a:cc:6f:a2:c5:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AD:22:02:A3:DE:D9:43:7F:75:25:BA:FF:28:6D:AF:BB:C1:5F:54
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ff:81:cc:2a:9d:8a:22:7f:4b:59:2c:fa:b7:a0:71:b9:75:
9a:7d:7e:09:54:16:7d:49:6b:46:df:69:cf:13:3a:b2:e1:7d:
79:a7:77:25:44:da:4d:47:38:84:08:d3:45:d1:4f:9e:44:e5:
8c:7e:45:96:bb:01:91:d7:45:b9:5a:4d:d6:a9:d6:60:c3:08:
c3:0e:00:b4:60:d3:2a:aa:9d:cb:4d:48:e0:00:87:a9:3b:27:
ee:c3:66:0d:ec:53:26:84:a8:83:07:3c:d9:7d:e8:6a:0e:a8:
a1:ff:a5:14:a9:fe:68:b1:57:e0:37:47:ca:fb:fc:ff:50:be:
63:dc:d8:1b:b3:9f:cd:ec:c7:3d:b0:32:c6:b7:66:c3:89:7f:
89:e8:d1:37:45:a3:35:3a:59:6a:c0:a3:3d:23:d0:73:1f:da:
16:c0:c6:8d:75:22:ce:ef:5d:e8:1f:17:47:56:72:5d:51:07:
8f:3a:fa:c0:56:ef:32:99:e0:8c:fc:28:6b:c9:5f:25:c6:1e:
35:8d:9e:46:0a:0d:86:5e:3e:ea:0d:99:ef:53:29:cf:5e:9b:
b6:18:72:b3:e4:f6:30:e8:a5:60:f8:03:60:c3:36:3d:69:06:
df:10:71:ad:ef:21:0f:7e:42:e9:fb:25:4b:f0:48:7c:ac:c2:
e2:ae:02:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:13:44 2025 by rpki-client