Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: N7J8SF2+P4YfouFBBIPfNRyCNz9p/hvhxae5/rxD74w=
Subject key identifier: 1F:0A:EF:21:EC:EE:6C:5C:07:6C:86:41:C3:7E:63:5F:45:68:43:F0
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 0196B7EC64C3C2BF79FF5060A07D36FCA542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 02:00:44 +0000
Manifest this update: Sat 10 May 2025 02:00:44 +0000
Manifest next update: Sun 11 May 2025 02:00:44 +0000
Files and hashes: 1: 1cBDORiVvrRChAcdm2hc6y292d0.roa (hash: XIDQHNSLIfpf1kaFUtLQNCl28oalABx/0LdYZxGeMgk=)
2: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: hWMaZyjYa+kofdhp/JQg8pyONi0DvvGuYvOLd83Dztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:64:c3:c2:bf:79:ff:50:60:a0:7d:36:fc:a5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: May 10 02:00:44 2025 GMT
Not After : May 11 02:00:44 2025 GMT
Subject: CN=1f0aef21ecee6c5c076c8641c37e635f456843f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:4c:52:5a:aa:7b:66:58:0b:ca:ca:e4:ba:
f5:e5:23:00:6e:7c:3f:f6:ef:de:80:4a:eb:ec:66:
7b:43:ad:f8:24:5b:48:07:40:b4:40:d1:1c:dd:8d:
11:c6:61:0e:a6:86:31:a5:1b:0c:ac:00:22:3e:ba:
da:f6:fd:aa:31:b1:79:0b:d2:2b:a3:1e:16:ce:b8:
3f:af:1a:13:f3:79:dd:34:fb:bf:4a:77:0a:26:a1:
e3:22:a9:96:3e:a7:fc:c0:63:ae:b8:95:95:ea:32:
de:c6:f3:8b:ce:fb:3a:4d:ce:39:b8:ac:49:d4:b2:
c7:8c:7e:76:d7:fc:ee:e4:89:18:c8:c7:1a:77:49:
1f:99:c6:06:bc:68:e3:fc:71:6e:8f:c8:fa:63:1a:
e4:11:f4:d7:64:24:81:13:9e:eb:30:d4:16:f0:5b:
fa:cd:97:dd:4a:bb:25:4e:ea:61:57:b4:be:a4:cb:
bf:f4:88:33:06:b6:c8:fd:46:5f:36:ad:a6:3d:11:
3b:30:70:ee:c2:9d:85:d7:be:ca:a6:63:58:df:83:
d0:05:21:f5:2c:36:51:74:a2:c4:08:5f:2b:45:77:
b1:b9:e7:55:a4:0f:93:f6:c2:5a:4b:09:83:dc:6f:
a0:f2:d7:43:d0:8e:97:05:13:f5:94:87:22:2c:7d:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:EF:21:EC:EE:6C:5C:07:6C:86:41:C3:7E:63:5F:45:68:43:F0
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e4:16:c9:64:82:26:d2:a0:b6:f4:89:93:7e:d4:d5:4e:e0:
10:26:b8:54:02:dd:fa:2c:99:a6:6b:31:72:6b:3e:f1:41:83:
4e:b3:fd:40:3c:83:60:11:f4:81:34:43:19:c4:51:90:ee:6a:
be:4f:6a:4b:78:a1:a8:8c:a8:78:17:ac:ce:ee:72:ca:74:0a:
25:64:60:55:de:2b:eb:18:5d:ef:95:5e:2e:3d:39:15:d3:c9:
51:b6:77:c0:93:e9:99:64:0e:ae:4a:09:40:b1:35:25:4d:a6:
e3:aa:4b:6c:cc:e0:c2:c7:b8:9c:03:d5:75:45:c6:fa:68:ad:
0f:21:26:af:e2:3b:9b:ae:fe:f2:85:5a:8a:1c:8e:c1:48:af:
50:55:23:55:11:b6:d2:c2:5a:ec:69:66:6f:62:a6:4e:93:31:
a0:ce:1a:50:b6:7d:e2:0e:e1:ea:4c:65:63:b1:5d:ab:32:1d:
e3:9c:90:cb:4b:1c:37:ec:cf:3c:bf:c9:b5:66:47:49:79:0d:
5d:4d:1e:4c:f1:7d:72:51:83:37:44:90:bc:cf:24:41:c7:a1:
4d:64:c0:20:a9:dc:83:b0:36:25:cc:d7:a7:c9:d2:0f:dd:c4:
eb:5b:94:d1:fd:b4:a1:25:0f:d1:c3:69:4c:19:82:4a:61:d9:
92:2a:d3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:39:53 2025 by rpki-client