Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
File: dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json)
Hash identifier: KfBUmtmJads3oLCoucg8mLm2Mwt2C5XQn+c+Jjox4RQ=
Subject key identifier: BD:54:D7:34:47:E0:ED:79:80:B2:EF:D5:89:B3:59:21:5B:26:F3:3D
Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Certificate serial: 0197B70F40695BD04D172412123E30943E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
Manifest number: 1208
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: 6S1fN0Slf3Y95btQEfpy__y_tiw.roa (hash: 5FWi2gr8yiM3yt2DtW3oiI0p1G9KyA1KVfzD3/JWlJI=)
2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: GEOuXAHIvs6ny+DGanTqjLJU695kjmT550WpmncpAcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:40:69:5b:d0:4d:17:24:12:12:3e:30:94:3e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=bd54d73447e0ed7980b2efd589b359215b26f33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:f4:d8:c9:b6:f2:f4:92:81:2f:3a:66:ee:
75:44:85:3c:d1:16:d9:ea:66:9b:84:3a:81:ea:99:
14:45:3c:f7:da:81:69:a5:a5:71:da:f0:b3:0f:79:
82:5d:71:4f:fa:4b:c7:c2:a5:67:a3:20:39:50:46:
0f:ef:51:53:a9:71:5f:08:51:19:4a:6e:3b:45:0d:
13:1a:66:f3:30:0f:1a:89:5f:b9:15:5f:5d:64:a9:
1e:d1:dd:a0:57:b4:29:32:07:50:9c:ff:2f:cf:64:
01:66:3f:a6:3f:96:c6:78:80:b1:3a:97:26:07:e5:
c7:04:c2:cd:83:66:47:41:f3:8c:c6:99:0f:63:4e:
6f:51:4d:96:c9:ff:27:09:bf:1d:32:7b:51:c3:4a:
3a:e7:20:90:1f:11:e6:5f:91:7b:df:77:19:ee:dd:
38:07:cb:7c:20:71:7d:79:5d:8a:e8:0a:d7:84:25:
76:1d:5f:12:0e:9b:3a:d0:7e:c9:43:b4:a8:5b:2a:
e8:48:7f:c6:db:37:5c:1f:ad:2b:f3:bf:ba:05:d2:
5c:ee:c5:ee:5d:64:7f:26:a7:a4:7d:ca:26:45:5f:
c7:90:c5:76:2f:bc:74:e2:ea:b6:e3:0f:5d:86:fd:
79:62:f4:55:77:4f:5f:eb:7b:73:c5:3b:14:95:d3:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:54:D7:34:47:E0:ED:79:80:B2:EF:D5:89:B3:59:21:5B:26:F3:3D
X509v3 Authority Key Identifier:
keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7b:5e:66:c8:a9:9c:f0:cc:3c:11:28:27:30:cd:ce:76:55:
c4:18:02:25:e2:eb:21:2b:c7:f7:40:90:8d:a8:0c:43:1c:9a:
af:29:50:f1:80:a0:20:78:7c:89:c9:5d:4f:3f:46:59:29:16:
dc:37:5f:d1:05:59:09:ca:32:cb:40:df:54:2b:ac:34:13:9f:
15:2a:5b:61:bc:83:11:9d:f8:7f:ce:5b:f0:ee:f1:b0:7f:dc:
e5:28:a6:f2:4a:f2:ad:3b:74:1a:01:06:74:77:f3:48:c7:9a:
26:ba:b6:c6:49:96:d4:9c:70:68:40:c6:5c:6c:d9:55:43:2a:
44:28:5d:31:0f:fb:6a:58:f7:fb:73:c1:59:bd:cf:48:3f:66:
2d:89:f5:a3:47:90:41:99:8b:53:27:4d:6b:93:fc:51:16:b5:
41:59:a0:ed:d6:c3:ff:19:7c:07:bb:3c:4b:64:fe:1c:17:3e:
3d:88:cb:6b:c7:0b:42:7d:e2:ba:cd:b3:ce:48:f0:3c:a4:7b:
a0:39:3f:24:62:99:c6:d8:7d:59:8f:f0:50:8e:bb:55:f7:8b:
25:d5:34:48:65:48:ad:71:8e:c2:c3:98:ac:5e:60:3d:a1:b0:
e7:22:46:41:76:74:be:89:de:69:32:a3:72:2f:bd:4c:57:3e:
8d:a2:9a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:43 2025 by rpki-client