Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
File: dkyOsD7yMmpiDfEAVI0fBth0VRo.mft (raw, json)
Hash identifier: j3YzWAD7gFEbWhPPiV/upyiOIp/vDZoRizXRoRm0X/U=
Subject key identifier: 1C:15:33:EB:CF:BC:1C:0F:DB:9E:98:46:05:D9:97:30:B7:8B:FD:0B
Authority key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
Certificate issuer: /CN=764c8eb03ef2326a620df100548d1f06d874551a
Certificate serial: 01969E9A2FB6B2B09BC75404E2410F6BC008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
Manifest number: 0DD9
Signing time: Mon 05 May 2025 04:00:26 +0000
Manifest this update: Mon 05 May 2025 04:00:26 +0000
Manifest next update: Tue 06 May 2025 04:00:26 +0000
Files and hashes: 1: 6pQ6t4bP0J0fbsLbhEpUyG2VFpw.roa (hash: dOWAwUrFgwCtFG9Vv9gPLuYcFdBlCoehZxFbI34HH6c=)
2: dkyOsD7yMmpiDfEAVI0fBth0VRo.crl (hash: 6UPwzBd6aY54gs8vHl95cmkbrQvSN0RLCKuCj/+z5c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:2f:b6:b2:b0:9b:c7:54:04:e2:41:0f:6b:c0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764c8eb03ef2326a620df100548d1f06d874551a
Validity
Not Before: May 5 04:00:26 2025 GMT
Not After : May 6 04:00:26 2025 GMT
Subject: CN=1c1533ebcfbc1c0fdb9e984605d99730b78bfd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:45:c7:20:4f:15:f7:48:ef:59:4b:c0:74:34:
d4:70:07:42:61:c1:75:52:05:ab:05:5e:15:20:35:
84:0e:42:10:b2:12:9d:29:4e:11:58:bc:f0:a0:5d:
51:93:f2:f6:09:38:32:a2:1c:f9:1d:f0:57:e1:3e:
f3:33:a6:6b:22:8d:55:67:37:f9:72:c6:44:09:f2:
80:3b:41:7c:5d:19:3a:4b:5e:3a:8c:30:ec:c7:45:
64:db:8d:e3:e0:c4:c2:ee:46:75:5b:e7:da:52:47:
b3:24:35:0d:21:d6:1f:ec:fb:d7:3b:70:3e:bd:16:
82:8e:0b:69:1c:61:dc:8a:a5:21:a6:68:4a:bc:bf:
ac:d8:88:c0:8c:55:5a:67:e3:e5:26:e9:01:ee:1f:
a0:4e:a8:7b:6e:ff:8e:3b:35:12:41:c6:d9:ba:ee:
52:f1:6a:b4:bd:42:68:d4:4e:63:55:6f:ae:a1:e8:
cb:1c:c2:4b:ab:0e:e3:c3:d3:59:d4:cd:de:94:86:
c9:b4:50:df:d9:99:ee:c4:d4:e1:bd:47:e5:a5:26:
1f:48:27:23:b3:ea:7d:a1:07:98:d4:f3:67:85:43:
e9:5c:aa:5d:cd:2f:96:da:67:17:d7:f4:28:bd:62:
e7:3a:45:14:4e:b8:91:5a:ca:14:6f:50:37:a0:5a:
f4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:15:33:EB:CF:BC:1C:0F:DB:9E:98:46:05:D9:97:30:B7:8B:FD:0B
X509v3 Authority Key Identifier:
keyid:76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8b:22:ea:58:04:c7:a0:64:44:71:4a:56:ad:75:6f:d5:0f:
bb:6d:c2:e1:ab:0f:28:dc:6a:fa:6c:85:76:8d:ef:52:e2:82:
f8:9d:eb:a4:2f:00:e0:a7:2e:48:4d:28:72:67:ad:75:e9:af:
7f:2f:9c:87:7d:fa:39:d1:aa:55:e8:c8:37:f0:91:88:c7:8d:
89:a8:57:67:7a:a9:c8:42:1b:32:6e:56:0d:02:67:c9:ba:15:
00:ec:fe:e8:34:62:54:a3:04:fe:21:ab:62:7d:09:52:81:ef:
2b:b8:7e:f2:97:77:c3:ca:10:b9:2d:98:9e:04:1c:c5:f3:f9:
2b:85:8b:30:92:7e:87:da:8d:01:a4:fc:b5:e0:f7:6c:a6:ec:
2f:e6:f2:dc:8c:24:ad:1d:f0:38:ed:a5:f4:d1:43:9e:ea:aa:
65:8c:8e:dd:05:f1:a5:c6:8e:16:96:b4:29:e6:7d:ba:9b:4e:
5a:37:93:b6:53:e2:7c:33:25:a2:9f:4a:66:74:e9:60:ce:fd:
18:47:fa:7c:cf:70:86:2a:40:4b:5f:b6:19:0c:38:79:ed:e9:
40:95:0d:cb:f6:53:05:bd:be:7b:25:10:54:57:3e:59:eb:69:
ef:0e:a2:ad:23:5e:73:8a:8e:4d:34:d8:74:f1:3c:3a:c6:31:
e3:fa:ae:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:52:53 2025 by rpki-client