Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
File: dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json)
Hash identifier: HwcLN6M3SKsYJddgsCOC6iYGEmOTeVTIBmoJ6DjkXyY=
Subject key identifier: C7:C8:88:C8:1E:C5:EF:58:79:29:D5:97:4C:0E:2F:51:11:A6:E5:7A
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial: 0196B8C7DE8F410DFB81930215886EB8E39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 06:00:28 +0000
Manifest this update: Sat 10 May 2025 06:00:28 +0000
Manifest next update: Sun 11 May 2025 06:00:28 +0000
Files and hashes: 1: 1-MmN0tsEmoim2sae335BAlf2iMY.roa (hash: BOjGK2JKa11z5em/Dgc+q3/nSr0kFU/3HDEjsSjRF+k=)
2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: jkZk107ALxlIOaD5tJU2ygeTx+e4MjSrvsTpwVDODVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:de:8f:41:0d:fb:81:93:02:15:88:6e:b8:e3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Validity
Not Before: May 10 06:00:28 2025 GMT
Not After : May 11 06:00:28 2025 GMT
Subject: CN=c7c888c81ec5ef587929d5974c0e2f5111a6e57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d4:c7:2d:cc:35:35:6f:0f:8c:19:47:3d:8a:
1c:47:c2:b4:1b:c1:cf:77:ba:08:64:d3:8b:d4:ce:
7a:cb:6a:2b:4b:27:3f:45:4f:3d:4a:5a:33:ee:25:
2b:13:a1:72:d9:b2:6c:ee:21:09:66:bc:03:29:38:
58:13:6e:93:b6:0a:c3:bf:8c:46:f3:25:f8:cf:a1:
ba:b6:16:a7:cd:dc:ea:ad:08:a4:e4:56:58:40:3d:
b0:81:42:8d:92:71:97:f9:57:5c:2a:76:b8:87:8b:
47:d3:96:5a:a6:1c:b7:67:73:35:51:49:a1:41:9a:
5e:e6:8d:0f:e6:fa:e9:0f:6b:45:d1:98:fc:d4:8f:
09:a4:0a:74:be:34:94:13:8b:cc:1c:d9:bf:4f:64:
fe:11:8a:76:53:27:b0:67:1b:df:e9:13:a5:24:14:
ae:73:d8:a0:35:a7:04:3d:3c:11:76:dd:a7:49:d7:
df:cf:0f:a7:49:34:ec:84:13:02:3e:7a:10:36:ed:
15:60:2c:e8:55:f1:e6:39:30:70:a6:14:cf:52:30:
b8:95:11:82:aa:c3:d1:7e:9b:d6:af:9c:28:5b:d1:
04:46:6c:bc:4a:93:2b:5f:6f:49:54:30:0e:e2:5c:
a8:99:e1:09:44:22:ea:94:85:9a:27:23:67:09:6c:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C8:88:C8:1E:C5:EF:58:79:29:D5:97:4C:0E:2F:51:11:A6:E5:7A
X509v3 Authority Key Identifier:
keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f5:05:ff:61:43:04:16:4b:07:83:09:81:da:29:d2:b5:4b:
ad:c3:21:c6:e9:4a:5c:1c:6d:fe:dc:cd:e1:d4:99:d1:e1:85:
6c:e2:5e:b9:57:d4:58:61:4d:f2:85:10:dd:ed:e1:7b:db:34:
92:bf:ab:20:e7:50:fa:28:26:d7:c6:5d:6c:c0:5f:46:c8:4a:
2d:71:9f:8a:bc:db:ba:59:a6:12:56:f8:ec:bd:9e:1d:33:77:
9c:28:cf:15:7e:5a:e6:9e:0e:8d:2f:63:a9:ab:17:ab:49:b7:
cf:fa:31:25:f3:8d:c3:2b:aa:bc:c4:34:e4:c7:4e:41:0d:1e:
05:b1:e1:e0:75:d3:79:4b:8e:f6:15:92:12:30:2a:66:04:46:
2a:65:4a:ff:86:25:1f:9f:cd:67:1b:6d:ed:43:35:30:00:a0:
ec:4f:30:a8:86:ff:fe:1c:b7:9d:5a:e4:bf:93:3e:06:7e:22:
50:1e:88:f0:01:18:7b:1b:c8:42:ff:62:90:b6:c8:13:fe:80:
19:e2:0c:da:13:0c:02:43:d5:9d:e9:ba:f7:7a:de:e5:88:81:
52:a8:3b:e3:4b:97:c1:aa:a1:6d:c6:d4:7e:0b:b1:28:b7:7b:
2e:70:c9:42:f2:07:67:e7:c0:ea:85:8f:91:a7:49:45:4d:a2:
c8:b0:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:45:23 2025 by rpki-client