Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: f7IW2v756BX/RI+gEML+L4hV4/WyOs8zGCoZzjF/3Fw=
Subject key identifier: 98:F8:F0:30:CA:A1:4F:53:D7:51:85:83:B0:9E:52:41:D6:27:24:D2
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 0196BF00E02808C937D12EF8A4E82B1A6413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 11:00:27 +0000
Manifest this update: Sun 11 May 2025 11:00:27 +0000
Manifest next update: Mon 12 May 2025 11:00:27 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: sGZS5lWsJ+MMG3l4WL93l4xLSI8lk80hFul06t4rXeo=)
2: OsEqbh-MgAhZY6dEETKTLoVhiek.roa (hash: 8l+J0cXRIwFphYGIY8ShZlRzu2XOdk8YK7YXmH85akQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:e0:28:08:c9:37:d1:2e:f8:a4:e8:2b:1a:64:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: May 11 11:00:27 2025 GMT
Not After : May 12 11:00:27 2025 GMT
Subject: CN=98f8f030caa14f53d7518583b09e5241d62724d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c7:2c:42:e2:34:4d:39:0f:5b:c7:02:92:cc:
79:7d:4f:ed:03:68:48:e5:3a:3d:1a:88:27:ae:ed:
9e:da:ed:44:e0:17:5e:97:53:8c:9d:4f:cd:ba:ef:
c5:61:b6:28:01:d5:67:81:f5:5d:ed:c4:70:1e:d1:
51:20:74:63:2b:4f:98:46:2c:80:f5:05:11:eb:bf:
b6:2a:23:bc:e7:7d:46:99:71:ca:d7:2e:b3:9f:31:
65:5f:a5:38:f9:5d:b6:db:0e:c0:6f:1c:fd:46:bf:
a6:49:62:59:e8:b9:a3:47:af:94:e2:ad:1a:ae:48:
05:26:16:50:a3:96:30:a0:7d:57:76:73:7e:1c:da:
ee:87:49:63:56:e7:43:df:5d:6f:60:37:b2:79:b1:
36:f2:c6:23:45:d1:49:f5:96:d1:51:f8:18:bd:ee:
7c:73:3d:d7:66:8b:d6:75:ba:69:85:42:4c:98:4b:
32:c8:79:8d:e9:f6:f2:7b:63:8a:8e:ed:01:04:c2:
81:19:07:34:68:2d:53:1e:63:1d:14:6d:65:c3:de:
42:19:6c:78:0c:ce:34:56:ef:1f:af:a1:fe:8a:9b:
11:07:e9:87:ae:8e:10:28:64:b8:ec:ef:28:94:c7:
f3:78:51:91:dc:3c:5d:ad:63:fe:48:d4:c5:68:99:
83:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F8:F0:30:CA:A1:4F:53:D7:51:85:83:B0:9E:52:41:D6:27:24:D2
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3f:5b:c0:ec:d2:d9:a0:4c:49:5d:a1:50:bc:57:2b:57:28:
b8:e1:15:4a:7b:f5:ae:79:10:4e:6a:0b:39:16:27:c9:32:e5:
12:c0:50:20:d8:ce:fb:77:70:75:2a:1e:88:d4:d6:a5:01:36:
0b:d6:08:ef:9b:53:6b:47:63:c6:78:c4:08:32:ad:68:a0:b8:
0d:4c:ec:52:1a:62:8c:d1:81:6f:73:b2:d1:b6:7b:22:98:d3:
13:43:32:e0:dc:dd:35:83:22:8f:ee:58:84:8a:4f:bd:a0:e3:
38:70:03:20:3f:d4:5a:a0:f3:8d:64:00:dc:27:a1:43:f5:45:
34:6a:55:13:f5:6d:48:21:09:3e:b5:ad:a8:5b:15:34:c5:39:
99:3b:42:51:28:3b:12:5f:40:2a:24:12:55:02:f0:bc:3b:f2:
14:6b:59:68:91:1f:43:12:34:8a:d6:e2:32:84:95:ce:65:67:
6e:ee:3d:07:14:45:f4:7e:4e:82:bd:b0:15:4d:20:95:48:96:
e2:24:a0:e4:9b:15:d1:bc:fe:4a:d2:05:3e:d8:0b:a2:e4:c7:
e2:aa:0d:ae:71:66:8a:bf:db:f3:46:bb:e6:b7:a2:18:59:b4:
c6:61:37:f8:aa:45:70:44:c0:43:74:dd:72:35:53:58:81:70:
d6:6e:57:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:49:34 2025 by rpki-client