Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: x+nyFpwjC5xUszqBK5GyCWJar1TqErvlNZzvlxOOTIQ=
Subject key identifier: 18:81:09:E4:E9:70:67:75:46:B4:3F:BD:57:98:B7:31:86:FE:58:16
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 0196C201F41E48081A4DCA16091A307F51BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 0606
Signing time: Mon 12 May 2025 01:00:30 +0000
Manifest this update: Mon 12 May 2025 01:00:30 +0000
Manifest next update: Tue 13 May 2025 01:00:30 +0000
Files and hashes: 1: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: afb2W4CoDf0GymbXy1tPBwQGBEb8eeTntSqAzF0VF1Y=)
2: gFGZ2BFs8uwMqzE5e-fa-6VVCNI.roa (hash: RsuEdz61HYwgHfhCVbH78Gqegx1PGZpeCp/nCDSO5do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:01:f4:1e:48:08:1a:4d:ca:16:09:1a:30:7f:51:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: May 12 01:00:30 2025 GMT
Not After : May 13 01:00:30 2025 GMT
Subject: CN=188109e4e970677546b43fbd5798b73186fe5816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:f7:75:26:62:18:54:64:f6:1c:ec:3c:f3:
f3:aa:d9:64:dc:d8:40:9e:23:e8:7d:db:9d:e2:a5:
f9:6c:37:51:06:39:46:7b:74:f8:e8:f5:c2:98:5e:
e8:19:9d:66:f9:b0:4c:ae:bf:7c:1e:8a:09:37:af:
0d:0b:fa:9f:0b:2a:a3:b5:a8:61:0b:80:90:21:43:
db:4c:87:ca:af:96:b5:a8:96:dd:53:7b:29:10:15:
9f:40:e2:46:2c:aa:7e:39:ce:a8:8a:38:85:64:ac:
17:52:33:93:c4:2e:2b:bc:e0:c9:9d:b7:f8:7f:a5:
39:b8:f3:68:47:03:5c:0f:01:6e:9c:76:57:aa:9b:
5f:2e:38:89:b5:32:09:e3:d0:dc:e0:53:1b:f0:ff:
b1:a3:e8:15:2c:f7:88:8f:c6:49:1a:81:04:85:69:
6b:93:90:53:ca:bb:1c:a1:7c:64:43:1e:36:8b:77:
c0:9b:2f:d3:9e:67:23:2b:74:3f:94:c3:be:91:78:
26:2f:f2:05:6c:ab:91:db:1a:23:ae:af:87:4e:c5:
58:a9:66:d8:8b:01:57:5e:99:f0:50:0d:2a:3a:d8:
99:56:82:e5:22:b3:75:21:4a:37:72:7c:44:0e:0f:
60:b8:b7:18:44:98:84:6f:d4:9d:d4:0f:56:ef:48:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:81:09:E4:E9:70:67:75:46:B4:3F:BD:57:98:B7:31:86:FE:58:16
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:40:1f:f8:8b:dc:91:d7:8c:0f:8f:5c:f0:c6:1a:8d:33:4f:
2f:db:94:13:c4:44:bf:69:a9:55:9f:05:10:71:29:8f:d6:42:
ce:34:bc:81:77:b6:e4:59:a0:3c:39:b0:80:5e:c0:ff:62:61:
ff:99:13:72:1a:a8:d3:93:08:58:8f:6c:5d:65:ed:4b:a6:cd:
a0:95:d1:ed:35:ba:53:76:89:06:7f:6f:bb:c7:45:a1:42:be:
cb:50:f7:9f:32:2e:05:40:04:6a:85:da:35:63:f3:24:ba:50:
d9:a6:c4:9b:c0:80:6f:81:6a:53:cf:d0:56:2c:d4:b0:ca:d9:
e0:0b:0c:ec:c6:1a:3d:71:a9:28:87:9f:6c:26:38:08:8d:76:
12:a5:90:6f:4a:d3:bd:5a:04:43:55:db:a5:d6:69:5a:a5:2c:
cd:f0:9d:95:18:af:d0:3e:8c:4a:98:c2:93:7d:26:98:9b:b0:
ca:d1:8c:02:68:4c:aa:9c:3d:a7:ed:55:9e:e1:71:a8:8b:08:
3e:35:37:e5:eb:dc:13:fb:22:15:c8:0e:b0:f2:76:f7:b4:78:
fd:c9:b9:50:52:5b:4c:b6:bd:dd:49:c9:59:15:55:b7:c5:d4:
c3:5d:90:a9:01:0f:4b:76:90:c5:df:24:b3:1a:73:e5:5f:00:
5b:03:48:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:16:59 2025 by rpki-client