Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier: iFO6ZHTNBWddJPSC16ENq00lMlABMI22L2q65V62D4Q=
Subject key identifier: 96:5A:B1:5C:BD:95:7A:2E:D5:8F:84:96:2F:C4:1F:93:3D:2F:31:7C
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial: 0196C5A8564A76E983358F20BA8BE4D3F4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number: 124F
Signing time: Mon 12 May 2025 18:01:05 +0000
Manifest this update: Mon 12 May 2025 18:01:05 +0000
Manifest next update: Tue 13 May 2025 18:01:05 +0000
Files and hashes: 1: 8JHdroSmFbW7TogZWDAIS298pfo.roa (hash: goVtVxuEC9QAmF+Kz0vzUzxl+/V8u83qUjrsL0jlHNw=)
2: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: PRQEXvwaUsH+ILulMu/HU4UYoL+F5m5+sLHUYiLCQwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:56:4a:76:e9:83:35:8f:20:ba:8b:e4:d3:f4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Validity
Not Before: May 12 18:01:05 2025 GMT
Not After : May 13 18:01:05 2025 GMT
Subject: CN=965ab15cbd957a2ed58f84962fc41f933d2f317c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:7b:74:5c:4e:93:f5:b5:ac:5b:73:44:83:
74:c7:05:ba:4f:3e:57:21:23:16:cc:bb:37:c0:2e:
95:b3:33:88:59:a4:52:72:3b:9a:c5:6d:27:2b:e7:
43:52:4e:68:0e:b8:2c:33:bb:b9:d3:d4:80:c8:6f:
1b:8d:be:05:4d:2e:c7:29:2d:08:68:cc:b1:ad:f8:
bc:cb:3a:5e:4c:a4:b6:fa:15:76:5d:3e:96:88:01:
23:63:eb:39:b9:97:17:9b:c4:2f:9d:9a:df:86:09:
d0:e3:18:ca:4d:a6:f0:ed:47:a1:18:13:dd:8f:7e:
1c:08:81:f0:09:75:4e:12:80:a7:fe:27:0f:47:1e:
cc:1c:99:7a:83:85:f7:07:04:de:c0:a9:00:71:b2:
c2:c1:a1:0e:dc:9f:7e:2f:b0:5b:07:17:31:b3:2c:
7a:98:13:c5:15:63:f0:db:a6:fe:81:05:43:ed:16:
d0:6b:81:46:93:39:e7:ee:79:9c:e6:41:99:08:ab:
46:61:93:35:ca:ed:58:21:cd:2e:16:ec:63:fa:1e:
99:69:31:08:bf:f8:97:53:19:d2:60:dc:2c:e0:55:
71:1b:02:4e:de:48:bb:d7:5c:0e:9a:47:cc:c0:64:
1d:d0:e4:ca:f6:42:a9:79:c3:db:36:34:6a:64:02:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5A:B1:5C:BD:95:7A:2E:D5:8F:84:96:2F:C4:1F:93:3D:2F:31:7C
X509v3 Authority Key Identifier:
keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:06:40:30:c5:e9:4f:bf:87:6a:dc:4f:84:b7:0f:91:0d:b6:
30:2f:83:1e:9a:54:32:de:5d:b8:f0:bf:d0:df:ce:e0:79:ee:
10:95:28:05:db:05:20:6a:5b:b4:b8:50:e0:93:83:c6:ac:ef:
9d:9a:4e:7b:e7:c4:de:0f:16:48:a9:84:90:95:da:a1:d9:5f:
3c:b8:c6:72:73:1f:ce:38:d8:74:1e:35:3e:0a:b4:f7:c8:c8:
86:ba:67:c9:14:37:61:59:d5:7c:44:80:ce:4f:6e:c9:6b:6e:
5b:c3:8e:0d:4f:3c:9a:63:e3:40:c4:5b:34:75:d7:87:ca:1f:
3f:5f:3e:86:fc:07:e4:50:ca:91:93:60:d1:a8:51:07:31:ba:
0b:5a:ae:d7:ba:47:c4:9f:64:18:ef:f6:ff:c5:e6:f5:c6:7e:
38:84:e4:ed:52:1b:d1:41:f2:b4:35:7b:61:9a:e1:9f:a6:d6:
06:25:7c:4d:62:d9:31:99:d9:e2:2b:84:52:33:fe:85:45:43:
62:db:8b:a1:1b:67:7e:20:50:57:d4:0c:92:d4:4f:20:ad:00:
86:66:ec:2a:2f:11:b3:d7:a9:95:b5:48:29:ad:fa:a4:f1:c9:
a5:8f:51:97:5f:21:42:b7:ac:18:1f:f4:a1:50:c5:93:f6:ae:
b2:3e:fb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:29:41 2025 by rpki-client