Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier: DS/E3hbNaeB4kbto0zx+Ap8Jek/MAs+mfIPx07aFOyQ=
Subject key identifier: CE:E8:CE:50:C8:23:FB:86:4A:A4:5F:5C:F0:B4:8D:87:0D:AB:26:1A
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial: 0197D217BB0A3012947BC974AF31907F9619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number: 12DA
Signing time: Thu 03 Jul 2025 21:00:59 +0000
Manifest this update: Thu 03 Jul 2025 21:00:59 +0000
Manifest next update: Fri 04 Jul 2025 21:00:59 +0000
Files and hashes: 1: 8JHdroSmFbW7TogZWDAIS298pfo.roa (hash: goVtVxuEC9QAmF+Kz0vzUzxl+/V8u83qUjrsL0jlHNw=)
2: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: 1iHGC06fQBm44+ypBE90ah4uzqk9r45qSIuIslkWQzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:17:bb:0a:30:12:94:7b:c9:74:af:31:90:7f:96:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Validity
Not Before: Jul 3 21:00:59 2025 GMT
Not After : Jul 4 21:00:59 2025 GMT
Subject: CN=cee8ce50c823fb864aa45f5cf0b48d870dab261a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:d4:f8:0e:66:01:5b:9b:2b:24:e4:87:fe:
91:b1:a8:e0:11:6e:a7:d2:1e:65:af:02:ed:65:16:
9b:e7:32:78:63:44:e6:9d:f0:35:58:04:ea:cb:bb:
11:da:99:7f:72:fc:b9:8b:d4:7f:dc:09:a9:ba:42:
e1:68:17:cd:0f:51:a0:6f:6d:64:4e:a0:a9:30:58:
88:58:2c:00:80:26:18:69:98:4c:f9:ad:56:2e:31:
86:85:ad:31:7e:ca:e7:2a:8d:04:cd:63:77:c0:e2:
c4:a9:ad:12:43:46:f4:81:6d:98:04:24:19:60:cd:
ef:28:f3:c4:1d:41:40:cb:c3:6e:5f:4d:34:16:02:
b9:69:38:e1:b7:74:00:a7:79:11:d4:b0:2e:c8:84:
53:ea:ca:32:62:45:cb:92:1c:5e:0f:31:55:f8:7f:
f5:3e:92:d1:4f:5c:40:d6:2c:32:a9:c2:34:35:6b:
5c:e5:31:5c:35:ad:37:88:ba:ff:3c:6a:77:f4:55:
f6:7f:49:09:ab:d5:98:27:04:c7:0c:10:d4:1c:83:
9d:57:8e:90:30:2a:c1:5d:52:d7:61:1d:24:99:e2:
f3:a1:34:69:1c:08:85:12:fc:cc:c2:26:af:46:1c:
d2:9e:15:98:29:ea:84:d6:78:f4:65:c5:38:5d:fe:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E8:CE:50:C8:23:FB:86:4A:A4:5F:5C:F0:B4:8D:87:0D:AB:26:1A
X509v3 Authority Key Identifier:
keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:11:cb:21:11:44:91:5c:56:a0:d5:7a:02:31:2d:30:cc:84:
1e:89:86:e2:63:d8:61:3f:43:f3:d0:90:18:ea:d8:34:15:e8:
01:df:c2:ab:99:6e:37:f0:a8:1f:a2:0b:08:39:cd:bc:76:2a:
e5:cc:d5:2d:3d:52:42:64:55:74:8b:aa:da:af:a8:26:b1:dc:
fb:ba:56:17:a9:c5:7e:ed:85:24:e7:3b:1f:71:37:f1:d5:38:
7b:87:54:41:13:13:8c:4e:d1:4c:da:6f:9f:27:99:27:74:3c:
e0:4c:f4:2f:14:3a:e9:78:9c:cb:82:c2:0e:7c:fb:bd:87:68:
7b:53:bd:8a:eb:08:e8:1a:63:31:d5:45:e0:a3:60:cc:75:ee:
c3:5d:24:0f:69:80:c4:59:1d:92:6e:43:5c:0d:f2:46:e1:42:
3a:b3:12:ea:bd:fb:07:21:3c:a3:a3:43:35:b5:4d:31:a2:e8:
70:39:d7:de:dd:8a:10:f3:a9:c2:ed:db:34:4b:78:d9:31:29:
18:93:0a:50:af:87:4a:e5:f3:20:ca:a4:ef:27:5e:a5:f2:55:
22:90:6c:86:29:9c:00:09:71:fc:69:8d:36:05:3a:84:b5:69:
b4:d8:18:30:19:ae:15:2b:f1:7b:c7:4f:2b:fe:22:f5:cc:43:
81:90:03:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:52:48 2025 by rpki-client