Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: DqwjqwcABbqfJFY+Nk5KYbhcP18MXLrUcsHTs45xwNE=
Subject key identifier: B7:1F:26:75:D7:51:B7:2C:B9:D9:58:0A:0C:AF:8B:E2:AC:B8:F0:75
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 0196760D00D860D2BFECC34CA690C131CBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 09CA
Signing time: Sun 27 Apr 2025 07:01:25 +0000
Manifest this update: Sun 27 Apr 2025 07:01:25 +0000
Manifest next update: Mon 28 Apr 2025 07:01:25 +0000
Files and hashes: 1: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (hash: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: TSMq2SgnPDRNG1d9FtC3PZjE+V+AqKO5mfu1DygQ+RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:00:d8:60:d2:bf:ec:c3:4c:a6:90:c1:31:cb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Apr 27 07:01:25 2025 GMT
Not After : Apr 28 07:01:25 2025 GMT
Subject: CN=b71f2675d751b72cb9d9580a0caf8be2acb8f075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:d4:0b:9d:93:cf:76:a4:f4:97:40:b1:f4:
46:c2:4c:6c:64:8f:70:4b:81:4a:ac:6b:9f:12:9f:
c0:1f:02:0c:af:ce:83:73:fd:9c:aa:ad:fb:d1:57:
3d:a7:c2:d9:e5:01:52:39:80:82:8c:11:29:9f:48:
99:c5:fb:7e:d7:e1:53:de:e7:5d:22:1a:e3:eb:fc:
00:88:d3:7b:c8:3e:9c:7a:24:ce:5a:37:ab:6f:3d:
98:c0:f7:bd:a1:13:55:45:79:ad:7a:cd:4c:cb:67:
e5:3d:e9:69:68:90:35:a2:c8:27:c7:a7:12:6f:21:
a8:b8:12:7d:dc:91:6a:d8:57:db:0d:8b:10:2b:be:
61:41:e4:43:85:f2:88:87:4d:b2:9f:89:bd:11:2b:
e7:a9:4a:0b:ee:80:fd:0e:89:5c:62:40:24:66:65:
15:2e:02:af:ba:ad:cd:50:25:b4:d6:15:2a:3e:86:
65:fd:b7:21:33:10:d0:75:15:ac:f7:c5:f9:99:44:
8a:d7:37:8e:38:19:ae:03:a6:d7:60:80:f4:cd:68:
4e:bd:5b:31:c6:f3:94:4c:23:8c:1b:14:17:b9:41:
fb:53:11:ad:16:fc:84:87:f6:07:d2:e4:db:c3:45:
1e:c3:9a:bc:7e:d4:b2:46:97:a2:31:ab:a0:b4:30:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1F:26:75:D7:51:B7:2C:B9:D9:58:0A:0C:AF:8B:E2:AC:B8:F0:75
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a6:70:a7:4c:20:fd:cf:31:6c:96:af:3a:92:88:b7:76:10:
d3:b6:00:94:ea:20:22:51:f3:6d:32:bb:67:07:c7:23:34:ce:
98:40:8a:ed:68:fb:7f:a6:30:db:68:14:bd:8c:5e:0b:8d:3f:
09:ad:e3:96:fd:a7:44:99:d5:56:d1:46:d5:9f:c9:bb:80:33:
7a:5d:63:9f:48:a1:d7:c7:1d:fc:0b:93:1c:98:dd:1c:6f:9e:
61:6f:09:94:ae:9c:3c:06:21:16:8f:ea:60:1c:9e:4a:f5:48:
28:b3:94:41:2d:b4:e8:f6:0f:b4:f4:14:3f:1f:bb:86:85:15:
55:f3:ad:54:4f:0c:dd:80:39:17:fd:08:9c:da:69:cd:b6:a7:
7a:e7:c8:6d:f7:96:33:fb:18:28:22:b6:18:9b:15:b5:66:1c:
b7:4c:3b:6b:bd:31:b4:20:0b:aa:32:48:10:7b:ca:cc:45:a4:
18:f2:4f:52:d4:b7:47:57:62:83:4e:f2:6f:20:24:5a:af:e4:
75:d9:fc:b9:4a:cd:57:f3:fe:3b:65:73:cb:ff:37:64:35:0c:
82:50:da:1c:58:83:57:96:9f:c2:a1:89:f7:1f:56:ae:5f:df:
86:59:c8:5a:2b:01:10:8a:81:82:a7:f0:08:2d:be:63:b9:61:
02:f0:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:38:06 2025 by rpki-client