Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: 3mfsgnhtALtUjvBdfe3qou8iHmzDVMTSA4Wpxqs+120=
Subject key identifier: A3:D9:9E:7B:9F:E9:34:00:8C:B5:98:98:88:2D:55:64:F7:39:47:ED
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019676E7BDC4498C9F4D2E8BDD58CB604ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1516
Signing time: Sun 27 Apr 2025 11:00:20 +0000
Manifest this update: Sun 27 Apr 2025 11:00:20 +0000
Manifest next update: Mon 28 Apr 2025 11:00:20 +0000
Files and hashes: 1: QSiu2o8yvX-7lTIYlrRdn3A1iGo.roa (hash: 7IpNvDtHzCXBqYppLIWhOXhyXloL9H2f5Plfi2MJpdo=)
2: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=)
3: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: vxFho1+cNTZ67IWka89OMFtJ4ubzAO53QGA5yIAc4nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:bd:c4:49:8c:9f:4d:2e:8b:dd:58:cb:60:4a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Apr 27 11:00:20 2025 GMT
Not After : Apr 28 11:00:20 2025 GMT
Subject: CN=a3d99e7b9fe934008cb59898882d5564f73947ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5f:b4:2c:a2:fd:e5:0c:94:1b:61:fe:92:e2:
60:43:06:6c:78:15:c7:fe:a8:c0:e6:c5:b5:c3:6e:
9e:d2:62:98:f3:7c:00:54:1e:02:63:b2:e5:33:c8:
43:99:f1:d3:4b:13:42:2c:f3:2e:76:5f:63:3a:05:
e1:51:89:34:45:d0:5e:22:a3:1b:cb:6a:8a:31:a0:
01:5e:8c:de:c1:ce:b9:9e:96:47:f5:ce:e3:8f:5f:
eb:6e:3e:d5:fd:94:af:6d:4d:9c:da:b4:35:99:6d:
ee:17:1a:d0:c3:ca:e4:39:0c:5a:a2:0a:f6:92:ad:
d1:61:e6:9a:ee:c3:84:84:bf:6f:46:9c:49:7d:63:
50:a5:fe:d5:0f:53:c3:c1:70:40:15:72:db:ab:47:
13:f8:fd:cd:d9:b6:4b:da:6e:21:71:1a:4d:8f:1e:
95:3d:81:f9:dc:7a:7a:52:85:c6:63:21:94:b7:20:
e5:00:35:41:08:ce:a9:bb:fd:bd:c1:dc:4b:3c:66:
81:eb:95:6a:1b:95:ee:bf:9a:85:46:88:fc:ff:81:
00:64:aa:d6:bf:0d:0b:a4:1c:18:a9:3e:17:b3:b1:
07:48:bb:df:4b:4c:21:74:f1:30:45:39:06:2f:b3:
79:3f:e0:87:e8:b8:f4:c6:91:1b:3e:b6:78:4e:0f:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D9:9E:7B:9F:E9:34:00:8C:B5:98:98:88:2D:55:64:F7:39:47:ED
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:50:4a:bc:e1:36:71:17:78:0b:f2:25:bb:68:eb:ad:a5:5d:
50:fb:00:96:3f:38:b2:4f:c5:df:40:d2:19:03:0a:9c:75:28:
81:6e:26:10:d1:67:6c:c5:7f:05:6e:35:c9:af:07:ba:cd:ce:
1a:59:14:e1:43:40:6c:78:66:9f:7c:c6:0a:c0:62:f8:5d:85:
c1:2e:41:76:ad:55:8f:ed:94:28:82:bf:ca:99:13:20:4b:df:
2e:7d:e4:e9:46:27:d0:6e:56:ef:1d:7f:82:8e:e3:e8:57:61:
11:d3:5d:d1:d6:65:a2:62:bb:1a:20:1e:76:97:c0:a6:51:c1:
26:3d:37:df:f9:36:67:70:d3:ed:ca:aa:90:df:18:d5:69:5d:
a9:f8:af:cc:33:b3:69:9a:73:14:d7:63:fe:25:23:10:da:70:
33:ac:71:d8:27:7c:32:cc:18:34:af:10:d2:0a:74:11:57:90:
a7:ab:11:3c:9b:51:45:88:64:8e:ff:7a:41:cc:9b:d8:93:af:
cf:b6:7b:2d:da:a9:43:53:a3:75:88:9c:de:e7:5f:71:46:3f:
b1:e4:9b:4a:75:b3:61:52:db:be:42:f5:7a:32:6b:7e:e5:0a:
5e:8b:0f:fd:f5:38:27:8b:f0:17:d3:18:64:11:18:a8:02:c5:
02:bc:37:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:57:10 2025 by rpki-client