Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: 2Y5yhytSnbApT18aR0xfEfEy5TYpKP7MURYaC13nWCw=
Subject key identifier: ED:5A:E1:52:8F:49:6C:28:57:28:42:08:E2:CE:76:C2:A9:CB:74:C7
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 019672301E874401C746AB109950565DCDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0AE1
Signing time: Sat 26 Apr 2025 13:01:18 +0000
Manifest this update: Sat 26 Apr 2025 13:01:18 +0000
Manifest next update: Sun 27 Apr 2025 13:01:18 +0000
Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=)
2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: eh0YJvHLiqxXDQkXBFiRdoJ98JbsoOSUDD9LJ4AsdtI=)
3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:30:1e:87:44:01:c7:46:ab:10:99:50:56:5d:cd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Apr 26 13:01:18 2025 GMT
Not After : Apr 27 13:01:18 2025 GMT
Subject: CN=ed5ae1528f496c2857284208e2ce76c2a9cb74c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:48:7b:19:44:82:df:5a:fd:4a:d9:1d:83:26:
38:40:2f:65:e1:52:c5:e1:8d:c6:5e:05:a8:12:af:
99:2b:9c:08:55:2b:26:8e:09:85:19:51:aa:cf:2c:
0b:d2:b6:b9:6a:87:80:02:95:8d:da:c2:ec:e0:47:
c4:45:54:7a:3f:ef:ea:72:1b:a1:3a:c5:2e:b8:ed:
6c:8f:4e:45:8d:e7:50:12:fd:fe:dc:87:38:89:18:
6a:12:3c:50:11:81:3e:fe:c9:f8:58:ab:a4:6a:f5:
17:2c:58:57:83:b2:c3:cc:0b:1a:d0:e0:5b:d1:61:
ae:87:91:c4:ab:bc:ce:8b:e0:3d:9f:31:e0:35:75:
a8:0a:ad:d6:09:bd:5c:f5:32:db:88:13:01:60:89:
08:c4:75:4e:a5:59:68:3a:d5:e1:be:ce:80:1f:bf:
2c:a3:bd:98:f4:95:ee:cf:be:21:53:9f:33:7a:db:
17:49:d8:45:5e:34:3c:6f:85:3f:d4:17:0b:c5:bc:
ba:44:20:9b:5b:31:6d:26:fb:9a:b8:eb:fd:85:6a:
00:6e:6a:97:91:d0:76:8f:a1:fc:50:0c:d2:6f:ca:
cc:21:e1:4e:21:d1:ff:34:b3:86:4f:fb:fa:92:76:
ae:0a:9f:32:d6:6c:e4:07:e6:57:75:de:f7:89:80:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5A:E1:52:8F:49:6C:28:57:28:42:08:E2:CE:76:C2:A9:CB:74:C7
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ec:60:ce:ee:0b:d0:da:1b:c3:0d:87:59:0b:78:63:64:a8:
21:5a:c5:92:be:bf:7d:b4:5b:80:06:f2:ee:de:d4:ee:a9:c1:
91:8b:ca:ff:b8:21:b9:b9:c3:d7:ce:59:55:30:69:5c:c0:61:
99:a5:14:42:bd:1a:94:1f:c7:66:7b:57:61:85:3a:e0:f1:1d:
29:6d:a0:50:02:73:54:d5:d2:66:f9:a0:80:8b:c5:c4:1d:46:
2c:34:ce:76:51:ac:5c:31:12:e5:da:01:97:ef:3a:3c:b5:5e:
4e:0a:60:44:de:82:f7:68:6c:1c:41:f7:d9:4b:39:64:9d:6c:
74:7c:14:48:ff:fa:f3:29:c9:ca:74:b3:7c:fe:5b:d9:ca:b1:
07:f6:c3:7a:33:4b:17:89:34:ee:b5:f9:74:83:b0:b5:5b:32:
82:e6:59:83:c7:22:29:01:7f:87:d9:aa:6c:38:1d:6c:8b:f5:
65:71:7c:d0:a9:b4:5e:f3:e5:74:4a:95:87:f4:6a:04:20:a0:
9f:6d:56:ce:23:ba:88:65:57:5c:4f:7c:dc:eb:88:9c:28:4d:
41:4f:66:96:74:48:b9:3b:90:a9:97:20:04:c2:61:10:e8:bb:
7e:c8:3f:91:28:9d:f9:b7:2e:77:54:42:ac:e4:d8:7a:2f:83:
b1:e0:04:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZyMB6HRAHHRqsQmVBWXc3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWE4ODQwZTUzYmI5NjViZTUxOTJjODViNzQwMzQ1ZTdh
MDY1MmMwHhcNMjUwNDI2MTMwMTE4WhcNMjUwNDI3MTMwMTE4WjAzMTEwLwYDVQQD
EyhlZDVhZTE1MjhmNDk2YzI4NTcyODQyMDhlMmNlNzZjMmE5Y2I3NGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0h7GUSC31r9StkdgyY4QC9l4VLF
4Y3GXgWoEq+ZK5wIVSsmjgmFGVGqzywL0ra5aoeAApWN2sLs4EfERVR6P+/qchuh
OsUuuO1sj05FjedQEv3+3Ic4iRhqEjxQEYE+/sn4WKukavUXLFhXg7LDzAsa0OBb
0WGuh5HEq7zOi+A9nzHgNXWoCq3WCb1c9TLbiBMBYIkIxHVOpVloOtXhvs6AH78s
o72Y9JXuz74hU58zetsXSdhFXjQ8b4U/1BcLxby6RCCbWzFtJvuauOv9hWoAbmqX
kdB2j6H8UAzSb8rMIeFOIdH/NLOGT/v6knauCp8y1mzkB+ZXdd73iYAZ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1a4VKPSWwoVyhCCOLOdsKpy3THMB8GA1UdIwQY
MBaAFAyqiEDlO7llvlGSyFt0A0XnoGUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3Mzgt
YzQ0ZGRmZmE2OWFiLzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3MzgtYzQ0ZGRmZmE2OWFi
LzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOxgzu4L
0Nobww2HWQt4Y2SoIVrFkr6/fbRbgAby7t7U7qnBkYvK/7ghubnD185ZVTBpXMBh
maUUQr0alB/HZntXYYU64PEdKW2gUAJzVNXSZvmggIvFxB1GLDTOdlGsXDES5doB
l+86PLVeTgpgRN6C92hsHEH32Us5ZJ1sdHwUSP/68ynJynSzfP5b2cqxB/bDejNL
F4k07rX5dIOwtVsyguZZg8ciKQF/h9mqbDgdbIv1ZXF80Km0XvPldEqVh/RqBCCg
n21WziO6iGVXXE983OuInChNQU9mlnRIuTuQqZcgBMJhEOi7fsg/kSid+bcud1RC
rOTYei+DseAEYw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:58 2025 by rpki-client