Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: gQgTJ59y5FXT1UsaS3I75hNfU90HKIxdT+eurQ9h9Pc=
Subject key identifier: 5C:11:F9:8B:1F:3E:D4:6D:EA:84:D5:4F:65:F3:5A:45:9D:A0:B5:ED
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 01976D3E3B7B00E1BF3666A010ADDAE49413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0B63
Signing time: Sat 14 Jun 2025 07:01:24 +0000
Manifest this update: Sat 14 Jun 2025 07:01:24 +0000
Manifest next update: Sun 15 Jun 2025 07:01:24 +0000
Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=)
2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: mEBrtuqfH1oeA84vPd/tkrkfjLJMANvzXV9Oy/+dNdQ=)
3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:3b:7b:00:e1:bf:36:66:a0:10:ad:da:e4:94:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Jun 14 07:01:24 2025 GMT
Not After : Jun 15 07:01:24 2025 GMT
Subject: CN=5c11f98b1f3ed46dea84d54f65f35a459da0b5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:7b:8f:c0:f9:30:11:2c:e0:45:e2:61:e0:
5a:13:e7:9e:d1:98:69:c5:e4:0f:a6:d5:3b:01:d1:
b0:e4:52:9d:f9:70:01:f4:b5:7f:63:aa:6a:a4:23:
4e:0c:3f:41:e2:ee:5e:b0:df:82:db:f0:df:8e:a5:
b0:5f:f1:98:74:d9:18:46:23:1a:a3:f8:7a:d0:a3:
c7:b2:95:60:3d:6c:25:15:0b:ac:9b:fc:7e:42:36:
d1:0d:44:63:ac:29:bd:41:a0:ec:f6:69:f3:38:92:
f4:cd:16:1d:0e:69:3f:2a:db:c4:6e:2c:02:2b:18:
c0:be:62:bb:9b:9c:ba:a9:c4:01:b0:3a:16:3e:2c:
08:1d:97:50:c4:20:01:ce:fe:6f:6c:81:68:1c:8d:
31:07:f9:e3:9c:fc:b0:26:c5:b2:65:1e:1a:df:52:
e2:3a:02:f5:cf:20:df:4a:10:e1:b7:5e:e6:bc:7d:
03:e2:c4:35:75:b2:cd:cd:ad:99:fd:16:a0:d6:2a:
39:d8:1f:99:99:08:b5:81:62:38:a4:c1:56:3e:ff:
f6:eb:2e:2f:c4:a3:4d:99:e4:c2:ec:e3:0d:a7:e3:
3d:8b:44:a4:02:ed:a6:fe:d7:c9:c6:1f:69:56:be:
8d:da:a9:c2:69:8a:8d:a8:96:bf:49:77:e2:da:a5:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:11:F9:8B:1F:3E:D4:6D:EA:84:D5:4F:65:F3:5A:45:9D:A0:B5:ED
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3f:50:b9:5e:28:e8:bb:da:fb:98:1c:c3:c0:17:42:21:f7:
73:98:d4:0d:e6:b7:35:6c:1d:c4:e9:39:9f:f7:d3:fa:58:b2:
9f:6b:03:14:68:5c:7f:7a:35:9b:f8:08:4e:ad:29:24:f0:ae:
9e:64:0e:5c:1b:59:43:ad:96:c2:2d:46:df:0a:19:21:74:a6:
18:8a:67:08:a5:e9:1d:24:cb:a1:38:ca:a1:e5:91:17:db:8d:
21:79:be:04:50:60:98:ab:28:82:10:1a:73:b8:8a:46:f0:6a:
80:cf:b1:b1:1e:3c:1d:7b:69:45:59:1d:3a:03:d6:58:9a:71:
23:66:1b:c8:d8:51:e5:ae:91:f9:f8:c1:72:71:64:57:db:2c:
38:5a:25:0e:88:79:da:99:6e:16:48:4b:44:39:93:26:d1:da:
65:39:b3:7e:58:07:4f:4b:c0:5a:b4:a6:87:b8:3b:56:2b:c2:
70:33:e7:6c:20:b8:2b:b4:57:a1:7d:7c:55:d1:a8:21:67:0a:
e3:de:00:e1:e4:84:33:c2:e1:98:04:79:18:59:bd:3e:db:4e:
14:d1:d4:9a:65:09:21:42:a3:63:90:57:be:bc:43:17:bc:ca:
5f:aa:67:8d:eb:26:80:eb:cb:0f:c4:c1:42:48:32:c3:4f:b1:
22:36:4a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:08 2025 by rpki-client