Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier: mRa0Gf09s595NuOph7XVK7EBahm8eQoaWaE/z34iXJI=
Subject key identifier: B8:0B:9D:2A:67:14:39:DD:17:B5:5A:C4:2B:B3:3C:5B:3D:10:46:3C
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial: 01968BB8BBE1F8B565AAADE0BF25F1B29718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number: 1231
Signing time: Thu 01 May 2025 12:01:01 +0000
Manifest this update: Thu 01 May 2025 12:01:01 +0000
Manifest next update: Fri 02 May 2025 12:01:01 +0000
Files and hashes: 1: 8JHdroSmFbW7TogZWDAIS298pfo.roa (hash: goVtVxuEC9QAmF+Kz0vzUzxl+/V8u83qUjrsL0jlHNw=)
2: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: anY9ycKXRzSCThQoc3keC8SXGVKKghvD45RCEMTvcXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:bb:e1:f8:b5:65:aa:ad:e0:bf:25:f1:b2:97:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Validity
Not Before: May 1 12:01:01 2025 GMT
Not After : May 2 12:01:01 2025 GMT
Subject: CN=b80b9d2a671439dd17b55ac42bb33c5b3d10463c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:45:28:29:2c:5c:1e:2d:59:92:e8:67:47:
16:d4:82:4a:df:bc:52:dc:00:1e:df:06:10:5f:32:
00:59:2e:79:92:1a:98:9f:ae:5e:0d:b4:f6:f5:1a:
68:9b:ed:6c:30:e5:39:08:34:1c:31:0d:c0:d7:01:
48:9f:51:9f:74:15:c7:61:3e:05:50:49:c7:5c:64:
7b:4d:20:bb:e1:87:65:aa:c6:c0:a3:61:0e:96:c1:
b9:97:7d:29:a7:e4:10:a1:10:74:a5:ad:07:de:29:
98:5d:73:d5:2e:00:08:36:60:0a:48:3e:08:00:d3:
d0:a5:e8:7d:23:7a:45:0a:5b:fe:b0:f6:75:25:8b:
5c:3f:d8:5c:e6:06:c3:d9:ea:4e:be:52:e9:70:66:
6f:94:e3:cb:f2:27:3e:a1:6a:47:8b:34:96:f8:e8:
96:d1:c0:c9:a8:cb:c9:3c:28:eb:e9:33:db:e2:22:
24:23:3d:d4:e2:05:9f:e0:28:45:0a:65:bc:c6:02:
51:39:e0:eb:79:68:8d:7e:28:29:29:85:ce:18:10:
90:ff:9f:c5:7c:e4:ca:7d:d3:7c:21:1c:f2:24:c7:
cc:bf:e5:da:c5:1d:08:71:7e:0f:94:79:15:45:c1:
e9:f8:bd:16:2d:46:be:1d:f9:5d:3b:7c:be:3e:1d:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0B:9D:2A:67:14:39:DD:17:B5:5A:C4:2B:B3:3C:5B:3D:10:46:3C
X509v3 Authority Key Identifier:
keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ee:50:64:b1:93:d0:6e:28:0d:d7:a9:16:67:0b:e8:eb:7b:
8c:86:b6:0a:d0:17:bf:f4:12:df:7d:f2:8e:3e:de:4c:7c:31:
a4:27:a5:3d:f0:82:53:ce:81:ac:9e:3d:9a:3b:ad:c9:b9:9d:
43:80:9d:f2:ec:4a:af:b8:40:de:f7:4d:15:11:48:b5:ad:e5:
11:30:18:9f:7d:37:84:ae:1f:5d:cc:ea:c7:cf:7b:33:ab:1b:
b0:c3:ee:eb:d3:04:5a:26:af:30:30:e8:9f:c0:af:5b:44:62:
b8:21:ab:0f:7a:d9:da:90:82:a1:1b:77:6c:64:3a:b6:74:b9:
7d:b1:15:b1:2a:e5:0e:46:0a:b3:c3:7c:d6:f6:a4:f7:d4:c9:
58:b0:51:ec:39:a7:bf:16:7e:aa:e2:5e:d3:f1:02:f7:c0:c5:
67:3c:6f:9c:fc:87:13:9d:1c:5b:23:21:ec:61:db:8b:98:de:
64:c2:c9:22:46:5a:63:4c:35:31:fa:d9:8d:6c:3e:04:0a:ef:
85:49:50:24:89:f5:b7:54:0c:f8:99:17:7b:2c:10:82:b8:dc:
41:55:e5:6d:36:ea:56:ac:87:e3:52:d7:83:d7:55:6c:09:6c:
e2:19:97:7e:e2:0d:99:f1:dc:97:db:97:5c:6b:8b:b3:5a:40:
e8:25:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:31:45 2025 by rpki-client