Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
File: dkyOsD7yMmpiDfEAVI0fBth0VRo.mft (raw, json)
Hash identifier: lzSBnO3tMDQgAU/jyqr3sf0POBty5CuOFIvD0aK31tQ=
Subject key identifier: D0:E9:33:61:97:73:EA:C5:3E:28:F1:05:C1:F9:AB:4B:6C:96:53:81
Authority key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
Certificate issuer: /CN=764c8eb03ef2326a620df100548d1f06d874551a
Certificate serial: 019657270D47224A0E544EAE10DFF90A6339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
Manifest number: 0DB4
Signing time: Mon 21 Apr 2025 07:01:39 +0000
Manifest this update: Mon 21 Apr 2025 07:01:39 +0000
Manifest next update: Tue 22 Apr 2025 07:01:39 +0000
Files and hashes: 1: 6pQ6t4bP0J0fbsLbhEpUyG2VFpw.roa (hash: dOWAwUrFgwCtFG9Vv9gPLuYcFdBlCoehZxFbI34HH6c=)
2: dkyOsD7yMmpiDfEAVI0fBth0VRo.crl (hash: NHCNjaUWRAGByvK6MT4y5EV37JQTKr6vmCpMkr+Mcos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:27:0d:47:22:4a:0e:54:4e:ae:10:df:f9:0a:63:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764c8eb03ef2326a620df100548d1f06d874551a
Validity
Not Before: Apr 21 07:01:39 2025 GMT
Not After : Apr 22 07:01:39 2025 GMT
Subject: CN=d0e933619773eac53e28f105c1f9ab4b6c965381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:63:43:52:08:bb:29:22:b5:5b:f1:71:47:
1d:0c:5e:6c:9c:24:fc:44:62:e1:e7:12:36:94:00:
1d:bb:fa:91:57:24:b8:14:cd:51:c3:48:57:ef:10:
62:fe:f6:f3:f8:5a:58:9b:76:8b:8d:2d:03:4e:9d:
ae:96:18:db:bc:cc:41:c3:ce:96:f1:be:df:e1:9e:
ae:d1:a8:01:8d:4e:53:df:14:88:40:83:ed:68:af:
73:ed:fa:2e:1a:b2:44:9d:7c:b4:fc:c2:b0:fb:16:
26:11:2f:02:70:08:2c:66:a7:a8:7a:9d:9f:27:fa:
7b:f6:cf:58:a9:75:35:d2:43:4c:eb:b2:83:42:2b:
d0:f3:58:5c:98:eb:cf:6d:86:92:4a:25:d6:1b:43:
26:d8:d9:d7:e3:17:d8:a1:b3:68:27:c3:75:b1:35:
8d:93:9a:e7:92:7a:0c:1c:48:86:db:8b:6a:11:16:
cf:5f:72:cf:ba:d7:33:53:1b:0a:ae:65:f6:cf:b9:
8b:ce:9e:6c:06:11:cf:80:df:2a:19:09:d1:2a:da:
e6:5c:90:08:34:9f:a7:d2:de:9b:3a:6b:b7:cd:5f:
80:0a:5d:6b:12:dd:1a:13:60:49:72:a6:4c:fb:2e:
c2:90:5b:d7:a1:3a:04:af:d3:2b:a7:44:a1:04:c5:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E9:33:61:97:73:EA:C5:3E:28:F1:05:C1:F9:AB:4B:6C:96:53:81
X509v3 Authority Key Identifier:
keyid:76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b6:85:f8:6c:12:55:fe:63:c2:ca:0d:14:b1:c5:db:ad:c6:
71:14:26:3a:46:d9:fb:c4:28:ff:a9:ee:f3:56:f3:41:39:25:
c7:dd:52:c0:be:e8:26:b8:5f:38:4d:ad:57:57:a9:8c:34:1a:
cb:28:8e:21:ce:42:7f:31:96:41:8d:ee:06:b0:8d:7e:78:84:
af:3f:9d:e6:6c:ff:71:87:f9:0e:a0:41:d2:e2:84:77:bd:b6:
0e:c8:df:01:e2:be:a7:88:36:b4:81:18:20:31:d8:48:91:45:
e2:55:da:e4:41:7b:64:27:e6:f6:da:5d:3a:f3:c2:f0:f9:88:
47:a8:d9:e2:38:5a:65:66:1a:93:e3:e9:c3:47:bd:dc:67:b6:
d5:ec:f4:49:cb:75:e5:b2:b3:84:09:84:5f:3f:ee:75:47:df:
41:69:82:c5:b3:c9:98:39:a7:a5:ea:cb:14:7e:be:0c:04:bb:
39:51:a7:49:b6:3d:43:40:b2:e5:55:c9:a9:57:7e:2a:06:75:
7d:8a:ad:35:7a:de:06:c0:70:a7:5b:44:73:df:f8:a6:da:ed:
d5:97:20:b0:a8:7e:d5:24:d1:c2:40:97:cc:b9:d9:f2:da:ab:
0e:ae:41:3e:99:01:14:44:c2:76:49:3f:1c:ec:59:14:65:85:
70:99:95:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJw1HIkoOVE6uEN/5CmM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGM4ZWIwM2VmMjMyNmE2MjBkZjEwMDU0OGQxZjA2ZDg3
NDU1MWEwHhcNMjUwNDIxMDcwMTM5WhcNMjUwNDIyMDcwMTM5WjAzMTEwLwYDVQQD
EyhkMGU5MzM2MTk3NzNlYWM1M2UyOGYxMDVjMWY5YWI0YjZjOTY1MzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8JjQ1IIuykitVvxcUcdDF5snCT8
RGLh5xI2lAAdu/qRVyS4FM1Rw0hX7xBi/vbz+FpYm3aLjS0DTp2ulhjbvMxBw86W
8b7f4Z6u0agBjU5T3xSIQIPtaK9z7fouGrJEnXy0/MKw+xYmES8CcAgsZqeoep2f
J/p79s9YqXU10kNM67KDQivQ81hcmOvPbYaSSiXWG0Mm2NnX4xfYobNoJ8N1sTWN
k5rnknoMHEiG24tqERbPX3LPutczUxsKrmX2z7mLzp5sBhHPgN8qGQnRKtrmXJAI
NJ+n0t6bOmu3zV+ACl1rEt0aE2BJcqZM+y7CkFvXoToEr9Mrp0ShBMV0wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDpM2GXc+rFPijxBcH5q0tsllOBMB8GA1UdIwQY
MBaAFHZMjrA+8jJqYg3xAFSNHwbYdFUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83MTI2NWYtMGE1My00MTA2LWIyMGEt
ZjNiNTBjNjVmODIwLzEvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS83MTI2NWYtMGE1My00MTA2LWIyMGEtZjNiNTBjNjVmODIw
LzEvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLaF+GwS
Vf5jwsoNFLHF263GcRQmOkbZ+8Qo/6nu81bzQTklx91SwL7oJrhfOE2tV1epjDQa
yyiOIc5CfzGWQY3uBrCNfniErz+d5mz/cYf5DqBB0uKEd722DsjfAeK+p4g2tIEY
IDHYSJFF4lXa5EF7ZCfm9tpdOvPC8PmIR6jZ4jhaZWYak+Ppw0e93Ge21ez0Sct1
5bKzhAmEXz/udUffQWmCxbPJmDmnperLFH6+DAS7OVGnSbY9Q0Cy5VXJqVd+KgZ1
fYqtNXreBsBwp1tEc9/4ptrt1ZcgsKh+1STRwkCXzLnZ8tqrDq5BPpkBFETCdkk/
HOxZFGWFcJmV4A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:48 2025 by rpki-client