Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: ObeXPA5Fv5X64BLaTcCnET32RwaBcriUHfUVaMrNCNI=
Subject key identifier: B3:64:DE:98:C9:A1:A9:4B:45:9F:A5:64:75:23:80:92:2F:EF:9F:14
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 01965C838FAEF08E82CABA0C7F8B4F9FD8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 08:00:47 +0000
Manifest this update: Tue 22 Apr 2025 08:00:47 +0000
Manifest next update: Wed 23 Apr 2025 08:00:47 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: FaJHfEZtIZJHlxmx1SCpSn2pEDn94XpQdvaPw1DwiIY=)
2: OsEqbh-MgAhZY6dEETKTLoVhiek.roa (hash: 8l+J0cXRIwFphYGIY8ShZlRzu2XOdk8YK7YXmH85akQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:8f:ae:f0:8e:82:ca:ba:0c:7f:8b:4f:9f:d8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: Apr 22 08:00:47 2025 GMT
Not After : Apr 23 08:00:47 2025 GMT
Subject: CN=b364de98c9a1a94b459fa564752380922fef9f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:22:5c:0d:11:6a:19:80:9c:ed:f5:7d:bc:
56:75:02:85:24:73:8f:6c:31:2d:37:c2:3e:a7:8a:
8c:d8:18:5c:95:e7:43:13:60:44:e3:7f:74:6b:ea:
b6:3f:cd:f2:a0:60:45:50:5e:e5:11:36:3a:87:4c:
56:fd:78:f3:31:01:9f:61:72:70:05:fc:d9:b5:4d:
58:a8:51:25:2c:18:e4:f5:29:1e:54:ad:cb:ad:98:
af:e3:4f:40:57:46:26:05:2d:f4:71:d8:64:b2:fe:
b2:10:02:db:24:ef:7e:fe:82:f2:f3:f5:6f:11:c6:
45:42:1d:8c:41:07:e0:9f:51:cf:c1:89:32:8f:c6:
c7:56:77:a9:8d:8b:a7:ce:f7:e3:3e:47:ea:24:ee:
df:bc:f7:4d:3e:aa:e5:ee:ea:da:04:d1:69:fe:7d:
92:08:07:ee:0e:04:3b:76:16:cb:da:55:b2:af:ba:
7b:d9:cb:35:78:98:fb:b2:60:1f:b9:33:ef:ea:e4:
6c:18:95:bb:bc:9c:2d:bb:6e:70:94:4b:40:b1:81:
e7:06:b9:be:b3:fa:72:3f:80:85:cd:6e:c2:ba:a7:
bd:44:67:87:8b:f0:39:6b:50:2b:77:6c:1e:b2:6f:
8b:9e:1f:62:35:5a:fe:1c:6b:a2:65:5f:c6:e6:55:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:64:DE:98:C9:A1:A9:4B:45:9F:A5:64:75:23:80:92:2F:EF:9F:14
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:aa:8f:28:42:77:c5:70:ed:3f:e4:db:7d:3b:7d:61:8a:cc:
2b:c0:cc:a1:1e:90:2b:4c:d1:5b:59:f9:54:be:a6:a4:4b:9e:
75:59:c0:d0:7c:59:f9:4b:cf:b9:d0:16:bd:d2:7c:2a:f2:36:
ea:65:ba:f2:f9:43:28:18:e6:9d:25:a0:02:15:7a:77:9c:08:
c7:96:af:64:4e:ed:89:3b:c7:5a:98:74:61:71:42:cd:82:69:
9c:88:e6:d4:dd:90:ce:c6:eb:31:6d:4e:21:3c:bd:bc:ca:76:
32:9e:e1:c2:ca:ef:67:82:e4:44:67:75:2a:1a:32:74:c5:73:
db:2c:c7:3e:84:45:0c:d9:0f:f2:3f:88:bf:95:25:43:40:ae:
57:b5:72:48:1e:8e:6b:28:d0:20:2f:31:c1:09:3d:38:63:03:
fb:e9:f7:75:d3:52:fc:9e:fd:18:6c:27:17:e3:05:e4:3f:69:
cb:d3:d0:b0:84:91:06:87:21:58:c5:26:43:63:f3:f7:25:0e:
92:90:38:f5:e4:a6:de:81:a2:cd:40:37:46:27:03:64:bf:6e:
77:1f:3a:a4:6e:89:ec:a7:14:05:2e:89:3a:e3:7f:7c:50:0d:
94:d0:44:1c:50:6e:53:c0:2a:40:ad:ed:ba:3b:19:f5:30:e9:
bf:9e:15:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:59:57 2025 by rpki-client