Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: 0CtSsjpd3aTizogPGDM7JCtLjl43t6UwDdEvBwxRGJ8=
Subject key identifier: BF:E1:74:F3:0D:51:05:F7:D2:94:A2:FA:E6:39:A5:4A:1A:59:2A:C0
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 01964C6C0475D78A72656FEFEAD606527D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 1079
Signing time: Sat 19 Apr 2025 05:01:09 +0000
Manifest this update: Sat 19 Apr 2025 05:01:09 +0000
Manifest next update: Sun 20 Apr 2025 05:01:09 +0000
Files and hashes: 1: NAckqIZ_cv_U6_Szqr3B6DGq59M.roa (hash: 5rHZMnA6S2Xi93gDSPJjpPOy7VNVc2TB29KreGnvwEQ=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: n48bqN0f8gnzAOPYHKf5ytLHJHq2WC/DW225MfWf4Oo=)
3: hPRhT7rkMq9JixnaKQg6MXIa6w0.roa (hash: 47HMse7zHITwF5pv9mb9OCNw4X4BUCmXu1B+299Il/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6c:04:75:d7:8a:72:65:6f:ef:ea:d6:06:52:7d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Apr 19 05:01:09 2025 GMT
Not After : Apr 20 05:01:09 2025 GMT
Subject: CN=bfe174f30d5105f7d294a2fae639a54a1a592ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:a1:b1:10:74:19:ed:06:61:d9:ae:ed:b5:
3a:43:f9:e3:ad:27:53:52:be:fc:d9:c0:9c:66:1b:
ae:09:bc:02:48:50:b8:f1:bc:59:6e:d6:27:ea:4a:
e0:e5:d2:82:83:cd:50:4a:86:fc:69:f4:b2:5e:ee:
34:3a:b9:00:4a:61:f0:61:76:0f:68:50:cb:a6:5f:
cf:e7:46:79:ff:07:ad:e9:de:a8:20:04:9d:4d:09:
38:9e:58:5f:48:ef:fb:e7:fa:48:ee:74:ce:08:5a:
f3:f1:ea:81:74:04:58:8f:8a:e4:19:b7:c1:cc:48:
1b:d7:4c:8c:38:d6:c1:7f:36:81:ec:eb:1b:7c:1c:
97:05:c0:ac:4d:38:4a:d3:2c:9f:02:ba:75:0f:8d:
a0:17:42:5a:87:a1:38:e8:1e:32:76:82:99:84:1c:
04:da:07:31:cf:77:dc:62:7c:a7:33:a1:e0:ce:19:
c0:0d:76:a2:29:5d:70:16:7d:27:57:f6:27:37:6b:
a6:00:c8:f7:93:1d:7c:8b:79:a5:84:7e:cc:de:f4:
45:29:a2:64:34:b6:b5:c2:af:0e:2c:51:1f:29:0a:
bb:c1:c5:3c:aa:52:c9:a0:e8:bb:07:cd:37:9a:2e:
74:37:63:f2:c4:3e:9f:f7:3f:90:ae:b2:d2:c0:41:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E1:74:F3:0D:51:05:F7:D2:94:A2:FA:E6:39:A5:4A:1A:59:2A:C0
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:b3:a4:26:20:99:a9:5e:53:7e:f3:c0:ca:68:00:ff:c1:81:
fc:0f:64:49:29:4e:8e:8c:2a:04:7b:63:1e:dd:e3:27:36:25:
f0:9d:60:33:eb:ab:46:8c:76:37:10:ad:e6:1d:c6:4d:e7:18:
a5:19:67:82:7c:9c:e1:2e:88:6d:bd:1b:1e:13:36:73:56:4c:
4e:1f:bd:0c:dc:9a:43:35:2e:89:3e:91:14:94:de:c7:92:cb:
fb:ba:4d:ea:2c:bd:50:c7:12:be:e2:5d:5a:ce:92:82:8a:1c:
4e:f7:72:38:dc:c6:f3:65:bd:f2:96:60:1d:20:97:51:dc:03:
d2:d6:b1:10:57:f3:6f:e9:7d:86:50:45:77:33:6c:6a:95:ed:
02:f6:af:a6:e0:0d:ec:7d:c7:b7:4a:3a:3a:10:06:f1:fe:01:
9f:d5:99:15:45:e9:6b:8d:a6:b6:0a:4d:70:71:70:be:22:e4:
8d:a9:92:07:69:84:ad:1d:89:0f:8f:d3:ca:cf:e2:95:9b:9d:
23:b4:29:9c:ad:6b:cd:fe:0d:c5:77:b0:05:92:ab:fb:6d:1c:
dc:80:06:96:6a:23:d5:6a:98:e0:cc:64:b8:dd:82:d1:07:17:
d1:38:b2:e2:a3:b2:72:30:d4:d0:0c:f7:b3:7a:f5:49:71:d8:
30:04:5b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:11:57 2025 by rpki-client