Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: eFVoJ6VKfdhz5XK/G0ZT/Nf2yxVtEKiqQW4SJaUz2o0=
Subject key identifier: CD:88:39:BB:72:F2:5D:4E:E4:72:46:0C:DB:27:9D:E9:DE:40:EC:AA
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 01973919F66392828DC6F07CB2A3BC0DFFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0B48
Signing time: Wed 04 Jun 2025 04:01:32 +0000
Manifest this update: Wed 04 Jun 2025 04:01:32 +0000
Manifest next update: Thu 05 Jun 2025 04:01:32 +0000
Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=)
2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: lhJL8eypceXFLg3BDl3s/svqoc4+/EN1WWyT6bCqMg8=)
3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:19:f6:63:92:82:8d:c6:f0:7c:b2:a3:bc:0d:ff:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Jun 4 04:01:32 2025 GMT
Not After : Jun 5 04:01:32 2025 GMT
Subject: CN=cd8839bb72f25d4ee472460cdb279de9de40ecaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:6a:45:52:2f:40:86:16:ba:21:96:4e:62:
08:42:b9:68:cd:9b:04:1a:43:6f:b6:b2:0b:d6:2b:
97:5d:6a:c5:2e:99:db:33:cc:6f:f2:96:9a:ee:0f:
64:92:1d:30:42:d7:f1:fb:5a:50:c7:23:5b:14:c2:
cc:d7:c7:5f:98:93:74:25:7f:fe:b5:fa:87:88:51:
8b:0c:38:12:19:bd:e4:a6:9a:31:ca:9e:74:0c:a2:
f5:c1:ad:8e:57:01:2b:33:5e:cf:26:7a:77:0e:bf:
da:42:d9:18:6f:c8:32:29:72:e7:11:fb:5f:d6:ed:
d8:f5:ba:fc:ae:90:ec:d0:3d:55:0f:f0:2f:32:11:
0b:64:e2:26:aa:c6:63:0f:29:ff:e5:2e:f4:a9:55:
3e:93:69:9c:5c:84:9d:32:68:16:e6:4e:72:10:a7:
9d:8d:89:6f:ba:8c:92:1e:c5:97:02:4a:04:96:1b:
20:70:b4:22:74:26:4b:00:ce:cc:a3:2e:4c:3b:39:
57:1b:cb:38:25:78:a3:b6:2b:31:64:c6:0c:28:36:
7b:8c:9f:ae:23:1d:08:be:3d:d3:6c:32:98:ef:33:
c3:fe:30:fc:91:b9:ce:af:1c:d0:86:f5:ec:a8:aa:
99:03:a1:21:2e:7a:eb:c5:d5:36:7d:d2:5c:d2:c4:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:88:39:BB:72:F2:5D:4E:E4:72:46:0C:DB:27:9D:E9:DE:40:EC:AA
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:87:e0:d8:e6:b2:5f:5c:db:33:79:51:d6:aa:16:e2:15:b9:
3c:92:5e:51:09:8b:6e:3f:b0:83:44:a4:a6:ef:73:8e:2d:a3:
d9:fa:9c:f8:6d:55:03:63:02:d4:c9:fc:84:5e:22:33:14:11:
39:ac:82:34:60:59:bf:e0:d1:e3:24:7b:44:e5:75:af:7f:65:
f8:7e:1c:05:e2:e4:8a:19:d1:a4:58:c8:37:d9:71:22:43:31:
69:a7:c6:1d:b1:32:ed:9f:4c:59:ba:71:54:9e:11:51:ae:32:
34:bc:18:78:4b:4f:ab:3c:17:c8:49:1a:08:a1:ec:1d:d3:ed:
59:0b:ca:ea:99:c1:6d:22:bc:db:77:46:2f:f6:14:04:9e:2e:
8e:b5:39:8e:85:43:c2:dd:2b:f7:74:9a:7f:57:f4:20:d8:db:
26:75:34:8c:1f:0d:59:ac:27:22:ae:03:47:81:10:75:0b:d4:
ce:fa:2c:80:d7:1d:c4:c4:96:51:25:ad:30:36:be:d3:fc:94:
b7:5f:f2:b2:2e:97:df:0f:6b:47:8a:aa:24:e1:32:45:79:ca:
ff:98:d8:8a:28:96:e0:cc:90:07:78:63:b6:d8:90:6b:b7:90:
ed:2d:cc:fc:bb:9e:90:b1:7e:06:f1:80:59:17:9d:2f:ae:50:
4b:90:85:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:15:48 2025 by rpki-client