Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: hUptij9ca9/rbSxElhVmZoz0twwJJvnKAQRizhfdD50=
Subject key identifier: 5C:0B:BB:55:1B:61:CE:A1:46:57:A0:B8:89:7F:F7:41:20:13:33:4C
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 0196041D08EB2853DB661517D62E155671A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0AA8
Signing time: Sat 05 Apr 2025 04:02:13 +0000
Manifest this update: Sat 05 Apr 2025 04:02:13 +0000
Manifest next update: Sun 06 Apr 2025 04:02:13 +0000
Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=)
2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: mSMmuvmC+wbOM/20fP8TBfMdGdKXsSqbg6Q4gE/vU0g=)
3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:1d:08:eb:28:53:db:66:15:17:d6:2e:15:56:71:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Apr 5 04:02:13 2025 GMT
Not After : Apr 6 04:02:13 2025 GMT
Subject: CN=5c0bbb551b61cea14657a0b8897ff7412013334c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c1:2d:94:ba:8c:c6:aa:4c:5b:65:2c:24:95:
90:5f:ae:ad:fc:c2:8d:eb:88:5d:56:a7:68:1b:c0:
fd:0b:51:2f:5c:58:08:1f:20:18:d2:f4:34:36:e4:
17:f1:ac:60:a3:50:8f:ce:53:d4:0c:6f:a3:05:02:
ff:26:5c:08:43:62:06:82:0b:c4:29:83:33:40:46:
18:5f:fd:80:29:ef:cf:da:ef:5f:08:63:2c:20:49:
93:0c:93:4a:e9:a7:07:f7:91:5f:e9:8e:d4:96:3f:
08:80:44:eb:b4:dc:40:64:ea:2a:67:37:f8:ad:46:
b2:86:09:dc:15:ed:f1:36:3c:e1:69:5d:12:e8:ff:
ee:00:42:4a:72:1d:31:f3:64:06:14:58:fa:d4:3f:
e6:11:de:d6:c0:d1:bc:04:c1:13:e2:7e:fe:ea:26:
cc:99:7c:54:b4:14:88:38:7c:64:9a:ed:96:a2:65:
bb:de:0a:8f:ab:f2:68:90:43:39:7f:11:c7:56:84:
50:d0:26:fc:a9:e4:76:74:1e:1c:c6:b1:f8:16:e9:
23:1b:95:c0:27:66:86:92:28:42:8a:20:61:40:cd:
b4:28:91:89:75:69:4d:21:5a:93:18:72:3e:e0:78:
67:da:4c:73:18:75:26:10:cd:c7:89:42:74:26:03:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0B:BB:55:1B:61:CE:A1:46:57:A0:B8:89:7F:F7:41:20:13:33:4C
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1e:9f:bf:a4:b3:74:88:34:cb:e8:66:3b:bd:66:ab:75:2e:
05:c6:06:7e:31:18:7c:b8:de:15:94:4f:ca:6a:04:f7:32:46:
46:e3:b2:b1:f5:6f:90:52:c4:a4:42:84:e3:e8:be:89:11:59:
6f:54:45:51:7e:89:54:23:41:f2:f2:12:69:3e:ab:74:fb:47:
11:95:04:d6:54:dc:26:b4:43:ad:1e:e5:14:d3:b8:34:7e:be:
48:90:55:c3:42:c1:d8:09:b0:a5:cb:78:61:d9:3f:6f:05:22:
76:67:52:73:76:54:44:42:7b:bf:39:14:ea:89:f1:3f:cc:4a:
ea:f5:b5:de:4c:40:23:4c:42:0f:e9:a5:c7:3a:90:7b:2b:01:
90:35:e8:6d:c6:bb:d2:f2:c1:e8:31:72:4d:ea:8e:b3:86:ff:
69:97:00:2a:1b:07:f3:3f:ec:93:8b:b1:72:e9:70:fa:e3:0e:
0f:92:35:17:de:02:27:d0:60:ce:28:22:34:f0:86:03:59:01:
c9:7f:55:3c:4d:2a:57:ad:d7:18:7f:10:f1:67:f1:91:48:73:
95:6e:d9:4a:89:0e:d9:41:a8:3d:7f:b6:9c:2b:30:ac:fe:88:
e0:3c:85:f9:bf:19:5f:9e:9a:5b:09:c3:1f:77:44:ff:b5:63:
39:34:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:18 2025 by rpki-client