Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: i4RZGBxbo0GTXWysfhDqnW1n+Z4XbVQ8ecoSB+0vSAs=
Subject key identifier: 03:27:99:15:B2:C5:A0:4F:4F:AF:14:18:DB:B3:CB:D2:6C:96:58:DA
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 01974AB1790F25E973EA37B923691F6B8DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 14:00:34 +0000
Manifest this update: Sat 07 Jun 2025 14:00:34 +0000
Manifest next update: Sun 08 Jun 2025 14:00:34 +0000
Files and hashes: 1: 1cBDORiVvrRChAcdm2hc6y292d0.roa (hash: XIDQHNSLIfpf1kaFUtLQNCl28oalABx/0LdYZxGeMgk=)
2: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: Zk+fCgMW6BMhfjb0iVfExcl/D/ySXz6ked2lGiOCsbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:79:0f:25:e9:73:ea:37:b9:23:69:1f:6b:8d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Jun 7 14:00:34 2025 GMT
Not After : Jun 8 14:00:34 2025 GMT
Subject: CN=03279915b2c5a04f4faf1418dbb3cbd26c9658da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:c0:ee:fc:47:1c:4e:89:6e:df:a4:f3:63:
25:d7:11:47:77:2d:c6:40:d8:39:55:57:5f:78:04:
b0:4f:d6:9b:0d:b0:02:3f:a2:39:49:64:88:c8:c6:
90:d5:21:5a:68:ca:c2:4d:4e:10:c0:c2:15:31:ec:
c7:1e:b4:ce:f5:e6:26:0b:db:2f:92:18:15:99:66:
f3:7b:7e:70:5e:45:8f:08:b6:18:3f:62:de:1e:82:
82:21:ef:ec:24:25:56:79:13:b8:55:16:67:28:a9:
5e:21:33:d5:b5:fc:f1:f1:c9:e7:00:74:bf:2f:61:
4a:9c:75:2d:6b:21:51:f4:41:19:3e:b7:40:48:70:
f5:d7:2b:46:93:ad:f3:dd:8f:1b:e0:19:e0:b0:0d:
11:41:1a:d1:83:95:ef:cc:e9:88:27:5b:05:12:73:
aa:54:af:49:a5:cd:92:a2:0b:91:b5:5b:5b:64:f5:
bb:29:38:ce:1e:c7:55:d5:d3:3e:6d:37:c8:e0:87:
16:83:91:1a:37:95:b3:21:3d:d0:73:ed:5c:a0:88:
d7:5f:38:41:25:41:5c:66:21:ce:cd:4a:34:e1:0b:
a6:49:c4:4c:58:5b:0a:3c:04:e1:fe:17:e5:bb:7e:
70:c1:ca:df:8e:2d:57:b5:7b:b8:62:da:25:a3:8a:
e1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:27:99:15:B2:C5:A0:4F:4F:AF:14:18:DB:B3:CB:D2:6C:96:58:DA
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:71:69:b6:e0:b4:7c:7f:97:aa:45:74:36:8d:4d:ba:1e:59:
a4:76:36:d3:8e:4a:21:10:ee:83:84:5d:ad:f8:d1:aa:86:aa:
cc:67:5f:5f:05:68:41:4e:62:c6:2a:4b:df:4b:76:64:76:fa:
c3:ef:45:c1:44:49:6f:8d:c5:da:ad:91:a0:a4:b9:b1:a3:2d:
3f:26:db:9a:83:2a:ba:02:0a:65:4e:7e:dd:d2:a8:bf:63:b3:
46:ec:22:c9:03:4e:7c:ed:1b:37:eb:a4:74:98:41:f4:12:54:
8d:83:28:ef:c4:22:10:76:33:d3:a4:f9:7a:a8:61:f0:0c:46:
be:69:bd:fd:60:2e:a8:f8:53:de:21:7c:93:25:32:48:b3:82:
2b:e2:a3:25:7b:82:ce:dd:86:a6:6a:d2:05:fa:dd:a8:05:71:
2d:9c:37:37:32:11:dc:a3:9b:a0:10:e9:8b:c3:15:46:67:40:
92:59:4b:7f:da:fd:80:d7:97:ae:9b:6f:81:ee:87:7d:7f:02:
de:2e:f0:39:74:f0:ee:27:9e:2d:9a:db:fa:c2:5e:d7:c5:17:
88:5e:9e:5d:62:1b:1c:a6:df:bb:af:6d:a4:83:1c:6b:ef:36:
f1:0b:2f:b2:2a:44:1f:fa:5e:1d:cd:73:98:23:eb:72:fc:1f:
28:a6:d2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:10 2025 by rpki-client