Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: O/MLOHYh3SaUXGB1nUgrfJBZ16vx/ezitwA7urFWFaE=
Subject key identifier: 49:45:B3:3B:E8:14:B3:8D:F4:3E:7F:3D:E5:28:24:C6:CE:58:B6:D3
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 0196538055C411F62CB08C7D771EA774852A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 14:00:41 +0000
Manifest this update: Sun 20 Apr 2025 14:00:41 +0000
Manifest next update: Mon 21 Apr 2025 14:00:41 +0000
Files and hashes: 1: 1cBDORiVvrRChAcdm2hc6y292d0.roa (hash: XIDQHNSLIfpf1kaFUtLQNCl28oalABx/0LdYZxGeMgk=)
2: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: +dWPumRmj2Za8bP9FZ8MSXw7iRLLSMKmfKBEZOPSdeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:55:c4:11:f6:2c:b0:8c:7d:77:1e:a7:74:85:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Apr 20 14:00:41 2025 GMT
Not After : Apr 21 14:00:41 2025 GMT
Subject: CN=4945b33be814b38df43e7f3de52824c6ce58b6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:48:88:e1:e8:2c:19:b2:fc:e2:26:54:45:
05:a1:ed:8f:9a:ca:63:fd:bb:40:45:d0:40:5e:4b:
d9:70:72:ee:6a:9d:c8:8a:22:ba:d3:ca:6c:9b:11:
b0:67:df:04:49:88:bd:24:4f:b0:c7:24:a3:eb:d7:
a6:2f:73:74:65:08:52:b7:91:c4:67:38:7f:ad:07:
52:79:d1:1a:d0:8f:bc:6e:b9:03:4c:a0:96:59:d2:
6d:ed:da:02:16:d2:51:be:3c:45:f9:b1:6e:4f:93:
66:20:d7:a1:7b:ec:89:24:ca:2c:15:c5:3f:9d:4e:
ae:69:32:27:1c:0b:79:dd:9c:c8:e2:9f:1e:27:0b:
83:fa:8c:c2:93:78:3b:85:fa:2b:e1:5d:03:7c:84:
e4:66:f8:6c:73:07:54:88:11:74:c4:ae:c1:94:a0:
6c:a7:41:13:a7:c5:45:85:77:18:ef:08:45:4e:a4:
a0:fd:55:dd:89:a0:ff:f5:66:58:f0:8f:c1:14:c4:
f7:6e:43:53:47:da:a4:c5:26:49:3a:e8:cb:fe:75:
78:95:64:e5:c4:14:c8:d6:13:4c:ac:46:92:93:d2:
1e:25:36:63:a0:13:15:f6:36:8e:41:ec:53:de:16:
24:d8:4b:43:43:c8:ca:69:8e:0d:4e:5f:9f:b7:d4:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:45:B3:3B:E8:14:B3:8D:F4:3E:7F:3D:E5:28:24:C6:CE:58:B6:D3
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:eb:b1:95:13:56:2c:cf:d2:70:d3:54:1d:f5:4b:f9:bd:b6:
97:ad:69:73:96:99:eb:d0:47:a9:5b:84:6c:5f:b0:65:66:44:
0e:59:0f:f2:38:92:a0:f3:8a:03:37:d7:11:2c:3b:77:d2:c8:
b3:53:c5:cb:86:40:92:3c:15:da:67:57:ff:f9:ad:b1:14:ab:
a4:96:4d:56:7b:a8:d8:66:21:3f:c4:3f:ff:36:04:d7:dd:6c:
05:9d:dc:98:92:a1:00:5b:e4:55:63:09:6f:a2:55:24:be:47:
3d:fe:c4:1e:e9:e6:0f:7e:cd:90:9c:0c:db:b9:54:61:d2:c8:
97:45:ac:6b:66:59:9b:a1:13:76:b1:29:15:89:26:6e:bc:fd:
bf:9d:98:15:97:03:c8:ff:df:71:80:eb:b8:5c:04:be:c3:14:
3b:18:ea:98:fc:c5:d3:2c:87:cc:c7:0c:79:25:0d:0c:d7:aa:
a8:0e:7c:63:a2:37:9c:8a:4a:ec:0d:bf:84:bc:57:5f:e8:51:
ba:5d:6b:e4:2b:9a:ee:67:5b:a3:83:54:91:d8:9c:17:05:08:
7c:cd:06:bd:b7:96:b6:d1:42:06:31:e2:8c:5a:db:64:df:cb:
7a:b8:1f:f8:69:36:d1:fd:02:42:6e:ed:0f:7a:bf:82:74:76:
a4:d1:92:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTgFXEEfYssIx9dx6ndIUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYTRiYjY5YjNmNTY4MDUxNDBlZmFlMjQzZTRkZDRiMzZj
MGRkMWIwHhcNMjUwNDIwMTQwMDQxWhcNMjUwNDIxMTQwMDQxWjAzMTEwLwYDVQQD
Eyg0OTQ1YjMzYmU4MTRiMzhkZjQzZTdmM2RlNTI4MjRjNmNlNThiNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKJIiOHoLBmy/OImVEUFoe2Pmspj
/btARdBAXkvZcHLuap3IiiK608psmxGwZ98ESYi9JE+wxySj69emL3N0ZQhSt5HE
Zzh/rQdSedEa0I+8brkDTKCWWdJt7doCFtJRvjxF+bFuT5NmINehe+yJJMosFcU/
nU6uaTInHAt53ZzI4p8eJwuD+ozCk3g7hfor4V0DfITkZvhscwdUiBF0xK7BlKBs
p0ETp8VFhXcY7whFTqSg/VXdiaD/9WZY8I/BFMT3bkNTR9qkxSZJOujL/nV4lWTl
xBTI1hNMrEaSk9IeJTZjoBMV9jaOQexT3hYk2EtDQ8jKaY4NTl+ft9RkCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElFszvoFLON9D5/PeUoJMbOWLbTMB8GA1UdIwQY
MBaAFAyku2mz9WgFFA764kPk3Us2wN0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQt
ZDdmNDVlMGE3NzM2LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQtZDdmNDVlMGE3NzM2
LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+uxlRNW
LM/ScNNUHfVL+b22l61pc5aZ69BHqVuEbF+wZWZEDlkP8jiSoPOKAzfXESw7d9LI
s1PFy4ZAkjwV2mdX//mtsRSrpJZNVnuo2GYhP8Q//zYE191sBZ3cmJKhAFvkVWMJ
b6JVJL5HPf7EHunmD37NkJwM27lUYdLIl0Wsa2ZZm6ETdrEpFYkmbrz9v52YFZcD
yP/fcYDruFwEvsMUOxjqmPzF0yyHzMcMeSUNDNeqqA58Y6I3nIpK7A2/hLxXX+hR
ul1r5Cua7mdbo4NUkdicFwUIfM0GvbeWttFCBjHijFrbZN/Lergf+Gk20f0CQm7t
D3q/gnR2pNGSWw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:33 2025 by rpki-client