Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
File: dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json)
Hash identifier: GEramfmB+MTXbmtckcj4e9fb3HPSdLHainIzhoskSzw=
Subject key identifier: 9A:D9:51:7A:8C:77:4E:BA:65:EF:04:3E:2C:8A:2A:C7:74:5D:53:D3
Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Certificate serial: 019653B711505E02F342BC63285D7B20C0BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
Manifest number: 1150
Signing time: Sun 20 Apr 2025 15:00:28 +0000
Manifest this update: Sun 20 Apr 2025 15:00:28 +0000
Manifest next update: Mon 21 Apr 2025 15:00:28 +0000
Files and hashes: 1: 6S1fN0Slf3Y95btQEfpy__y_tiw.roa (hash: 5FWi2gr8yiM3yt2DtW3oiI0p1G9KyA1KVfzD3/JWlJI=)
2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: F8whkBuGRgQCAu/IdDyO9f5xNrWY6neSDsWdxYX2zEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:11:50:5e:02:f3:42:bc:63:28:5d:7b:20:c0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Validity
Not Before: Apr 20 15:00:28 2025 GMT
Not After : Apr 21 15:00:28 2025 GMT
Subject: CN=9ad9517a8c774eba65ef043e2c8a2ac7745d53d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:1e:18:ae:7e:98:3d:b0:9c:50:79:fd:4d:
fb:9d:51:d1:26:5c:4d:93:2a:4a:d3:20:a4:a4:b0:
fc:8e:3e:6f:ac:67:60:ff:09:6e:a7:7c:12:48:f6:
35:a6:63:69:6b:e0:10:30:85:7c:43:1d:45:75:09:
af:fd:ba:de:94:9b:15:c6:1e:50:ca:4d:2f:cb:ea:
f2:51:e3:cb:27:8b:16:5e:22:06:91:37:fc:87:e2:
18:36:9c:23:37:ca:9e:f0:52:ed:d2:68:0c:cb:de:
04:ca:e3:e7:bc:c9:d9:89:c3:94:8f:84:cb:26:92:
65:d5:9e:02:fe:e8:69:5b:20:40:93:8b:4e:dd:c4:
d8:3e:6e:e9:c5:df:a4:c5:05:d1:09:4e:f3:4b:56:
94:3a:23:cf:98:6d:01:92:74:03:6d:a6:da:8e:46:
5f:08:35:49:da:16:e6:b9:5e:8d:76:2c:81:6a:09:
46:22:c6:55:d7:9c:5e:a5:9f:4c:78:7e:d4:e6:5e:
8b:98:21:c7:3e:d6:c0:4f:f9:58:0a:17:b7:6d:62:
5b:ca:27:92:30:5d:bc:ed:69:bc:21:3a:fb:56:db:
60:77:02:d2:c8:16:c7:c2:63:15:3a:c7:39:a6:79:
a0:b7:07:c9:fc:59:eb:f4:c0:f4:a1:9d:01:73:61:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D9:51:7A:8C:77:4E:BA:65:EF:04:3E:2C:8A:2A:C7:74:5D:53:D3
X509v3 Authority Key Identifier:
keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:56:00:e7:ec:af:43:de:12:ef:cf:e9:54:17:73:b1:30:2a:
0e:b5:e7:76:cb:d1:18:1f:d3:2e:a7:c8:b8:3b:f5:18:18:0b:
93:d4:07:4e:ad:ce:14:ea:94:be:dd:27:60:7a:1f:63:42:eb:
99:64:d9:1f:d4:ad:cf:68:54:39:92:6e:64:56:18:47:c5:6a:
6f:d8:d9:4d:2d:96:0d:f8:2a:8d:18:4a:ce:76:be:cd:cf:f0:
fe:c7:60:15:2c:45:e0:49:ec:5d:e2:3f:20:19:2e:47:a3:8a:
74:87:d2:e9:aa:85:d4:2e:d2:21:11:3c:ea:bf:c9:b5:86:1b:
31:17:bb:4f:b7:59:1d:65:b9:cd:5c:cb:67:4f:d8:9e:f5:56:
e5:ae:2f:c3:1b:5e:04:3e:a0:ff:69:91:75:79:c0:b5:56:57:
39:6a:32:ef:49:e8:9b:46:70:39:34:aa:7c:13:d4:a7:cd:1d:
79:65:7c:1b:48:90:15:ca:84:a6:16:d4:e7:ef:0c:b7:df:98:
6c:c5:60:c4:43:18:fe:97:a0:71:dd:98:07:6f:46:a2:c9:d0:
ad:60:b7:56:48:b6:73:07:41:2c:60:64:61:34:39:6d:89:62:
16:5f:fb:4a:e9:91:50:f2:eb:26:ae:11:c3:66:40:26:c7:73:
7c:96:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:10:22 2025 by rpki-client