Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: 3hhxSjaOuif3If64p9SIIp5aaAJQmjCMHXQmG0wyQ4k=
Subject key identifier: DD:8C:4D:8E:79:B7:B0:97:19:67:1B:9A:C0:19:70:F1:FC:2A:B8:D5
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 019512471556227F5BC7F610CC526FA71F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 05:00:03 +0000
Manifest this update: Mon 17 Feb 2025 05:00:03 +0000
Manifest next update: Tue 18 Feb 2025 05:00:03 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: JpTpE04V5L9eoQ4gmF65N9QSGue6roARxHdSfm58PKY=)
2: OsEqbh-MgAhZY6dEETKTLoVhiek.roa (hash: 8l+J0cXRIwFphYGIY8ShZlRzu2XOdk8YK7YXmH85akQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:15:56:22:7f:5b:c7:f6:10:cc:52:6f:a7:1f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: Feb 17 05:00:03 2025 GMT
Not After : Feb 18 05:00:03 2025 GMT
Subject: CN=dd8c4d8e79b7b09719671b9ac01970f1fc2ab8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:65:86:58:f6:9e:cd:24:93:23:c5:99:a8:26:
e7:3c:3a:9f:cd:a5:a1:79:57:7d:1a:0e:7b:5c:a4:
e5:b4:c7:95:bb:c5:bc:3c:69:cd:e1:1e:fe:6f:65:
95:2e:53:5f:83:82:56:b5:cd:90:f5:f2:e8:22:37:
bb:09:5e:77:ce:66:28:6c:c0:3d:4d:e6:bc:a8:6e:
b0:d1:1e:48:56:f4:b5:0d:ea:ef:34:c2:bb:ec:09:
c3:85:9a:31:69:e8:6e:bf:99:71:fe:be:88:69:8a:
b8:b9:f4:ea:67:23:97:3f:87:d8:ae:b5:18:ad:26:
85:87:07:87:34:df:46:fa:95:7c:b3:ba:14:5e:8e:
ee:23:a5:92:23:ea:b8:d9:df:79:19:07:ca:bb:ec:
1d:8f:35:1a:75:7d:49:be:05:a5:c3:c3:7b:1d:18:
d2:47:64:fe:23:be:56:b4:24:ad:a8:16:fe:f3:e6:
e3:85:da:56:31:81:ce:7a:52:be:87:c4:19:dd:e1:
41:79:66:8f:85:ea:1a:0a:25:46:1f:3e:9e:4d:06:
5b:14:d2:2f:c3:8e:7e:94:7c:6f:1b:5f:11:99:c4:
60:6d:40:fa:95:58:63:9c:5d:b0:3c:d2:31:bd:0e:
49:f8:b2:5b:42:14:14:91:2e:b8:e8:eb:20:17:f5:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8C:4D:8E:79:B7:B0:97:19:67:1B:9A:C0:19:70:F1:FC:2A:B8:D5
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e4:85:11:b6:53:00:0c:1a:7f:0d:d4:1d:bd:eb:4e:91:48:
22:08:5a:a2:12:fb:8d:a9:69:3c:58:10:14:7a:58:92:6e:d0:
d8:f9:f4:57:41:35:ba:7e:cf:9a:c3:19:32:04:ba:3d:34:bf:
68:f4:45:93:4b:0e:df:ed:20:6e:8a:ff:25:48:71:ea:2e:93:
5a:57:18:81:a7:13:b5:e8:bb:77:d1:51:e7:ab:f8:85:10:c2:
8c:8d:bb:7a:ab:e2:f0:7f:a6:33:8d:d3:ea:f2:79:f2:04:b7:
b9:a8:2c:bb:f5:02:e5:9e:09:0b:38:0f:81:c3:42:8b:93:8b:
b4:97:d1:83:4a:42:5c:84:1d:6c:3c:8a:15:64:8d:3d:ec:2a:
2d:c8:0b:b1:1c:81:2c:9d:57:61:3e:bd:07:2c:46:7e:51:18:
0c:be:23:77:65:b9:cb:36:84:95:58:8e:22:d2:22:88:51:18:
e6:d2:54:4a:1d:29:dc:32:d3:a9:f9:3c:6d:64:89:d2:c4:14:
1d:d4:ec:65:85:62:f4:96:b4:c8:1f:c2:a5:e3:6d:42:2e:16:
b2:e6:78:3b:ab:5c:bc:d1:74:63:22:4e:23:15:f5:17:72:72:
43:e7:a4:65:35:f7:91:94:a7:15:f1:43:0c:25:68:c7:68:43:
50:8e:0c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:34 2025 by rpki-client