Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier: eYBz5MrPQXuuGzybFQZCf7UKYMBs0O2OrCEYCypMgJc=
Subject key identifier: 3C:BF:4D:69:D5:64:DB:FB:28:DB:FA:8E:D4:9F:18:7B:30:FD:CF:6C
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial: 019752A229FEE6CFFC8D606B502AEBA7F0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number: 1298
Signing time: Mon 09 Jun 2025 03:00:48 +0000
Manifest this update: Mon 09 Jun 2025 03:00:48 +0000
Manifest next update: Tue 10 Jun 2025 03:00:48 +0000
Files and hashes: 1: 8JHdroSmFbW7TogZWDAIS298pfo.roa (hash: goVtVxuEC9QAmF+Kz0vzUzxl+/V8u83qUjrsL0jlHNw=)
2: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: tzwCXhQzOiKBCaqgrybtzk6BcZyyi/AAEOH7s8hexUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:29:fe:e6:cf:fc:8d:60:6b:50:2a:eb:a7:f0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Validity
Not Before: Jun 9 03:00:48 2025 GMT
Not After : Jun 10 03:00:48 2025 GMT
Subject: CN=3cbf4d69d564dbfb28dbfa8ed49f187b30fdcf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:44:84:3b:42:b9:1d:50:47:17:15:61:5a:
f4:3f:86:01:47:83:61:98:55:0a:f1:f1:d2:5b:e6:
70:fa:e0:52:3b:54:2e:d2:3a:47:db:42:ad:7a:e5:
0e:b4:26:b6:06:c8:2e:6e:3f:b5:aa:84:e9:bf:13:
14:93:01:8c:14:13:7f:75:0a:e2:ca:5a:bb:f9:22:
da:2e:3e:db:b5:51:87:c6:66:6a:55:ea:02:34:2b:
ab:a4:77:13:93:bc:b9:33:a6:b4:10:7d:60:4d:17:
81:ea:a1:13:26:4a:85:52:f0:2a:ad:14:6d:c5:84:
5a:29:5c:fb:0e:72:6f:35:08:fa:ef:f2:3d:b8:fb:
63:9d:e4:2b:c8:79:81:f0:bc:fd:2a:c3:e6:b3:3e:
f3:9b:72:ec:e7:8d:07:98:bd:a7:6e:2b:a4:0f:af:
4e:16:59:84:30:ad:2e:cd:7c:df:ca:a8:68:f4:24:
7f:76:ea:b0:2d:62:42:30:c8:a2:14:0d:c3:97:f8:
f3:ea:88:56:f3:c5:91:68:57:17:30:ad:6a:bd:5e:
cc:bf:84:79:59:43:a0:c7:b9:32:ba:c9:a2:e1:51:
c0:08:5a:f2:af:b1:49:fb:22:99:17:f7:b3:bd:49:
5b:7b:91:47:8f:52:3d:d7:68:6b:ed:d1:f7:d6:fe:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:4D:69:D5:64:DB:FB:28:DB:FA:8E:D4:9F:18:7B:30:FD:CF:6C
X509v3 Authority Key Identifier:
keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b3:d5:ac:62:d8:06:3c:99:f1:cd:12:a1:6b:27:6f:ed:91:
d2:ab:22:23:e1:87:64:75:b0:c8:b1:3a:e3:4b:c4:92:9e:35:
09:ee:52:19:64:1c:23:fe:a3:1d:7c:c1:c7:af:68:36:d7:f1:
28:70:ed:05:2a:1b:ef:ca:c8:5b:d2:2c:d4:c3:cc:fb:96:e3:
95:a8:ca:4e:14:b9:fa:7c:db:ab:48:3e:0e:1f:ed:8a:c5:eb:
59:d6:e4:fc:b6:ee:2a:48:42:7d:ae:36:16:d5:0d:6d:dc:e8:
25:af:a6:a8:aa:df:48:94:8a:a3:2c:a5:3f:63:4f:ed:47:fb:
95:9e:63:9c:4f:f1:96:69:5a:12:33:24:31:f7:51:6f:95:ff:
24:9d:a5:64:8d:44:ba:e8:20:d2:c7:09:fa:f2:46:80:09:7f:
05:9e:35:e9:1f:f7:1f:8f:86:cc:4e:f9:51:07:f8:d7:50:9f:
96:da:8a:9e:42:78:f9:dc:f0:33:98:71:23:99:1c:ad:61:6f:
c5:da:f6:42:73:f6:60:06:e9:de:38:87:09:be:de:3e:28:91:
70:d8:ff:ae:94:41:3e:5a:ca:68:72:5f:1f:7a:95:16:6e:ab:
06:1c:e2:01:21:32:70:b1:4a:10:bc:ba:e0:ac:fa:38:bc:b5:
0f:fe:bc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:19:34 2025 by rpki-client