Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier: 3TZSZYYx8Nl+1OQRqW4Ko+bygVRzyq7Y8Xlt6IvP8Xk=
Subject key identifier: 62:33:9D:90:CE:28:DA:46:6E:2B:A1:D8:C4:89:E7:D2:72:2F:97:FF
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial: 01965F4DDBC530BB409C7F446A3FACE820D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number: 121A
Signing time: Tue 22 Apr 2025 21:01:00 +0000
Manifest this update: Tue 22 Apr 2025 21:01:00 +0000
Manifest next update: Wed 23 Apr 2025 21:01:00 +0000
Files and hashes: 1: 8JHdroSmFbW7TogZWDAIS298pfo.roa (hash: goVtVxuEC9QAmF+Kz0vzUzxl+/V8u83qUjrsL0jlHNw=)
2: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: 8ASBBPHfSDEj/gSMuFhdNGrP2kp182d7ARcCVaOGHEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:db:c5:30:bb:40:9c:7f:44:6a:3f:ac:e8:20:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Validity
Not Before: Apr 22 21:01:00 2025 GMT
Not After : Apr 23 21:01:00 2025 GMT
Subject: CN=62339d90ce28da466e2ba1d8c489e7d2722f97ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:b2:4a:25:85:3f:b9:8e:10:16:6c:03:16:
1b:7b:ea:34:6c:36:51:d1:c0:20:f0:c9:d0:f5:dd:
03:5f:75:93:2c:27:93:36:ae:a6:8c:4d:ed:fe:16:
ce:22:6b:3d:12:6c:84:4b:92:d6:f7:2b:66:3e:0b:
86:e0:53:d6:8c:cb:c0:8d:2f:ab:ae:00:64:c1:a7:
62:ad:18:82:5a:5b:d0:2d:13:db:ad:59:81:ff:00:
d1:be:f8:72:6a:16:5b:75:ad:46:3c:67:b2:3c:fb:
a3:71:bd:2b:08:1a:93:14:11:6c:da:94:c1:62:00:
8c:55:16:ee:dd:e0:ed:4d:8d:bc:c9:e2:ff:5b:87:
d3:76:48:ed:8a:a5:2b:45:72:30:b4:ea:56:a2:d0:
ce:86:5d:41:d6:68:92:ca:7a:e0:d3:85:82:09:c4:
2e:7c:34:b2:07:d1:c7:cf:17:3d:cf:c9:de:a9:bd:
3f:f0:c3:d3:29:21:83:29:f8:de:20:7c:0d:a2:cd:
25:e8:4d:99:76:00:b1:ae:de:ba:ec:46:35:b7:80:
32:08:95:2c:1b:b8:53:07:6e:90:38:5b:9c:b5:5c:
99:99:0a:20:b0:54:d4:d7:70:b7:6e:8a:6d:2e:bf:
d2:30:69:a9:5a:79:e7:f6:7c:a6:08:06:94:b8:b8:
d9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:33:9D:90:CE:28:DA:46:6E:2B:A1:D8:C4:89:E7:D2:72:2F:97:FF
X509v3 Authority Key Identifier:
keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a9:56:4c:78:9d:36:67:01:97:30:ff:32:d9:58:ae:a0:50:
44:ac:eb:29:c1:c8:1f:b9:eb:8d:69:52:a9:55:de:b1:2d:b3:
5c:d5:aa:11:43:f2:b0:db:43:45:95:9f:23:27:a1:d1:e2:3f:
8d:42:68:e5:ee:97:62:46:3e:70:c7:2f:0a:d8:fd:cf:e6:03:
70:50:54:8f:2f:47:75:0e:b8:bf:78:ca:ca:e2:3f:50:08:55:
e1:40:e6:4b:cf:df:b2:af:88:b9:97:b4:17:51:b4:3f:5d:99:
3b:3b:b8:36:be:d3:2e:31:fd:35:e2:d0:a5:39:b2:13:38:aa:
28:1e:97:41:ad:c8:87:ad:08:7d:d6:2e:ec:27:c7:31:b5:34:
0a:be:0a:69:52:4d:94:11:e0:c9:4f:39:e8:8d:bc:17:a3:3e:
c8:8a:4b:cb:78:5b:e4:5b:0c:0e:36:1b:eb:f2:13:1e:17:ad:
04:86:47:7f:7b:fa:24:b7:86:c9:78:9d:e4:c2:3f:ae:a2:97:
23:d0:78:92:93:2d:2d:d8:78:6d:62:f5:b7:fe:1c:1e:79:a3:
be:4a:21:7d:9c:ab:04:f1:26:46:dd:0a:0c:cb:12:89:60:82:
54:40:71:3f:2b:11:64:21:17:61:f4:c0:58:88:ee:1f:62:36:
95:ea:5f:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfTdvFMLtAnH9Eaj+s6CDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YThkODQ3MjkwNmMyMDM4YWFlYzg0YzdiM2U1NmMyMDk2
YmU4NjAwHhcNMjUwNDIyMjEwMTAwWhcNMjUwNDIzMjEwMTAwWjAzMTEwLwYDVQQD
Eyg2MjMzOWQ5MGNlMjhkYTQ2NmUyYmExZDhjNDg5ZTdkMjcyMmY5N2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQKySiWFP7mOEBZsAxYbe+o0bDZR
0cAg8MnQ9d0DX3WTLCeTNq6mjE3t/hbOIms9EmyES5LW9ytmPguG4FPWjMvAjS+r
rgBkwadirRiCWlvQLRPbrVmB/wDRvvhyahZbda1GPGeyPPujcb0rCBqTFBFs2pTB
YgCMVRbu3eDtTY28yeL/W4fTdkjtiqUrRXIwtOpWotDOhl1B1miSynrg04WCCcQu
fDSyB9HHzxc9z8neqb0/8MPTKSGDKfjeIHwNos0l6E2ZdgCxrt667EY1t4AyCJUs
G7hTB26QOFuctVyZmQogsFTU13C3boptLr/SMGmpWnnn9nymCAaUuLjZGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIznZDOKNpGbiuh2MSJ59JyL5f/MB8GA1UdIwQY
MBaAFHSo2EcpBsIDiq7ITHs+VsIJa+hgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWIt
Mzk1NmU1NmMxODM1LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWItMzk1NmU1NmMxODM1
LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKlWTHid
NmcBlzD/MtlYrqBQRKzrKcHIH7nrjWlSqVXesS2zXNWqEUPysNtDRZWfIyeh0eI/
jUJo5e6XYkY+cMcvCtj9z+YDcFBUjy9HdQ64v3jKyuI/UAhV4UDmS8/fsq+IuZe0
F1G0P12ZOzu4Nr7TLjH9NeLQpTmyEziqKB6XQa3Ih60IfdYu7CfHMbU0Cr4KaVJN
lBHgyU856I28F6M+yIpLy3hb5FsMDjYb6/ITHhetBIZHf3v6JLeGyXid5MI/rqKX
I9B4kpMtLdh4bWL1t/4cHnmjvkohfZyrBPEmRt0KDMsSiWCCVEBxPysRZCEXYfTA
WIjuH2I2lepfag==
-----END CERTIFICATE-----
Generated at Wed Apr 23 00:53:38 2025 by rpki-client