
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: BDKDhQdohhG1yzEz5ebGiLeI/bx1ru6Gk5oNVfCPugQ=
Subject key identifier: 8B:5A:18:39:C5:49:CE:DA:9B:01:64:13:16:3D:81:7E:F2:0D:27:05
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 019872CFDC59028BD7180E6917260CA52E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 02:01:21 +0000
Manifest this update: Mon 04 Aug 2025 02:01:21 +0000
Manifest next update: Tue 05 Aug 2025 02:01:21 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: YzYHxNaLXjwFZGJYwmamxnVEGJgKYT9wrVyyb5Jcr78=)
2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:dc:59:02:8b:d7:18:0e:69:17:26:0c:a5:2e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Aug 4 02:01:21 2025 GMT
Not After : Aug 5 02:01:21 2025 GMT
Subject: CN=8b5a1839c549ceda9b016413163d817ef20d2705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fa:a6:94:ac:23:cd:87:63:f5:df:e8:22:e5:
4a:1c:3b:5c:a4:e5:5a:7f:f4:2d:12:03:ef:7f:66:
2b:a2:7f:09:c8:19:61:76:01:fb:36:c7:0f:e9:5e:
05:75:5e:4c:fe:7b:33:40:02:8e:fc:7a:6c:05:7f:
39:bf:77:33:92:b0:b0:90:05:42:ad:40:1a:a5:47:
4c:34:b0:d1:3c:73:6e:e3:b6:a3:07:ec:b8:f8:a8:
b1:05:ed:ac:25:e3:d6:7f:df:51:18:8e:1c:93:11:
d5:f0:ab:e8:c9:e7:09:59:73:42:62:88:4c:76:73:
ea:d1:17:5e:63:9e:24:e1:db:b0:d1:58:dd:cc:0d:
c5:6f:03:2b:84:48:fb:6c:0e:16:6c:b7:40:b0:dd:
1f:ce:0c:92:8d:91:c8:01:de:ee:8d:91:9e:0f:9e:
88:c0:d6:cd:d6:8f:f3:35:bf:f5:d2:a1:14:c4:f5:
7c:77:c5:0f:f9:49:b4:1f:d7:98:d8:88:97:7e:69:
e6:0a:84:28:83:9d:12:f6:42:3f:17:38:4a:fe:be:
d8:3f:59:5f:10:ce:c7:71:d2:ac:4d:a6:8f:88:68:
d4:72:34:8f:1a:7b:94:98:ec:43:1d:37:c4:47:30:
af:0c:6b:bb:9a:79:d0:c8:64:ef:aa:f8:fa:80:c1:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5A:18:39:C5:49:CE:DA:9B:01:64:13:16:3D:81:7E:F2:0D:27:05
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b0:15:42:f4:0c:91:78:c4:3b:2f:80:64:21:d5:f7:bd:5b:
fc:ec:19:5b:7f:f2:2d:1b:9e:a9:08:46:39:5e:20:6f:03:f6:
f2:dc:26:d3:09:b1:80:e2:fe:1e:04:d8:43:2b:a4:31:25:7a:
cf:58:a0:bf:a0:71:b2:ee:e3:7b:66:aa:6d:81:d3:b7:46:26:
d5:a9:1a:cc:f9:00:ef:6a:40:24:28:88:0c:7f:67:5e:36:44:
7a:6e:50:31:e8:66:4e:84:71:69:a2:54:7b:3d:af:7e:fc:0e:
37:54:2b:f0:7b:11:06:9a:71:80:eb:83:57:a4:61:68:8b:35:
28:d7:e0:ef:f2:6c:d0:91:ba:b8:5a:4e:4b:05:8a:a4:3f:33:
de:1d:86:2a:e9:55:f9:d8:14:85:7f:d5:7c:23:ca:2d:fc:c5:
59:6b:ad:96:fd:22:69:b1:2f:5e:e3:73:0a:71:8e:d7:e5:ea:
29:d6:ba:02:28:6a:4f:ae:cb:39:bb:6c:89:cf:46:fb:9c:8e:
10:bb:f4:0b:b0:40:48:ab:69:35:ca:aa:14:a0:f6:0b:74:7b:
27:af:8f:60:7d:14:2b:94:e5:34:79:84:53:39:37:65:78:f0:
33:97:36:f3:68:a7:40:a1:09:7e:e2:ec:48:a4:c5:a0:63:df:
26:39:b6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:28 2025 by rpki-client