Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: t9ExLbYgoB4yNmw+9J2qsDhBzS7i7fESBSCgoOOkPdo=
Subject key identifier: DA:34:41:B5:E8:95:9A:33:CB:25:49:0D:1B:A6:58:D2:85:0C:D1:7F
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 019674F9D5236A8718DE9137513012BFBFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 02:00:52 +0000
Manifest this update: Sun 27 Apr 2025 02:00:52 +0000
Manifest next update: Mon 28 Apr 2025 02:00:52 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: JJ3NDEDxPrw24qr3mbs3JhzsVs2waYlnHBPFpptcJtQ=)
2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:d5:23:6a:87:18:de:91:37:51:30:12:bf:bf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Apr 27 02:00:52 2025 GMT
Not After : Apr 28 02:00:52 2025 GMT
Subject: CN=da3441b5e8959a33cb25490d1ba658d2850cd17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:9c:af:52:c9:3d:07:6d:21:01:14:d1:eb:
97:4c:06:d8:f6:01:26:08:fe:db:fc:bd:02:d6:28:
b1:fb:4c:9c:5e:42:73:c9:1e:3e:80:4d:63:0e:4c:
8b:19:be:e4:df:cb:d9:d3:5f:80:dc:e2:93:19:c2:
0d:74:8b:05:34:fe:88:5f:84:6c:c7:34:5c:26:d8:
23:b7:62:ca:35:0a:f8:07:60:9b:68:a6:f9:5c:d5:
9d:56:39:e5:95:67:6e:88:7b:38:1c:05:d0:41:b5:
28:0b:ba:12:89:87:36:9f:cc:b2:a7:73:b8:f6:6e:
1a:67:01:7e:02:7f:28:b3:5b:e5:51:cc:d3:ca:8c:
01:77:ce:fc:63:90:c2:04:84:4d:a8:e7:64:33:52:
dd:70:4f:ce:de:17:ad:7b:69:bc:cc:fd:08:6d:ce:
1e:d0:29:c9:81:b6:07:3c:38:7b:cb:f2:a2:fa:6e:
e3:ca:aa:5c:9e:cd:b8:fa:4e:dd:10:04:98:af:07:
0f:29:b7:e4:65:2d:44:3d:57:8a:5b:9c:86:70:40:
2a:05:be:a9:95:f1:a0:81:14:c1:51:e7:e7:21:e3:
da:ae:16:53:39:44:b2:4b:d5:ed:bd:8b:eb:c1:c5:
31:6b:91:ae:43:0b:2a:05:c3:f8:df:51:b7:12:f8:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:34:41:B5:E8:95:9A:33:CB:25:49:0D:1B:A6:58:D2:85:0C:D1:7F
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:dc:ad:ea:7d:91:91:c0:43:a1:ab:53:8c:cf:c9:d0:b0:7c:
01:79:b9:a1:40:e2:64:9e:cc:d5:ec:5a:c9:6c:0c:f4:4f:76:
7d:95:52:dc:7a:fa:a1:5a:9b:cb:19:3d:e7:e2:c2:96:79:b0:
6b:a2:07:11:a1:24:f9:d9:8b:7b:88:7d:6c:91:97:db:eb:ad:
e3:29:b6:f0:10:cd:0c:87:e5:6f:e0:4e:d2:2d:8e:ce:f4:cc:
a2:77:9b:5c:bd:9c:71:6a:48:9f:e1:50:61:db:05:0d:f6:3d:
41:49:30:01:41:f0:bc:0a:55:f8:12:64:72:57:52:18:dd:62:
8f:9f:36:29:6b:4d:a1:9b:e1:5b:5c:b5:12:e6:28:63:46:6d:
00:f9:72:2c:16:60:83:1d:8d:02:3b:d6:3b:5f:b2:4c:23:59:
aa:35:96:13:10:52:ca:af:91:e3:88:e6:36:d9:50:41:de:89:
e0:2e:75:1e:2d:41:2c:5e:27:9d:5e:45:64:a1:ad:22:fa:4f:
d2:12:ce:45:5f:48:60:3c:04:05:07:92:ca:a8:10:4a:5d:f5:
b0:12:cf:f1:23:e9:11:bc:80:8c:12:60:3c:e6:5e:dd:71:e9:
d8:e6:15:2a:78:b7:56:cf:da:04:3e:c2:fa:b5:3d:cd:1e:26:
4f:1a:5c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:04 2025 by rpki-client