Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: qHDaHserT+KQcWZR9lsIT+vJ6dQZsgwukUgiSTHCX2o=
Subject key identifier: FA:8E:1C:87:8E:59:BA:1F:7F:D4:3B:A0:58:92:D6:38:F6:7D:58:71
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 01976E197D16B25091319E06E8896F8A27B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 11:00:53 +0000
Manifest this update: Sat 14 Jun 2025 11:00:53 +0000
Manifest next update: Sun 15 Jun 2025 11:00:53 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: YSGKI0ZN2GnEn6k/ceST3gPY9M+8fUQ7I0JwBl3cYhg=)
2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:7d:16:b2:50:91:31:9e:06:e8:89:6f:8a:27:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Jun 14 11:00:53 2025 GMT
Not After : Jun 15 11:00:53 2025 GMT
Subject: CN=fa8e1c878e59ba1f7fd43ba05892d638f67d5871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:22:b2:1e:4d:f6:7c:23:c3:8a:1d:3b:be:
bc:16:9b:67:b2:28:e7:dd:72:ed:37:99:00:62:f6:
3f:6f:b7:91:5c:f4:ae:3d:c6:ac:d6:97:cf:29:e5:
ea:50:95:8c:0c:8a:b7:15:a7:ec:fd:77:19:af:b3:
fa:c6:79:d7:07:d0:07:cd:6d:89:8d:24:d5:0c:72:
29:9e:86:5d:70:23:85:e8:68:44:1d:46:71:1b:89:
4d:e3:a6:ce:eb:e8:30:74:d9:9e:81:2e:80:7c:f9:
c3:c2:6f:d1:b0:26:28:b4:da:2c:63:66:21:5d:c8:
c8:12:f2:87:51:2e:e2:f7:60:d8:dc:3b:b7:fd:00:
92:04:85:cd:ae:b2:66:85:04:07:f9:55:39:14:df:
dc:08:fe:ee:2c:72:4f:4c:5f:36:a2:12:b9:7e:25:
e6:fd:48:fc:b2:38:df:2d:e9:1a:6d:c2:f5:44:c8:
6c:0e:64:6e:54:4f:c2:a0:0a:c5:bc:7e:64:a8:17:
8f:f0:6b:15:26:b7:d2:b0:66:5f:e2:20:8d:96:cc:
b7:8f:91:9e:78:a7:72:da:a7:1c:44:69:12:35:2d:
50:cc:07:16:a8:eb:ac:7e:18:23:c4:53:1b:2d:71:
a8:a7:b2:b1:3d:19:5a:91:af:07:34:61:12:fc:dc:
29:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8E:1C:87:8E:59:BA:1F:7F:D4:3B:A0:58:92:D6:38:F6:7D:58:71
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:56:10:cc:67:f8:53:94:51:bd:c5:95:d8:75:d8:fc:a3:26:
23:dd:1a:7c:43:74:cf:52:f7:b9:fe:9d:cc:f7:61:0b:82:89:
0f:ea:b6:6f:b2:66:53:f1:36:2a:70:72:e0:dc:95:67:2d:ef:
8f:8f:30:1f:34:d7:b8:01:6d:ce:16:10:3d:c2:4b:d4:7d:8c:
5b:04:d4:f1:e3:1d:7f:64:c4:0e:f5:0e:04:53:75:c4:bb:e4:
b0:12:d0:bb:fd:47:61:ad:cc:93:4c:33:5a:ac:b5:f4:bf:7a:
a5:be:7f:f1:bb:75:2b:ab:16:ea:40:f4:99:74:67:52:c4:f3:
8d:a1:3f:70:0e:ec:f9:6e:d5:c6:b6:94:f9:02:de:63:4c:d1:
73:41:0b:38:b5:a8:40:4c:0f:8f:73:62:bf:7e:b7:fa:7e:cd:
a0:ef:02:0c:9b:64:b3:b3:b4:21:6f:bc:14:09:e2:dd:b2:9d:
07:4b:6d:b9:11:33:3a:9c:8e:d1:c6:06:7a:ab:00:94:99:b6:
42:81:4b:17:4a:1d:1a:93:b1:bd:e3:9d:53:73:d5:6c:ca:96:
ba:c3:9f:8d:5a:a1:53:c7:a3:b0:e3:51:ae:07:0c:73:98:06:
d1:37:e5:ee:8f:14:8d:d8:08:85:ab:d2:04:84:a3:e1:4b:84:
c2:69:db:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:47:47 2025 by rpki-client