Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier: MAGzgiJCdFY7p27VXPoMqlxWwnLft+CaHc1g/Q+XE9o=
Subject key identifier: 90:3A:AA:1D:27:90:03:08:06:6B:F7:98:C6:CC:0A:C3:CB:F2:34:98
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial: 0196764321AB8961A85E822CC9F1EF517691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 08:00:33 +0000
Manifest this update: Sun 27 Apr 2025 08:00:33 +0000
Manifest next update: Mon 28 Apr 2025 08:00:33 +0000
Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: bEbTe2X63RGZnzbJj7AR9Nl+csba4BRashuZFNEn/iQ=)
2: tP4Nr3k13Af3UtlucGdOvIgy7uY.roa (hash: ofrFnG5ByBdxFiFLthIkeYVusoIIsNMbVNLs6rFZMMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:21:ab:89:61:a8:5e:82:2c:c9:f1:ef:51:76:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Validity
Not Before: Apr 27 08:00:33 2025 GMT
Not After : Apr 28 08:00:33 2025 GMT
Subject: CN=903aaa1d27900308066bf798c6cc0ac3cbf23498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:24:f2:73:e8:dd:d6:e6:80:39:89:51:82:
2d:3f:cd:49:d8:5d:c6:06:63:ca:c9:af:ed:03:82:
84:36:20:2b:5b:99:0e:af:41:b1:1e:2c:4f:3d:5b:
c3:f0:5d:c7:40:90:11:cc:74:89:8b:f1:f2:b1:91:
3e:ed:94:60:31:de:b3:39:a2:4b:82:4b:8a:7a:db:
65:b7:de:b6:ce:8b:11:3c:9c:64:b9:8c:95:18:0e:
b6:32:c3:1c:25:2b:8e:15:6f:ed:36:32:5e:55:b9:
cb:17:ea:d9:1d:07:30:6a:3b:94:de:b1:1d:15:52:
b3:c9:05:fa:23:ad:26:cb:13:0f:cc:e6:d9:19:21:
0f:25:02:91:66:cc:25:70:95:8c:87:1b:27:d5:f4:
5f:ac:87:21:fb:98:e3:e5:80:64:55:73:f9:62:0e:
54:82:28:31:c2:da:17:11:24:ee:11:c0:86:71:fd:
d6:e3:48:c7:95:c4:1c:9e:a0:04:2f:a8:05:e3:d0:
c0:2d:42:79:d9:40:4f:86:18:42:1b:6d:a8:8b:fa:
82:4e:82:42:bb:6e:e8:b9:8c:5d:3b:03:c5:9e:93:
29:15:59:98:a1:74:73:a4:0c:83:cb:50:0a:cd:da:
7f:72:77:66:b4:cc:d5:83:7c:9b:a5:af:6b:75:23:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3A:AA:1D:27:90:03:08:06:6B:F7:98:C6:CC:0A:C3:CB:F2:34:98
X509v3 Authority Key Identifier:
keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2d:12:42:f4:59:87:9e:ac:21:7c:5a:87:58:1a:ba:91:29:
8d:b7:fc:ad:da:25:5a:c0:ee:01:f7:8d:cf:6a:c8:22:a9:7d:
b0:dd:c4:1c:63:dd:f4:b0:b6:e7:be:8a:86:72:d2:54:c1:d2:
64:e8:04:30:d2:02:29:51:05:ee:a9:22:dd:a2:cd:6a:ff:ea:
75:65:cb:a8:37:ab:16:c2:27:ca:e4:26:80:f5:3f:a9:c1:db:
ea:a6:9a:d4:72:a3:27:1b:d4:50:7a:7f:c7:a8:c4:f9:ca:aa:
91:1b:b9:73:fa:4e:70:bf:e6:9e:fe:e1:34:e1:91:07:0f:09:
c6:f1:10:38:e6:e4:18:ae:e1:9a:e2:ba:dc:0d:1e:9f:b2:4a:
1a:68:a4:52:f7:33:35:6a:b2:fe:d4:6c:bd:d3:1c:33:8f:20:
84:51:ee:9f:fc:e3:0a:46:6c:07:80:33:32:a7:71:04:80:6e:
05:f3:07:6d:e0:54:55:d7:39:12:1e:ec:b3:dc:fe:4d:2f:75:
4a:58:70:f9:17:32:a9:6e:1a:aa:f4:05:67:6c:5d:10:1d:0d:
2d:a1:d6:d2:a0:35:dd:10:86:75:8f:74:f5:d2:01:8c:48:23:
8a:fa:34:f4:eb:84:76:29:f0:f6:3b:f5:9a:6b:c7:a6:29:fb:
22:88:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:06:50 2025 by rpki-client