Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
File: DBATeUToh60HVp7U1BKEZzLQr3A.mft (raw, json)
Hash identifier: 5LtToa08Xx9Vml040CtkJyCxCY1nqzfQYVNfSXV6ZfY=
Subject key identifier: 9B:9F:2C:8D:6B:F5:CD:D1:9C:2C:1F:19:E0:F1:38:71:E0:84:BF:47
Authority key identifier: 0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
Certificate issuer: /CN=0c10137944e887ad07569ed4d412846732d0af70
Certificate serial: 01987450B8E9095D8E3BB38A2E0D27906774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
Manifest number: 0DF6
Signing time: Mon 04 Aug 2025 09:01:43 +0000
Manifest this update: Mon 04 Aug 2025 09:01:43 +0000
Manifest next update: Tue 05 Aug 2025 09:01:43 +0000
Files and hashes: 1: 1teQs2-Gqr9Ttken-kpobex52GM.roa (hash: JwKmhVt10f03COhT0AoYFXxwUVkj2YdwV7qznRh2SmM=)
2: DBATeUToh60HVp7U1BKEZzLQr3A.crl (hash: Vls89YMXhbrfUeS7XtwMNWkHP81UXbujkvn+Uq6EkRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:b8:e9:09:5d:8e:3b:b3:8a:2e:0d:27:90:67:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c10137944e887ad07569ed4d412846732d0af70
Validity
Not Before: Aug 4 09:01:43 2025 GMT
Not After : Aug 5 09:01:43 2025 GMT
Subject: CN=9b9f2c8d6bf5cdd19c2c1f19e0f13871e084bf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:54:7c:a7:db:5d:7b:ae:47:79:52:51:34:
15:e3:a1:a2:34:65:66:7d:64:33:1e:e3:0b:bb:da:
8d:40:88:df:9d:47:3d:48:b7:08:bd:68:13:5a:c5:
e0:86:48:c4:87:c0:32:58:62:59:48:e3:2f:59:1c:
fd:11:27:b8:58:6d:e0:a0:6d:30:76:f5:8b:27:fd:
6c:20:1c:37:db:3c:7f:47:be:2f:e5:92:2c:34:de:
7c:f3:11:c2:12:7b:5a:50:78:f0:6a:75:3e:ef:18:
cb:75:57:aa:0f:6c:9e:c8:c7:22:43:36:60:c3:37:
01:0b:30:67:47:fc:71:f3:01:6b:d0:4f:91:9b:de:
70:a0:77:19:68:6a:14:08:ce:4e:bb:dc:57:6a:5e:
5c:a8:d8:d7:68:bc:b0:70:d9:93:40:cd:69:25:2d:
58:66:41:64:dc:40:6a:11:2a:8b:2b:09:51:9d:0c:
0b:a9:ca:7d:b2:69:b0:05:92:6a:07:64:e1:a4:89:
f4:5f:e2:73:ea:a6:18:8c:c0:78:2a:3f:c9:2b:56:
f0:60:48:68:4e:29:8d:c8:af:d6:1e:8a:60:49:5d:
73:41:4d:bc:6b:da:fb:c2:14:c1:ce:86:83:fb:49:
eb:ef:ba:d4:22:ce:bb:c1:22:46:4c:7e:db:91:3b:
a9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9F:2C:8D:6B:F5:CD:D1:9C:2C:1F:19:E0:F1:38:71:E0:84:BF:47
X509v3 Authority Key Identifier:
keyid:0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:91:4d:ae:25:50:b8:64:0e:03:4e:93:e2:76:6a:68:0a:fd:
c8:5e:eb:02:42:eb:62:30:63:06:0d:43:8e:63:fb:5f:7d:e8:
bf:56:75:cc:b3:57:c7:f2:df:9d:a2:b9:68:0b:fc:ee:b4:dc:
c5:ab:46:90:3e:9c:68:ea:c6:ba:d1:fe:68:74:d2:66:45:49:
a7:39:02:ae:31:98:e2:d9:cf:0e:dd:4e:e2:43:52:3c:25:90:
8d:1e:28:84:f6:f9:f8:de:7e:dd:ba:1c:ad:21:70:f6:c9:19:
a8:1b:24:93:46:b0:f5:e0:d0:29:63:05:1d:70:70:02:fd:fb:
4b:11:22:5d:fb:cf:8d:1a:66:18:b4:82:7e:dd:e5:c7:59:28:
7c:dc:f1:21:06:21:26:b2:93:e8:e4:d0:31:9c:ca:9a:d8:36:
18:8c:c4:51:7d:ce:c0:ac:9c:84:e9:b2:13:b7:5b:f6:08:9c:
28:36:5b:ea:db:02:10:6e:74:c4:af:59:c6:90:2a:fa:2c:2f:
1d:dc:fd:8b:ce:c8:c6:6a:e8:7a:80:33:06:c8:53:d4:85:a9:
29:72:4d:83:74:32:d3:8c:fe:2f:67:23:fd:6c:df:da:2a:c5:
22:1d:07:6e:67:2c:5e:0a:ec:cb:f0:3a:0f:df:82:8c:77:38:
ef:8d:f8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:47 2025 by rpki-client