Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
File: DBATeUToh60HVp7U1BKEZzLQr3A.mft (raw, json)
Hash identifier: +I66U2ONVgHaCo8WWXVNLqv97Ec4a34YFvjKqRlAbOA=
Subject key identifier: 80:4C:B3:0A:B1:B0:82:F0:33:BD:9F:47:8C:9F:B0:D3:E0:9A:85:3E
Authority key identifier: 0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
Certificate issuer: /CN=0c10137944e887ad07569ed4d412846732d0af70
Certificate serial: 019682108D3A71ABC6386DABD954A27D0239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
Manifest number: 0CF4
Signing time: Tue 29 Apr 2025 15:00:44 +0000
Manifest this update: Tue 29 Apr 2025 15:00:44 +0000
Manifest next update: Wed 30 Apr 2025 15:00:44 +0000
Files and hashes: 1: 1teQs2-Gqr9Ttken-kpobex52GM.roa (hash: JwKmhVt10f03COhT0AoYFXxwUVkj2YdwV7qznRh2SmM=)
2: DBATeUToh60HVp7U1BKEZzLQr3A.crl (hash: 5E6VcSZt2DtuVHEptp96lbG3kBbkQ3ZUOMRzhMMT0yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:8d:3a:71:ab:c6:38:6d:ab:d9:54:a2:7d:02:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c10137944e887ad07569ed4d412846732d0af70
Validity
Not Before: Apr 29 15:00:44 2025 GMT
Not After : Apr 30 15:00:44 2025 GMT
Subject: CN=804cb30ab1b082f033bd9f478c9fb0d3e09a853e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:a2:59:8c:d2:c9:26:8f:d7:98:7e:3a:57:
e0:63:7a:24:8d:49:1a:0c:9c:e6:2b:aa:1d:5c:e2:
20:9e:45:09:de:8a:80:f9:e8:08:68:c4:8f:a9:5b:
67:2d:a7:b1:a1:f0:62:b4:16:09:b5:3f:dc:6d:87:
89:5a:bc:f6:d9:65:47:5f:13:c1:aa:56:ad:0f:8b:
a8:9c:7d:bb:02:c2:c6:a2:4d:60:5d:17:49:7c:f1:
ea:cc:32:19:d2:f6:f8:78:59:55:15:39:c1:d2:51:
00:be:f6:1a:9f:cc:47:9e:91:ae:de:b7:83:5b:2e:
bf:46:41:1b:41:36:47:4b:07:8e:43:9b:17:e3:a6:
3d:8b:82:42:02:5c:c4:3c:3d:36:a7:32:f3:ee:2a:
ad:f4:fc:5b:c6:51:cb:32:a9:37:ee:1a:9a:7b:a2:
e4:dc:33:01:84:03:94:97:1e:3b:03:9d:e3:48:61:
0e:8a:3b:ce:97:76:a1:ef:95:87:18:a6:67:9f:0a:
4f:9b:52:50:34:40:47:c0:65:1d:8d:71:03:a7:31:
49:64:f2:6f:70:88:ab:27:3a:27:54:51:f0:e1:c0:
75:6e:fe:56:67:27:58:e8:f3:4f:7d:48:f6:b6:cd:
b5:d3:43:f9:96:b3:aa:8c:54:2b:e3:09:6c:cc:e2:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4C:B3:0A:B1:B0:82:F0:33:BD:9F:47:8C:9F:B0:D3:E0:9A:85:3E
X509v3 Authority Key Identifier:
keyid:0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:69:49:10:64:71:44:f7:d1:4e:55:df:31:2d:13:a2:5f:57:
f4:ff:42:9a:3c:ec:13:28:be:8a:dd:ad:0d:c8:40:ca:c1:71:
68:da:5c:24:ad:d8:51:94:5e:b7:16:a8:35:44:1d:16:45:d0:
69:40:e0:1e:6f:32:5b:dc:0b:53:53:81:f6:81:23:f4:43:93:
79:e1:84:49:52:b1:95:3b:a7:c8:db:e5:6a:78:64:38:f9:df:
39:9e:f7:06:17:b6:6a:5f:d8:c3:d5:d2:39:9c:f6:85:37:b3:
39:55:19:b7:19:86:e3:5d:64:96:f1:de:0d:1c:25:7a:64:36:
89:0e:1e:31:bc:5d:83:74:a8:dc:c3:6b:10:49:3e:68:73:83:
5f:90:33:78:9c:1a:8a:64:c2:12:d8:00:78:88:44:00:7b:e0:
94:af:32:4a:24:13:96:2c:b4:46:5e:bc:50:67:47:27:64:e3:
ab:3e:a8:96:06:c0:af:53:6b:67:d0:54:30:a8:08:96:9b:3d:
61:19:a9:ea:fa:39:b5:72:6a:f9:41:5b:6a:f8:8f:6b:7a:a5:
63:5e:03:cd:a6:f6:44:31:ec:fc:b4:4b:a6:b3:d2:96:19:e1:
36:c6:a0:58:57:d9:07:13:c6:c6:70:60:ca:e5:f1:28:0a:f7:
84:fc:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:08:25 2025 by rpki-client