Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
File: DBATeUToh60HVp7U1BKEZzLQr3A.mft (raw, json)
Hash identifier: oREEjzRt9HUCnvncF8AzCEkwSwwmWcduPMEHRTgX134=
Subject key identifier: 53:A8:E0:2F:0A:B8:F0:C0:C9:E6:1C:B4:1E:15:CE:D3:0F:7D:13:9A
Authority key identifier: 0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
Certificate issuer: /CN=0c10137944e887ad07569ed4d412846732d0af70
Certificate serial: 01976F99D378E75887AEB2DAF44AB6BA8BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
Manifest number: 0D6F
Signing time: Sat 14 Jun 2025 18:00:41 +0000
Manifest this update: Sat 14 Jun 2025 18:00:41 +0000
Manifest next update: Sun 15 Jun 2025 18:00:41 +0000
Files and hashes: 1: 1teQs2-Gqr9Ttken-kpobex52GM.roa (hash: JwKmhVt10f03COhT0AoYFXxwUVkj2YdwV7qznRh2SmM=)
2: DBATeUToh60HVp7U1BKEZzLQr3A.crl (hash: QqDCf8M7EJMFhJl1zjtRRI+2+tZndL2mLXi17ygPHlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:d3:78:e7:58:87:ae:b2:da:f4:4a:b6:ba:8b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c10137944e887ad07569ed4d412846732d0af70
Validity
Not Before: Jun 14 18:00:41 2025 GMT
Not After : Jun 15 18:00:41 2025 GMT
Subject: CN=53a8e02f0ab8f0c0c9e61cb41e15ced30f7d139a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:71:60:25:74:1f:92:17:43:5d:20:48:a0:12:
a5:b5:ae:a1:db:8e:3d:a6:13:c2:7d:b0:fa:a5:50:
50:37:54:e3:36:2f:4d:7f:f9:d6:3e:37:97:5e:1b:
d8:17:4f:e2:6a:c1:f6:2f:3a:d7:86:bc:26:2b:e4:
1f:68:64:d8:ce:6c:ec:c0:76:93:b5:de:e5:b9:72:
28:c1:21:ba:07:fe:ac:6c:08:87:36:e7:7c:41:5f:
97:1d:6a:0c:6b:7a:0a:84:5b:a9:92:c5:1b:db:b9:
94:c8:f1:a4:a2:25:76:84:f9:49:eb:23:fe:b0:93:
e2:e5:78:f4:0d:1a:fc:b6:fd:a2:23:1e:08:93:fb:
2c:c5:2a:1d:8c:16:97:4e:4d:53:e8:db:85:57:93:
2b:74:c3:15:d6:79:51:fa:46:12:dd:3c:c7:c3:4b:
85:00:48:c9:8b:57:5d:2c:bf:a9:26:35:c7:8f:15:
cb:73:43:c0:be:ec:b6:91:ce:96:87:d8:85:2c:04:
f0:ab:30:1c:ab:f3:1b:ba:93:52:c9:da:10:58:1e:
e8:b2:ac:05:bd:6f:e6:77:69:84:fc:60:d4:5c:5e:
1b:bb:90:45:dc:2c:ef:3b:92:d9:98:7e:40:58:a2:
1f:bb:38:eb:c0:64:c7:9f:af:2a:5f:50:bb:4a:48:
b0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A8:E0:2F:0A:B8:F0:C0:C9:E6:1C:B4:1E:15:CE:D3:0F:7D:13:9A
X509v3 Authority Key Identifier:
keyid:0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c8:d7:01:8b:16:f1:97:1a:e8:76:f1:a5:57:e2:21:f9:e1:
5c:f5:d9:62:92:78:63:f4:cb:cb:55:f9:a3:5e:83:ef:af:fd:
9c:fd:30:e0:5f:12:8b:b2:38:9e:da:75:ae:2e:e6:39:8a:12:
95:01:71:b9:1e:11:88:03:5a:48:12:85:1d:37:0a:b1:0f:c4:
31:a7:d5:63:c0:2b:d0:32:e2:ac:3b:cd:ea:04:9a:b0:14:a6:
bc:59:ad:a9:7c:ff:98:18:07:53:d5:3f:23:89:83:78:38:cb:
0c:4b:3e:15:da:27:52:47:9b:dd:9a:c8:1a:af:a0:0e:4f:3e:
f6:26:95:bb:89:f4:03:cf:b7:4c:cd:eb:72:d6:6a:3b:12:4a:
69:db:36:f4:eb:31:c0:ad:a1:f9:13:23:7a:91:50:08:ad:c6:
85:a5:62:df:ac:a3:cd:66:46:22:2d:52:ac:fc:39:ba:67:56:
92:27:15:83:4c:37:f9:f9:7a:d3:f0:02:d4:3a:ba:1d:1f:e4:
81:10:1d:b0:a2:c7:a3:7c:d0:9f:97:27:2c:83:8d:74:73:a6:
2a:76:35:60:86:50:5b:ea:c8:36:91:84:90:9f:b9:95:21:ad:
d6:f3:56:50:e2:03:54:a7:18:16:a9:1d:5f:6f:99:d6:89:3d:
3b:b8:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:55:06 2025 by rpki-client