Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: boE1SFHd5/Ycyjt+V3beoYKVqz3+kD9zJB6Ec3KcitM=
Subject key identifier: 01:FE:C8:8C:11:BB:C9:28:D3:19:F3:79:90:7E:34:F0:77:7C:4D:91
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 0196741DEB1F2BC4028532440BA7B2D09DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 150C
Signing time: Sat 26 Apr 2025 22:00:39 +0000
Manifest this update: Sat 26 Apr 2025 22:00:39 +0000
Manifest next update: Sun 27 Apr 2025 22:00:39 +0000
Files and hashes: 1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: a0Q15/neD2OEITgxkjMNeRoFTH6xbfHdeiswkcWBqvc=)
2: MtUZJrG93YjlOedI7qMBnb84kTo.roa (hash: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:eb:1f:2b:c4:02:85:32:44:0b:a7:b2:d0:9d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Apr 26 22:00:39 2025 GMT
Not After : Apr 27 22:00:39 2025 GMT
Subject: CN=01fec88c11bbc928d319f379907e34f0777c4d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:0f:60:df:f3:e4:e4:f6:ec:54:3c:ef:0b:
c2:12:3d:cc:f2:9f:f8:c8:d9:a0:24:8c:ff:c7:a2:
be:77:78:17:16:f3:19:1f:45:4a:dd:9e:4d:79:1a:
e1:6f:c2:48:71:4a:ab:84:94:b7:a7:69:a8:5a:cd:
d8:3b:05:7c:12:5a:13:16:a0:54:35:08:50:78:2d:
f0:bc:4d:a3:f9:97:56:1e:54:a1:a3:28:5e:f3:ba:
5d:ed:27:9c:53:01:36:d6:85:4f:55:1e:b1:ce:10:
58:66:22:06:4f:35:d1:54:42:71:79:ff:dc:62:07:
e1:f0:44:3e:e7:90:d9:1e:b5:d8:8c:d1:b2:69:43:
08:d8:f6:41:83:1a:90:4f:8c:65:ea:18:3f:49:08:
63:d2:04:7a:22:ec:5d:db:27:b7:5f:ca:32:67:7c:
84:71:0a:7d:65:21:e8:c7:dd:cf:85:28:61:bc:19:
20:44:3d:79:9e:b7:7b:66:9a:88:4f:7a:99:e0:a5:
8f:65:95:06:2e:3e:49:95:c6:3a:9f:e5:b5:7f:25:
30:e6:b7:57:88:d5:8a:a3:4f:bf:62:c3:84:5f:2d:
12:05:7e:82:68:36:74:9d:20:c6:02:46:0c:8f:02:
2b:25:08:35:f1:2e:46:aa:c8:85:b1:58:66:5d:2b:
3a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FE:C8:8C:11:BB:C9:28:D3:19:F3:79:90:7E:34:F0:77:7C:4D:91
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ba:29:ec:5e:d3:0b:85:67:e9:75:c9:a5:dc:d4:d4:ea:72:
c6:e3:bb:fe:83:44:23:5b:99:06:bb:fd:8b:a6:cb:63:cc:78:
a2:83:af:a0:37:38:dd:24:e7:ef:c8:2a:a9:a2:9e:7c:1d:6c:
d9:d0:45:f8:10:2d:86:c2:78:44:90:b6:32:4d:71:61:ae:de:
5f:27:28:88:e5:7c:1f:ce:ed:eb:b7:2e:f2:c2:3e:83:07:84:
d5:5d:41:d2:ed:5f:01:d7:55:fc:3a:97:c9:2c:05:93:e5:ca:
ad:ac:70:37:2f:df:51:bd:3f:6b:63:2f:df:ec:de:ef:bc:e0:
5f:75:79:66:e7:c2:62:44:c4:57:56:d5:08:f5:6a:78:41:10:
3d:92:8b:23:d0:32:bd:e7:51:fd:bd:1c:d2:35:c0:6d:87:97:
7b:54:39:de:50:76:0d:63:28:94:9b:90:79:d7:5d:9d:d5:d4:
2f:72:a8:5e:20:07:7a:5d:48:47:b3:c2:a0:45:e4:a7:60:58:
cc:e1:fe:73:27:a5:98:c4:85:8a:8d:39:84:8d:1a:52:c9:68:
58:b1:25:15:61:78:1c:7b:3f:d2:6b:1f:55:15:d8:ac:83:d2:
13:6e:dd:14:04:9f:ba:ae:39:e7:1f:c9:17:52:61:fd:b7:d3:
d1:89:8a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:36:37 2025 by rpki-client