Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: Ue/+NmJdosLN+10XdECiLg/KuBiXCWtdnCwaOJP3IPU=
Subject key identifier: BA:52:5E:42:52:00:E2:C5:B1:94:6B:5E:1A:18:27:D1:3C:E3:9D:45
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 01976960D192B0C27E0618CC8564D33326EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 13:00:42 +0000
Manifest this update: Fri 13 Jun 2025 13:00:42 +0000
Manifest next update: Sat 14 Jun 2025 13:00:42 +0000
Files and hashes: 1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: JxWF4dkGjNxI+s28x8H6xIx4vsWu0XE3h1yjIGyez5Q=)
2: MtUZJrG93YjlOedI7qMBnb84kTo.roa (hash: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:d1:92:b0:c2:7e:06:18:cc:85:64:d3:33:26:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Jun 13 13:00:42 2025 GMT
Not After : Jun 14 13:00:42 2025 GMT
Subject: CN=ba525e425200e2c5b1946b5e1a1827d13ce39d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:11:96:b4:ae:90:2f:86:42:dc:ae:16:56:
1e:81:9c:1a:2d:04:14:9b:11:ab:26:29:de:4d:bc:
fd:b0:02:48:45:50:14:af:b4:9c:d0:c6:35:09:a4:
50:e6:5f:5a:11:49:a4:79:9a:c3:3b:50:29:f2:6d:
e1:95:0c:80:87:9e:9c:19:b2:bb:73:f2:f7:70:39:
a2:c0:a9:30:b2:46:35:0c:a8:be:8d:1a:54:dc:87:
25:d8:17:92:ed:d0:35:b3:f1:8f:1e:5b:21:4e:49:
9c:53:d6:cf:35:93:70:2d:57:46:5f:f6:46:88:9e:
f3:74:c3:33:dd:a7:c3:15:94:fa:95:79:19:b0:14:
88:be:fe:91:5d:b5:fa:cb:a3:fd:fd:c7:eb:de:97:
0b:72:2b:e8:aa:e5:48:a7:6c:66:75:46:71:b2:06:
f7:36:4e:6d:5b:e3:d9:16:59:f2:86:8f:b4:d0:d3:
69:e9:23:e6:6a:4b:27:d6:18:4b:de:1c:3f:04:7f:
0d:0d:f2:00:fa:91:99:0b:35:5d:f2:5c:9d:7c:ea:
f1:14:02:c7:ca:1e:f0:1f:1b:5b:5b:cd:85:9d:82:
7c:d0:c8:29:e4:09:d0:07:4e:90:49:20:c9:2e:f1:
b4:d5:32:d2:d2:5b:d5:c4:52:58:3b:76:62:de:6a:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:52:5E:42:52:00:E2:C5:B1:94:6B:5E:1A:18:27:D1:3C:E3:9D:45
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:22:83:15:ce:37:20:99:32:59:47:3a:c1:41:66:c3:b8:6d:
2c:54:cc:c9:bf:c8:91:f2:6b:90:37:d4:df:e0:50:b3:33:6f:
af:8e:2d:34:7c:26:be:f5:43:35:f4:92:89:49:35:97:1d:ba:
1d:2e:ab:fa:38:69:62:25:a1:b5:04:57:8d:79:6f:99:94:a5:
bf:42:49:59:0e:c1:f0:ea:49:55:b8:a3:ee:ff:f3:6a:6e:79:
ea:f8:51:43:82:de:70:5b:09:8d:0c:fd:66:c5:e3:03:ce:d6:
41:15:f4:15:78:37:74:9b:20:a8:29:27:cf:b0:93:e9:48:97:
08:2b:53:3b:8e:a0:95:99:72:2f:68:fc:1f:96:46:75:39:86:
14:6a:2f:69:a9:e6:82:0b:44:50:4d:d5:75:0a:ea:4d:07:0f:
bb:9a:18:99:04:0b:97:75:b3:71:d3:30:cd:ff:ed:6f:62:4a:
45:67:68:cb:0e:16:df:4f:38:97:05:9f:df:c5:2c:d2:7e:52:
57:c1:e3:97:ee:ab:d4:f5:17:e7:b1:6e:dd:ca:85:ec:f8:c2:
1e:85:3f:d6:cc:d7:e2:28:e5:30:e5:0a:cf:59:28:ae:29:45:
22:72:1d:ee:cc:d0:a0:7d:83:cc:fa:3c:36:6a:30:e8:43:e5:
d4:8c:09:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:49 2025 by rpki-client