Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: aiclw1SMwEbFD2grisSInCL0voArxWhWc7+mDunDF68=
Subject key identifier: 85:71:FF:6B:E8:0D:B8:89:14:77:66:3E:BA:F7:EF:FE:A7:D3:20:3F
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 019873E336D5F00C32B2C41794FCAB1DF357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:02:07 +0000
Manifest this update: Mon 04 Aug 2025 07:02:07 +0000
Manifest next update: Tue 05 Aug 2025 07:02:07 +0000
Files and hashes: 1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: zMU1AW6PLX84J8PxUocVhL5WvYk3V9ZjS0KRcRjkfuw=)
2: MtUZJrG93YjlOedI7qMBnb84kTo.roa (hash: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:36:d5:f0:0c:32:b2:c4:17:94:fc:ab:1d:f3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Aug 4 07:02:07 2025 GMT
Not After : Aug 5 07:02:07 2025 GMT
Subject: CN=8571ff6be80db8891477663ebaf7effea7d3203f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:a4:9b:f0:36:a5:24:f8:2e:39:a3:39:bb:
98:b4:86:18:9e:96:00:8d:62:44:e2:d1:3a:22:8d:
ad:64:a8:c3:8e:b9:3b:ee:20:65:f6:79:e4:b0:3b:
81:13:20:f1:ca:6f:3f:b5:03:2a:4e:f2:29:f5:89:
91:7b:35:63:f5:39:5c:91:52:73:07:be:e6:b8:ee:
ed:2b:32:d0:9d:e2:25:5d:0f:68:1a:8f:fa:fc:5f:
27:be:ed:ab:97:84:b1:0d:f9:f3:c0:a5:bc:f7:9b:
45:98:1b:ca:d7:eb:ff:7d:37:58:1f:20:ee:8c:28:
b4:e4:c8:a5:20:dc:42:cf:23:47:ed:02:88:3f:97:
99:72:ab:f8:98:ee:82:30:9a:e6:c4:52:64:e3:63:
0a:42:c6:d0:f5:f6:47:14:63:60:94:b6:73:27:d3:
f6:31:e5:36:e8:79:6c:2a:25:e3:10:4f:eb:48:f7:
8e:61:f5:64:90:94:67:1e:60:8e:d9:12:a6:b2:33:
dd:b4:19:38:35:08:b4:60:8d:52:34:44:ba:a2:04:
d0:15:66:d7:f1:db:4f:e1:94:a0:5f:3f:0a:dd:96:
99:2f:7c:80:57:54:db:77:d3:b9:fd:41:fa:57:40:
5f:fe:6d:29:a6:0d:0c:5a:ba:97:d1:bf:67:ae:92:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:71:FF:6B:E8:0D:B8:89:14:77:66:3E:BA:F7:EF:FE:A7:D3:20:3F
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f6:66:c0:41:26:ee:81:d3:2d:5f:2e:85:cc:e7:a1:4e:1a:
3b:13:c2:76:38:cb:52:43:6e:46:45:12:2f:c0:0a:d1:05:55:
87:42:e0:b9:21:d7:88:ae:9d:4a:a1:f0:b7:e4:d2:ce:c5:09:
b5:2b:6f:b7:91:b8:4a:ae:de:b8:03:eb:ff:c1:79:a9:fb:d9:
a1:7c:34:7d:14:08:56:26:9d:2c:41:4e:72:29:40:7a:6b:16:
34:27:51:fa:4b:b8:87:f9:d4:94:2e:79:c4:8a:88:00:08:1f:
b6:5c:e4:f2:f2:f7:a4:89:27:d2:a2:e7:a8:76:a9:f0:84:07:
4a:b0:3c:13:bb:8c:45:6d:5a:ae:b0:b4:c3:71:22:0e:4e:5b:
80:87:7f:6c:72:70:d5:fd:2a:eb:de:06:7b:ae:99:7a:63:47:
6f:f6:ae:c8:da:2f:15:0d:7a:95:f5:e7:7d:58:78:de:fe:08:
36:ac:8f:7a:12:4a:e8:a3:c0:f2:0f:98:b7:2f:40:06:95:65:
c9:fa:b6:02:16:0a:fd:27:87:70:60:68:eb:93:20:35:eb:2f:
f1:ad:9b:a8:14:be:e5:48:de:d0:33:fc:49:aa:1b:48:c3:e8:
a3:cd:c7:6d:7c:ee:26:59:cf:56:0c:84:6a:d1:13:37:69:52:
d1:e4:6c:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4zbV8AwyssQXlPyrHfNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjQ5MTIyZDllOWJiYWZhNTc3ZjY0NDdmMjFiOGJlYzc2
YzA1ZjAwHhcNMjUwODA0MDcwMjA3WhcNMjUwODA1MDcwMjA3WjAzMTEwLwYDVQQD
Eyg4NTcxZmY2YmU4MGRiODg5MTQ3NzY2M2ViYWY3ZWZmZWE3ZDMyMDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYqkm/A2pST4LjmjObuYtIYYnpYA
jWJE4tE6Io2tZKjDjrk77iBl9nnksDuBEyDxym8/tQMqTvIp9YmRezVj9TlckVJz
B77muO7tKzLQneIlXQ9oGo/6/F8nvu2rl4SxDfnzwKW895tFmBvK1+v/fTdYHyDu
jCi05MilINxCzyNH7QKIP5eZcqv4mO6CMJrmxFJk42MKQsbQ9fZHFGNglLZzJ9P2
MeU26HlsKiXjEE/rSPeOYfVkkJRnHmCO2RKmsjPdtBk4NQi0YI1SNES6ogTQFWbX
8dtP4ZSgXz8K3ZaZL3yAV1Tbd9O5/UH6V0Bf/m0ppg0MWrqX0b9nrpINlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVx/2voDbiJFHdmPrr37/6n0yA/MB8GA1UdIwQY
MBaAFA20kSLZ6buvpXf2RH8huL7HbAXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2Et
MTQ2MDBkNTc4MDhhLzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2EtMTQ2MDBkNTc4MDhh
LzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfZmwEEm
7oHTLV8uhcznoU4aOxPCdjjLUkNuRkUSL8AK0QVVh0LguSHXiK6dSqHwt+TSzsUJ
tStvt5G4Sq7euAPr/8F5qfvZoXw0fRQIViadLEFOcilAemsWNCdR+ku4h/nUlC55
xIqIAAgftlzk8vL3pIkn0qLnqHap8IQHSrA8E7uMRW1arrC0w3EiDk5bgId/bHJw
1f0q694Ge66ZemNHb/auyNovFQ16lfXnfVh43v4INqyPehJK6KPA8g+Yty9ABpVl
yfq2AhYK/SeHcGBo65MgNesv8a2bqBS+5Uje0DP8SaobSMPoo83HbXzuJlnPVgyE
atETN2lS0eRs9g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:32 2025 by rpki-client