Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: szcfae2Zg/7GUJqChneMw5kWjqgQnXx36yD4kFHEzqk=
Subject key identifier: AC:91:13:D0:30:00:E3:23:E4:9B:65:A1:30:06:26:D7:87:C4:FB:0A
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 01987D8AC8C25AA5A51595758B55858A3C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 10F6
Signing time: Wed 06 Aug 2025 04:01:44 +0000
Manifest this update: Wed 06 Aug 2025 04:01:44 +0000
Manifest next update: Thu 07 Aug 2025 04:01:44 +0000
Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: CPUSifcUlQ6ytcqnQmyjKEwk9n11JraZY7mTJcRlfeI=)
2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:c8:c2:5a:a5:a5:15:95:75:8b:55:85:8a:3c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Aug 6 04:01:44 2025 GMT
Not After : Aug 7 04:01:44 2025 GMT
Subject: CN=ac9113d03000e323e49b65a1300626d787c4fb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:61:cf:6f:23:b4:14:42:45:77:5a:86:15:
84:23:44:d6:ba:18:e3:74:d6:a2:b3:4c:c5:ad:c5:
39:7c:52:26:e5:f3:fb:74:ad:62:83:a1:f5:bf:17:
bd:a6:4a:03:90:d2:38:da:0b:00:36:2a:38:2e:8a:
ce:16:70:16:55:e7:1f:af:2c:30:b4:80:0a:e4:51:
22:46:0a:19:83:bf:0d:6d:fa:82:34:e0:44:31:84:
74:cc:1f:98:94:d0:57:dc:13:05:95:08:50:fe:8d:
3f:43:d1:70:12:d5:64:35:95:b8:87:73:db:2a:4c:
6b:f3:0c:6f:fc:e5:09:84:e0:20:c6:70:56:59:4e:
d5:8c:3c:85:96:ae:f4:43:be:32:6e:e2:7f:ea:ce:
5e:fc:40:12:60:45:a8:6b:23:f4:db:c8:05:e8:76:
71:67:e9:84:5c:29:f5:1b:81:89:3b:ca:0a:02:00:
9a:14:88:a0:68:87:dd:62:25:61:de:3f:e5:64:6b:
d7:5f:e9:60:38:77:65:e0:07:d7:b4:4d:a8:27:c8:
79:0e:e6:3d:a5:fa:f8:3d:0d:ae:dc:95:2c:0c:14:
c3:bb:88:03:30:81:7b:77:7d:ed:b2:7f:6c:68:7f:
dd:1a:12:f7:3f:20:88:17:42:5d:b9:65:29:c9:49:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:13:D0:30:00:E3:23:E4:9B:65:A1:30:06:26:D7:87:C4:FB:0A
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:09:16:d7:03:d1:da:f9:58:7a:ba:ac:2f:e7:e7:ad:8f:4b:
05:e7:6e:54:79:1a:37:c4:8a:c3:06:95:29:9a:0e:5a:6a:7f:
c2:34:e8:d6:3b:9e:f7:08:40:5a:59:b0:bd:78:9b:41:c4:fe:
bc:64:11:3b:bd:e3:d0:33:f0:97:d6:3c:6f:04:e4:b3:67:59:
e7:99:b1:bd:39:da:57:9d:1e:79:db:83:b9:c0:00:68:45:a1:
4f:f4:9c:18:46:06:0f:09:61:5a:4f:7a:3f:31:53:e0:84:18:
36:3a:bb:a3:aa:d8:c1:e4:25:c3:75:8e:c8:0c:c6:75:83:ca:
6b:11:52:9f:46:55:89:a5:85:8e:9d:f2:40:1f:d5:6a:eb:a1:
5a:25:4f:1d:b3:a0:cc:19:9d:04:4e:b0:ab:9a:b4:d1:79:33:
08:7c:c8:28:ac:ed:e2:f3:d9:33:8b:e3:e8:6f:d8:88:84:64:
b3:dc:19:0c:e4:1e:a8:c8:2b:ba:df:d7:ac:0d:9e:41:de:b6:
a7:df:73:33:f2:af:69:27:0d:15:4b:ab:7e:f8:45:21:c0:41:
2b:70:05:cd:2e:dc:85:c0:68:74:fe:51:60:85:3d:29:dd:02:
bd:b9:72:8e:1f:4a:8c:80:d4:7a:ff:17:ff:1e:38:e0:e2:49:
e4:c4:23:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:18 2025 by rpki-client