Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: L+ottu2OljXojOkV6aKVeeC3vU1zFfOLaEb+Dnpsj2Y=
Subject key identifier: 09:C4:44:27:B3:F9:89:09:DD:F3:FF:E6:42:5A:6A:97:D8:21:4A:28
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 0197759C1B66CDC2C0F383A9E48605AC7672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 1596
Signing time: Sun 15 Jun 2025 22:00:54 +0000
Manifest this update: Sun 15 Jun 2025 22:00:54 +0000
Manifest next update: Mon 16 Jun 2025 22:00:54 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: 7YOCSXBd4vqrFl3eyU+hvJvu7sWZicwIiexgDlj0Eh0=)
2: G0J3ZwqY7nqQ1F-r-kfCdSWuyO4.roa (hash: +njzM6YBvg7QKHzm9fDQxiSdZRBXgF7BQneYn5PkN18=)
3: zYDOCeKC7kKgpKbk0isuZ6zgxdU.roa (hash: w347S4U24N5+dIdmg0/S6hyDG1PqUwaZbQe5AD4eTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:9c:1b:66:cd:c2:c0:f3:83:a9:e4:86:05:ac:76:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Jun 15 22:00:54 2025 GMT
Not After : Jun 16 22:00:54 2025 GMT
Subject: CN=09c44427b3f98909ddf3ffe6425a6a97d8214a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:f2:a0:19:d0:71:12:e8:f4:64:9f:e4:f8:
13:5b:b0:b4:b6:ca:20:e5:fa:97:52:de:01:45:48:
16:74:cd:ed:0b:ae:d0:fe:4d:43:b7:a4:c7:fe:35:
ee:74:02:0e:4d:21:7e:06:31:94:07:43:33:5a:4f:
e8:0a:f8:f1:9a:a5:87:8f:18:04:73:34:79:19:8b:
db:26:df:9f:41:e4:77:b2:a8:ea:98:86:ca:6d:ce:
5d:50:21:d3:f8:14:64:1e:25:d4:a2:34:f4:24:68:
99:30:07:61:6e:8b:c0:a9:f4:d1:e9:cb:b5:46:82:
3b:83:c7:b0:c6:f6:41:57:89:c2:8b:44:a5:ba:5b:
ae:ec:48:cc:e9:fa:17:1c:e6:bd:87:91:0f:46:e1:
f5:86:e5:75:80:e0:de:33:91:0c:e7:82:0a:92:01:
6e:36:5a:28:9c:1b:06:b8:ce:2c:3a:c3:9f:4d:c0:
98:80:96:bb:ad:d8:2c:23:3a:16:0c:0e:b3:51:1e:
ce:e1:af:ea:7f:fd:a6:a6:bc:03:d4:9a:2b:32:57:
7a:74:9c:f8:aa:ca:34:24:7b:b7:eb:74:24:f9:59:
05:70:b4:6d:3e:81:64:85:d4:6f:9f:bb:24:3d:24:
d8:29:27:23:b3:ed:43:97:39:39:47:a4:f8:4b:27:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C4:44:27:B3:F9:89:09:DD:F3:FF:E6:42:5A:6A:97:D8:21:4A:28
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:af:96:aa:2f:a8:34:05:2d:13:73:9b:8e:34:a6:6b:c9:00:
86:db:4f:55:4d:79:a9:c6:64:67:a1:e6:f7:5b:3c:ee:62:91:
6d:b4:2b:1e:c8:a5:62:b4:e8:a8:c3:d5:e8:8d:3f:50:ed:5c:
e1:b9:15:0e:9c:8d:4d:66:ef:b6:00:57:2e:34:bb:5c:ec:a0:
56:b7:44:ff:2a:a8:9b:08:3a:be:62:5e:00:fe:8d:61:e2:ef:
04:b0:75:6c:a1:d7:71:45:d3:c2:d9:b6:d2:9b:30:46:82:63:
26:95:02:2a:08:c4:57:e3:57:b5:f8:36:ad:7c:eb:04:70:4c:
f0:29:a5:7c:33:43:a6:be:cc:cb:b4:59:7f:e5:b5:09:29:79:
7a:f3:4c:28:9d:9c:d4:4a:31:59:06:38:0a:b8:fe:80:6d:fb:
8d:8f:52:e7:67:c8:e1:06:62:bd:29:26:f1:8a:c1:2d:72:67:
0c:d0:95:cc:c9:88:54:9a:4a:64:2d:68:0f:b9:7f:7e:0b:49:
99:37:8b:83:7b:5a:1c:b6:e0:8d:29:93:2d:08:4e:35:2c:39:
e4:5e:b5:b3:74:2a:e5:1e:52:40:ae:bb:78:47:36:41:d9:92:
7d:d1:46:76:f4:b8:1d:41:41:28:b8:6e:76:2a:91:73:51:1c:
14:84:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:14:40 2025 by rpki-client