Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: jqPjcW+zO+n69XpQPWQmM31UVS/Z8HXQEtZI7IxKcbY=
Subject key identifier: B5:AC:C6:D0:36:C7:BC:BC:A1:68:C2:9B:24:80:FD:0E:3B:42:3B:DA
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 019676B12FEC8A120FF59B1472DD0A4ECB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 10:00:45 +0000
Manifest this update: Sun 27 Apr 2025 10:00:45 +0000
Manifest next update: Mon 28 Apr 2025 10:00:45 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: HJXrJLh18KhlG4G8HbeasrCBy+OgIUmmJKQsVyEUkGY=)
2: G0J3ZwqY7nqQ1F-r-kfCdSWuyO4.roa (hash: +njzM6YBvg7QKHzm9fDQxiSdZRBXgF7BQneYn5PkN18=)
3: zYDOCeKC7kKgpKbk0isuZ6zgxdU.roa (hash: w347S4U24N5+dIdmg0/S6hyDG1PqUwaZbQe5AD4eTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:2f:ec:8a:12:0f:f5:9b:14:72:dd:0a:4e:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Apr 27 10:00:45 2025 GMT
Not After : Apr 28 10:00:45 2025 GMT
Subject: CN=b5acc6d036c7bcbca168c29b2480fd0e3b423bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:2a:88:b5:93:a0:87:e1:5f:60:92:60:e3:
c1:52:21:19:a0:97:17:50:ca:86:1d:1c:46:25:d5:
59:f6:da:1d:51:d1:64:5a:93:1d:b6:a7:a2:73:cf:
d0:38:e1:ec:ec:de:77:d2:50:91:60:21:39:29:02:
77:47:19:4b:a6:68:f8:e8:13:03:4b:f5:fe:7c:9a:
2d:65:c6:b2:91:50:21:00:29:ba:62:d5:03:97:1a:
51:4a:a5:63:29:d2:9c:f3:fe:aa:45:c8:d9:f8:9c:
66:f2:67:9d:a2:ed:b1:12:ea:da:13:c9:a7:7f:1b:
b3:44:a0:cc:2d:10:50:6f:64:e5:fc:bd:93:25:4c:
9b:df:d9:d9:25:4e:bd:2e:b5:c7:f8:01:80:72:94:
64:4f:4e:99:3f:25:d8:71:2f:eb:4c:6c:a5:79:0f:
c8:fa:b7:6c:56:b0:cd:0d:f1:18:99:e1:5f:e9:07:
3e:e1:f4:93:3b:3d:af:9a:d4:e1:5b:2b:b1:0f:00:
66:30:e3:f5:8c:05:16:c1:19:65:c3:8e:69:9f:0b:
98:db:07:26:40:92:57:97:13:0d:ed:82:21:30:9d:
f8:10:f2:d7:b1:4d:5c:5f:d9:ff:4e:4f:1e:71:f3:
b3:4e:08:18:8c:47:1a:1d:72:33:7e:94:64:b3:e0:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AC:C6:D0:36:C7:BC:BC:A1:68:C2:9B:24:80:FD:0E:3B:42:3B:DA
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:94:e7:8b:72:53:0d:4c:34:c1:79:0b:5f:d2:8d:dc:f2:33:
76:56:c3:d9:30:ea:3c:db:77:64:b8:d9:87:fa:00:cd:f0:3a:
da:a0:5f:53:d8:31:db:48:bc:fa:6b:e8:75:5a:39:50:17:35:
64:ed:02:e9:8a:0a:bf:a3:19:b2:d0:eb:a1:f5:4f:90:32:16:
3f:15:e1:3b:82:d1:01:cd:21:4b:d4:72:bb:d2:4d:46:ea:4b:
2c:0a:cd:00:3c:c7:79:2e:5d:8e:02:6f:4b:02:e9:6b:41:f2:
30:1c:c3:1d:5a:d5:65:36:b0:9a:98:11:f0:73:94:67:1f:3f:
3d:a6:51:a7:80:1d:90:5f:99:c4:dd:5f:82:07:94:63:3f:16:
e8:f7:e0:27:1e:81:bf:94:d4:69:a3:6e:a1:a6:1d:37:50:30:
ae:c1:2d:17:6c:28:1f:33:04:1d:fa:19:e2:58:4b:af:0b:07:
3f:17:98:1e:b0:e3:c6:76:39:22:37:e0:64:aa:9d:f2:26:9c:
67:4b:15:31:9c:18:65:4e:97:db:92:61:c0:2c:74:23:86:31:
63:41:ef:f9:f8:27:68:2c:18:d5:f5:b6:a6:45:7c:98:4e:a3:
95:7f:db:d8:af:f0:c9:7c:fb:bf:59:bc:93:c4:fa:01:97:c3:
1e:1e:11:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:51:46 2025 by rpki-client