Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: py1pt9oHjTgWglmZB1MOf5jd9kGzu+SxaPBOgu9V0/4=
Subject key identifier: BB:16:54:81:D2:61:D9:D7:05:B1:51:61:36:00:5B:63:C0:81:51:CE
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 019683911FD0BD96BD8495252C041A00A069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 22:00:48 +0000
Manifest this update: Tue 29 Apr 2025 22:00:48 +0000
Manifest next update: Wed 30 Apr 2025 22:00:48 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: NeM3nKET5g2f6dAbuMyfqDfwpw1mCJMXeg94SdeThbI=)
2: UxM6DupfvrTiE9Ym5QgQzISnMNk.roa (hash: RfjYqd31h9TXarIc1kWDtlc68P4m+jSBxb+HHdHsfRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:1f:d0:bd:96:bd:84:95:25:2c:04:1a:00:a0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Apr 29 22:00:48 2025 GMT
Not After : Apr 30 22:00:48 2025 GMT
Subject: CN=bb165481d261d9d705b1516136005b63c08151ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:3e:be:a1:1d:a5:ca:9b:54:28:db:ac:6c:
be:e2:46:02:7d:8c:14:29:bf:8b:93:69:8f:8f:0f:
b4:9a:72:e2:c3:07:3a:72:f1:68:a8:47:90:97:37:
f2:c0:91:2d:36:ed:93:aa:44:c3:f1:f0:89:39:81:
b9:89:c8:79:68:64:12:43:8f:6b:a8:6b:13:cd:df:
cc:ce:d2:82:94:1d:79:5c:a8:83:ce:c9:30:b4:2a:
5e:d5:55:ff:e2:c0:3e:a2:fa:7b:a7:0f:bc:fd:f3:
3b:55:46:91:92:27:e1:4a:fa:83:c8:f5:7f:c6:ad:
59:54:2d:46:67:80:ab:9c:6d:26:f6:73:2f:7d:ea:
cf:18:dc:97:0c:7f:da:88:a9:2d:97:e6:3a:ed:8f:
6f:6d:80:93:e3:d8:0b:41:61:02:c3:97:4f:5b:2f:
0c:b0:a9:df:90:59:d8:a0:c5:fd:90:2a:c7:ac:15:
e7:69:79:37:4a:de:c3:af:19:92:5e:fa:8c:6d:7f:
1b:a5:ea:f2:b2:9b:70:16:69:ca:f5:7a:c9:60:18:
58:07:8e:b5:97:fa:0b:e4:b9:cd:a7:80:b3:2c:07:
5e:db:5e:d4:e0:c5:a8:4e:ed:fe:ba:6b:92:74:8f:
75:bd:34:06:76:57:73:83:d9:34:65:98:ed:f0:29:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:16:54:81:D2:61:D9:D7:05:B1:51:61:36:00:5B:63:C0:81:51:CE
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:64:c9:44:25:26:1a:a2:2d:58:66:4b:30:c9:2b:65:c5:76:
1d:29:9f:64:46:b5:9c:fb:1c:53:e4:37:e4:9c:4a:55:6a:57:
83:ba:36:e8:be:0e:e5:48:a4:97:a5:50:b8:e3:d7:89:ba:3b:
c5:de:a9:d0:c7:86:fa:24:30:88:50:17:79:2c:54:93:06:ac:
eb:37:79:df:3e:c2:ea:bc:47:2b:78:02:c3:31:a0:02:5c:9e:
66:26:01:43:4d:91:b6:d8:f2:de:e3:f8:e3:d1:14:fb:d4:b4:
cd:90:03:c7:79:f4:4a:3d:e4:a4:14:91:70:de:18:17:db:15:
b4:68:55:6f:59:ab:1e:38:53:af:33:42:18:04:f0:1f:8b:77:
3b:b9:53:95:c0:5d:ef:d0:40:31:57:09:b0:3a:7b:b6:25:b0:
ec:b6:a6:cf:20:a2:71:52:2b:d6:03:96:49:bf:8c:b7:16:8b:
8d:14:43:91:1d:bd:a1:8a:27:50:84:ca:ff:68:34:45:1f:a9:
92:4a:43:24:c8:b4:9c:3d:66:7a:50:09:f8:34:fe:15:3f:4d:
e5:d1:44:d1:41:93:a3:c9:d2:b7:a5:60:ed:52:91:c0:47:17:
27:b8:16:4e:37:46:11:11:ea:87:f2:d2:a3:95:77:b9:e6:a3:
6e:e1:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:44:10 2025 by rpki-client