Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
File: dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json)
Hash identifier: 6G0otIvh4xvfzVSAo1C8f4Y0i4H5XGIBafkFsqDcO6w=
Subject key identifier: 3D:4C:20:0A:1C:E1:34:B6:01:74:97:7C:0E:79:81:03:F0:5D:54:BF
Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Certificate issuer: /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Certificate serial: 01967AFBD05968AE44A0951C8F67280C664D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
Manifest number: 0BA2
Signing time: Mon 28 Apr 2025 06:00:45 +0000
Manifest this update: Mon 28 Apr 2025 06:00:45 +0000
Manifest next update: Tue 29 Apr 2025 06:00:45 +0000
Files and hashes: 1: dNIjhcgOmJl_uqUY3ufEirea4-I.roa (hash: gkwMMNbP4H2f7PZtpLojDcOWvuhbyLZWIbK4WgzSXOU=)
2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: 8JIxe/RhXxtAwG5uEgCdLPkmpLMBfGCzIP1GFiOdy3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:d0:59:68:ae:44:a0:95:1c:8f:67:28:0c:66:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Validity
Not Before: Apr 28 06:00:45 2025 GMT
Not After : Apr 29 06:00:45 2025 GMT
Subject: CN=3d4c200a1ce134b60174977c0e798103f05d54bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:59:f7:de:2e:ca:34:cd:91:44:f9:4b:82:60:
d2:49:fb:fa:51:b5:9b:64:c9:95:fb:59:be:c1:f3:
a1:d9:2a:f5:59:de:35:87:8c:08:3c:e7:48:bd:a0:
4e:b7:f5:f6:71:9a:3f:35:89:69:b6:80:7d:66:62:
7d:44:39:23:e1:bb:22:f7:cb:16:43:c6:b6:04:d6:
f5:83:98:ce:20:38:2b:ab:ed:b8:6f:8b:19:b8:25:
6f:cf:85:1c:a8:63:6b:00:c6:6b:3a:ac:0a:05:4f:
4d:89:0f:53:56:e5:6c:a4:fe:89:2e:a0:98:a8:c2:
a5:0f:57:49:a2:71:75:e1:51:b5:b4:08:eb:d5:1d:
9b:8d:8e:ce:48:f2:82:35:cc:33:9d:38:0a:3b:8f:
ce:e7:b2:56:4b:59:06:1a:86:1e:73:4d:da:f8:35:
be:23:46:7a:59:02:4e:99:e2:95:6c:5f:57:85:35:
30:30:c9:0f:14:95:59:05:66:f6:51:5f:b0:06:df:
80:53:3e:17:7c:17:b3:e1:2e:a9:03:b8:b8:ef:3a:
b2:d6:fa:c3:f7:4d:2e:aa:2c:ec:50:04:56:3b:95:
ba:a0:f2:fc:e8:da:5b:d1:01:48:16:31:88:79:14:
aa:9f:f0:f3:09:7b:02:c7:ab:e8:2c:1e:12:da:43:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4C:20:0A:1C:E1:34:B6:01:74:97:7C:0E:79:81:03:F0:5D:54:BF
X509v3 Authority Key Identifier:
keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b5:6c:c6:7b:50:77:28:32:8f:01:d0:f2:d9:80:c3:c6:9c:
e4:89:54:26:3a:24:2c:74:1b:5e:c4:99:0b:0e:a0:7f:79:ba:
c1:b8:de:f8:f1:dc:52:48:8a:2b:59:81:3b:09:fc:e7:e3:57:
84:78:73:02:56:b8:ed:be:ea:01:1c:dc:2e:40:01:1e:95:60:
02:6f:40:bd:cd:3f:85:35:cd:0e:da:77:e6:90:9a:34:c7:7b:
1d:cd:a9:ae:46:97:e3:df:29:18:13:d9:72:33:2c:53:44:19:
9b:e9:e9:fa:d6:f2:a0:21:bf:88:fb:8d:b2:01:7f:c2:83:a9:
1c:6c:f2:75:9b:c1:1c:85:ea:f1:2f:38:02:87:fb:02:79:b5:
10:fc:d6:85:64:f3:e6:b6:c5:13:30:1c:68:24:d5:be:f8:4d:
f8:89:b7:ff:65:7e:57:1f:14:63:13:7a:25:2b:de:d6:49:95:
7a:2c:f0:60:f7:bb:4d:62:cf:42:1b:43:f5:f9:27:dc:78:8b:
66:aa:aa:6a:c3:7a:75:6c:84:6c:00:04:5b:78:65:40:60:d5:
d8:ab:bf:5d:c4:2d:75:bd:7d:d0:ca:23:0d:e2:88:c2:e1:f1:
d3:90:a5:a8:90:f8:4e:7a:3c:79:fd:7e:5d:a3:c5:41:bb:31:
03:65:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:18:36 2025 by rpki-client