Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
File: dbh4BinZITNXwHDBwBBgU0dIg8E.mft (raw, json)
Hash identifier: c61ae4hRZBqiftQJyOxQrzZM9lYz1Of45GWlFXgGHN8=
Subject key identifier: 26:58:CE:AD:BE:87:7E:1F:C0:9E:73:C4:FE:8C:9E:FE:AC:48:04:06
Authority key identifier: 75:B8:78:06:29:D9:21:33:57:C0:70:C1:C0:10:60:53:47:48:83:C1
Certificate issuer: /CN=75b8780629d9213357c070c1c0106053474883c1
Certificate serial: 019776E5F570248048178113E59A3B80D5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
Manifest number: 0BB8
Signing time: Mon 16 Jun 2025 04:01:11 +0000
Manifest this update: Mon 16 Jun 2025 04:01:11 +0000
Manifest next update: Tue 17 Jun 2025 04:01:11 +0000
Files and hashes: 1: dbh4BinZITNXwHDBwBBgU0dIg8E.crl (hash: EJC6hCwPmp2Zg4OZIGGMJxGrldfya82zLBKy7dq2PHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:f5:70:24:80:48:17:81:13:e5:9a:3b:80:d5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b8780629d9213357c070c1c0106053474883c1
Validity
Not Before: Jun 16 04:01:11 2025 GMT
Not After : Jun 17 04:01:11 2025 GMT
Subject: CN=2658ceadbe877e1fc09e73c4fe8c9efeac480406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:3a:5d:52:22:ab:2c:cc:2e:fc:12:d3:6c:
4b:ee:34:2e:df:a4:65:97:c9:eb:b4:33:d7:b4:01:
7a:57:40:fc:db:d1:90:b5:4b:60:b7:38:93:d6:7f:
f1:a3:3b:81:61:0a:29:84:c3:69:9a:e6:9c:27:b0:
44:6d:3b:54:f3:25:e4:f4:ef:ec:f5:b8:64:95:6a:
9d:c7:d6:7f:3d:4e:e2:1e:da:89:15:88:08:26:80:
93:dc:86:e5:df:f7:70:ba:0e:52:88:44:d8:75:3b:
61:db:c1:84:6d:d8:e4:48:55:de:f4:e6:6a:92:07:
ed:45:c5:d3:bc:ff:dd:d3:5c:f0:af:ee:6c:9d:ce:
c5:e3:76:98:9f:69:76:2e:6b:72:51:9b:19:54:1e:
c8:c3:4d:b0:2a:e4:68:53:a8:7b:b5:d0:db:e7:b6:
ef:4d:14:34:24:96:ea:bc:33:e1:1f:54:63:ae:7d:
77:53:4c:cb:4f:c6:92:17:ac:93:f5:21:3c:7b:22:
a2:fb:16:67:86:81:d0:e2:05:65:4a:3c:c3:61:6e:
42:5d:0d:bf:dc:55:64:ae:34:8c:f7:8a:f3:e8:f1:
22:c3:4f:09:6d:5c:be:a8:0b:af:4f:b2:bc:4f:1c:
c3:5b:2b:e1:20:57:fa:4f:d3:e9:f4:4f:81:f0:c1:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:CE:AD:BE:87:7E:1F:C0:9E:73:C4:FE:8C:9E:FE:AC:48:04:06
X509v3 Authority Key Identifier:
keyid:75:B8:78:06:29:D9:21:33:57:C0:70:C1:C0:10:60:53:47:48:83:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a7:ef:41:c6:03:fa:9b:cb:ba:13:29:30:1d:33:00:fd:e8:
82:95:9d:6f:f3:d8:14:da:9d:b9:3d:de:41:f7:e7:f6:47:da:
ae:08:2f:98:ba:9b:d1:7b:2c:3b:95:a7:23:da:4e:47:b7:f3:
95:0e:bd:08:a1:ef:59:9c:9b:f5:f6:f6:02:4b:4c:27:bc:ba:
bf:0a:72:0d:d6:a4:9d:13:d6:c0:90:9c:99:5b:1b:09:d5:0c:
28:ae:94:ea:34:39:c2:5f:d7:d5:6b:3e:a8:85:43:60:e4:3a:
e2:ca:db:6e:ca:81:3d:c0:c0:2a:b8:40:48:bc:20:24:21:71:
c5:37:11:17:e6:e8:a6:38:a7:57:a7:97:04:ec:03:39:7d:5f:
4d:c4:c9:2f:c8:de:40:96:32:f3:e8:8f:d8:30:97:7f:f4:4d:
27:55:89:d0:98:70:72:0d:18:ca:5b:f2:b1:8f:f6:a3:82:2b:
60:ed:18:38:7a:c1:89:3d:77:32:75:cb:d8:2b:84:26:e6:c1:
0e:64:3e:67:60:51:40:f1:08:e7:c6:1b:0c:ac:25:ff:53:23:
ff:99:78:c1:4a:71:69:6f:24:d6:96:d3:43:4d:4d:f8:5b:9e:
85:f6:d6:e3:5a:e6:cd:2c:44:f1:7b:a4:50:f7:69:68:cb:d4:
4f:71:6a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:36:59 2025 by rpki-client