Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
File: dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json)
Hash identifier: 3cxR50MTLGy/UAwgO/90nxaMgHxlwbIDhanaQPB7G8I=
Subject key identifier: E7:61:37:96:0D:DF:1C:01:5D:83:E2:71:2C:35:9D:40:AB:5A:8D:FF
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Certificate issuer: /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial: 0197B88F9BBECBB70AF4D13B38933EA228B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
Manifest number: 08B2
Signing time: Sat 28 Jun 2025 22:01:48 +0000
Manifest this update: Sat 28 Jun 2025 22:01:48 +0000
Manifest next update: Sun 29 Jun 2025 22:01:48 +0000
Files and hashes: 1: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: J0hv/zdzhna628YFa8ddjmATshKA/ekpNX+YKeWMJI0=)
2: fckG1hreaQ8xP9aJJKEUiJVYbO4.roa (hash: H/fpzZgWfyhKP6Q91nDD52iN8W1nvip6ZLK/KybKJsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:9b:be:cb:b7:0a:f4:d1:3b:38:93:3e:a2:28:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Validity
Not Before: Jun 28 22:01:48 2025 GMT
Not After : Jun 29 22:01:48 2025 GMT
Subject: CN=e76137960ddf1c015d83e2712c359d40ab5a8dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:92:a4:33:d9:25:1a:a2:e2:37:64:62:74:35:
1f:ce:70:25:51:45:cc:2a:e1:b7:42:12:e4:95:a6:
b3:22:fd:6b:ce:da:a7:58:8a:a5:3d:d2:14:ae:88:
e3:c7:bd:dd:68:15:b7:e2:db:00:72:a9:07:21:50:
81:a4:e3:57:77:cc:a4:3b:c2:4e:af:29:58:4b:4b:
4e:59:2e:bd:56:3f:a9:e9:71:8a:ed:b7:a4:e5:0c:
19:0b:e2:03:db:77:e3:3f:57:8f:c1:2b:55:f0:46:
ad:74:0d:4e:4d:e5:91:b1:54:be:3c:94:a0:7e:0d:
86:10:bb:e8:ad:3b:c8:a8:fb:a5:61:80:03:ea:4d:
cb:81:38:4d:c5:68:4e:83:49:29:1b:35:bb:e1:cb:
5f:4c:9d:27:96:7c:82:6e:a1:1a:df:10:90:0e:e0:
27:05:5a:bd:e0:e6:6d:29:8a:90:94:9d:85:a3:d8:
0b:60:cb:ef:11:5e:65:0b:09:c4:bd:a0:55:d1:fe:
38:a1:9c:da:4e:0e:42:e5:12:bf:62:23:22:8e:ef:
72:d1:cc:9e:a6:18:b3:c8:9c:b1:b3:6b:42:e2:0d:
23:f0:8b:1b:d1:59:93:46:8b:e1:bf:09:56:62:d5:
55:ad:a8:99:64:7d:23:2d:e0:36:95:0d:bf:91:ee:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:61:37:96:0D:DF:1C:01:5D:83:E2:71:2C:35:9D:40:AB:5A:8D:FF
X509v3 Authority Key Identifier:
keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2f:ea:69:99:0a:21:6e:89:f9:ed:96:d9:6e:b2:b9:4d:8f:
63:67:7d:67:ad:79:25:04:06:16:ea:2c:96:65:dd:fe:c2:94:
60:b1:88:41:4f:21:a2:4d:80:09:fb:2d:7d:0e:84:38:bb:af:
ff:14:80:fd:96:36:f1:84:b3:2d:ba:b6:7a:4e:50:05:7f:87:
4b:15:0e:76:09:b9:77:af:b5:94:1e:85:86:99:a0:9b:f1:6e:
b5:d8:26:40:75:d8:4b:2c:29:70:b2:18:d2:cc:28:b3:43:21:
48:6f:27:f5:65:ca:96:a4:8a:38:3c:6d:ee:07:83:ea:33:4f:
a7:5f:b5:ea:0c:84:d0:9d:c0:10:be:cf:c9:0f:93:8a:5e:1b:
e1:89:6d:21:48:dd:47:e3:51:7a:07:c8:42:67:df:22:c8:9b:
53:65:5a:39:4e:7d:33:0e:3d:e9:4c:b5:6a:f6:27:24:15:68:
fc:56:96:2d:1c:90:49:aa:60:25:51:6b:44:89:a4:f6:06:5e:
06:5a:32:c3:9b:72:c6:a7:ed:08:74:ee:bc:38:38:39:bb:2a:
13:64:6c:41:75:98:7d:c9:26:d4:95:b0:f4:b7:99:f7:99:c9:
92:e4:27:3d:6b:98:32:e2:4a:d4:a4:b9:40:90:18:a8:a6:df:
cd:65:7f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:20 2025 by rpki-client