Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: RSRPS/HCNdRfF/jsSufa3hu0cf55bsc8CaAtRaR4IQI=
Subject key identifier: 83:A1:59:B4:AA:73:0B:77:4E:A8:9A:82:9B:37:4D:46:60:F5:3D:CC
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 0198D54DCC3A8FC6E5ACF559D50FBEF1FAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:01:42 +0000
Manifest this update: Sat 23 Aug 2025 05:01:42 +0000
Manifest next update: Sun 24 Aug 2025 05:01:42 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: slQmQ8CO2RnS9DJTkZQJBgi+kyPDwGX9hnv3r8gH5oM=)
2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:cc:3a:8f:c6:e5:ac:f5:59:d5:0f:be:f1:fa:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Aug 23 05:01:42 2025 GMT
Not After : Aug 24 05:01:42 2025 GMT
Subject: CN=83a159b4aa730b774ea89a829b374d4660f53dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:b8:4b:36:35:6e:f9:7b:70:f7:a0:a0:4b:
a1:62:da:25:e5:ff:83:29:77:54:2b:43:47:b1:c3:
39:ca:96:f2:42:70:82:be:33:1c:e3:1d:af:c9:63:
73:7f:f9:8b:dc:8b:8b:d2:00:8d:7b:23:64:3b:5e:
5f:f3:fc:e9:43:91:a8:57:ff:a9:8b:05:3a:7a:c5:
52:4f:3b:79:d9:40:b8:10:cf:8f:c8:5f:30:9e:2f:
a4:ea:4f:ec:bf:4c:58:10:59:1e:76:bf:aa:7a:ed:
84:7b:cc:cb:ca:6a:bf:b7:47:b0:15:b8:45:67:55:
b2:14:ae:95:85:87:f2:1a:1d:5e:e7:07:7e:fb:d1:
5d:61:ca:0c:65:86:97:11:24:c6:a0:7d:db:5a:90:
e0:f3:34:0d:f2:9d:c2:19:a2:d5:77:36:31:33:5a:
d0:0d:68:22:db:e1:79:ad:61:24:97:b7:14:9b:91:
12:9f:40:60:2d:79:18:54:f6:d4:b4:b7:5f:8c:bc:
25:30:21:29:ca:83:e0:b3:7a:51:29:eb:6e:3a:49:
32:d6:fa:ce:8e:09:71:51:77:a2:6e:43:ea:98:8e:
c0:03:6f:57:92:b5:98:84:f7:c9:41:2a:e2:f7:90:
db:96:f4:23:ca:b6:b4:dc:be:30:64:4b:ca:f6:96:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A1:59:B4:AA:73:0B:77:4E:A8:9A:82:9B:37:4D:46:60:F5:3D:CC
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:06:96:00:e1:aa:d0:d6:2a:f4:78:0f:1c:38:e4:09:ce:97:
7e:11:b7:53:5c:49:7f:ab:65:de:7c:bb:1e:6a:78:dc:ba:47:
26:62:97:24:fc:6d:53:e1:94:34:82:16:ad:28:69:47:99:0d:
63:3d:f2:14:8d:47:89:66:e1:94:0e:a9:60:df:8c:52:a8:5d:
99:51:f7:de:60:5d:ca:1f:4e:02:25:59:0d:b6:46:5e:24:09:
f2:2e:44:62:17:16:f3:94:bb:75:67:a3:6d:7d:fb:c0:23:ff:
db:6f:fe:f4:5b:ae:c4:5c:62:49:b6:20:3b:89:a4:2d:82:fb:
5f:5b:3b:fa:e7:47:76:a1:14:df:f1:45:18:4c:13:b5:ea:f9:
30:47:1e:bd:81:f9:3c:6e:9d:70:1a:ac:b5:fe:df:0d:64:d9:
f9:f8:04:cf:4c:59:e3:8a:19:96:36:84:52:38:7b:51:5a:cb:
67:9c:65:1f:24:60:98:dd:83:c9:3a:9c:6d:21:ca:72:f7:fe:
cd:01:d0:45:65:d2:5d:2e:e1:46:e5:87:ba:d0:73:9f:3f:fb:
9a:ec:e3:11:c6:e7:53:de:d9:ff:cc:a7:db:b9:74:8d:33:ce:
23:11:ea:60:37:7a:13:ae:cb:d9:00:60:71:bb:75:68:e4:e8:
5d:f1:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:50 2025 by rpki-client