Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: QEUIDPefsDctBZeV9UxfLeRtE2pfVmgoMdaVTTGOV5Q=
Subject key identifier: AA:36:13:05:24:A3:D4:66:9F:8B:1A:97:E8:62:51:2B:C7:63:D1:83
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 0197B77C80E01D23B0D10A4AAF249CC91735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:19 +0000
Manifest this update: Sat 28 Jun 2025 17:01:19 +0000
Manifest next update: Sun 29 Jun 2025 17:01:19 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: 1xlDqm85asBVKoCEU4kK21ZZ/LAKoicDEYrWzk2NJZw=)
2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:80:e0:1d:23:b0:d1:0a:4a:af:24:9c:c9:17:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Jun 28 17:01:19 2025 GMT
Not After : Jun 29 17:01:19 2025 GMT
Subject: CN=aa36130524a3d4669f8b1a97e862512bc763d183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:0c:83:fc:ea:1d:bc:30:4f:6e:c4:00:89:
f9:86:c6:99:e2:13:d3:62:98:b8:ab:29:3d:15:ee:
ef:12:22:46:ad:21:b8:f0:58:14:43:9d:5b:7a:af:
fb:4d:09:2c:cd:f5:ae:61:91:37:24:64:f8:df:12:
66:e2:bd:73:97:2e:f6:09:ff:7a:6e:ef:b6:61:c7:
ee:b7:50:b4:dd:f0:12:24:7c:7b:47:95:a3:da:df:
fb:f3:ff:6e:97:08:c1:b2:55:0c:77:a8:0a:05:e6:
29:61:ca:3b:76:49:e9:8a:36:e6:a6:9f:7f:d3:9c:
18:e2:9d:6f:39:af:00:3b:52:f0:94:1b:2c:90:46:
8b:1d:f7:7f:64:62:94:92:15:fa:1f:03:6a:b0:cc:
44:3f:df:02:a7:fc:4f:8e:de:60:2e:82:bb:ed:cd:
a1:4a:ab:e5:af:9b:f4:7f:d0:be:9f:c5:08:14:09:
d5:40:fb:7e:62:73:67:18:49:8c:a4:fc:ca:f7:04:
9c:a9:e7:9b:bf:5e:0a:e7:51:1c:64:b0:98:5d:23:
2a:71:f6:da:2c:32:71:f6:30:fa:d1:be:01:cf:94:
f6:1b:d3:54:68:b9:39:2b:3e:f5:ac:88:c4:ab:56:
ad:f8:0a:42:25:74:f7:30:39:23:ce:8d:5f:ab:79:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:36:13:05:24:A3:D4:66:9F:8B:1A:97:E8:62:51:2B:C7:63:D1:83
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5c:22:13:d3:07:1e:98:61:60:9c:f0:29:dd:29:d0:2d:df:
e7:a8:24:ee:51:e3:1c:28:2b:84:38:6d:0c:76:60:37:db:26:
1a:35:08:a7:4f:32:de:cd:5b:bb:6a:e9:28:ed:53:ad:f0:13:
d0:9d:8e:87:71:78:43:de:13:5d:e3:37:98:03:57:74:d3:ca:
c2:e2:a4:7a:09:7b:dd:59:87:67:29:3b:39:75:d7:21:82:62:
34:94:80:99:48:63:44:e3:88:73:fc:b1:af:e1:eb:16:74:c9:
93:39:a7:f4:3d:1d:3f:db:53:29:e2:ba:40:62:82:e1:b7:7b:
7f:da:15:d1:e7:da:7c:71:7d:c2:01:ab:40:92:82:f7:80:e5:
90:9e:6f:c4:90:c5:f2:ab:2c:ed:9e:df:c3:2a:ad:fa:33:ed:
63:57:94:01:68:2c:c8:48:72:96:df:9e:b0:61:53:a2:bf:bf:
24:df:21:ef:31:36:ba:4b:a2:49:35:13:ed:af:b4:ee:02:c6:
15:93:83:52:8c:3b:f8:f4:fe:89:26:d3:08:dd:53:50:7c:96:
53:ef:ee:41:2c:53:83:a4:db:4c:38:60:6d:c5:fa:08:e1:93:
66:6d:7b:13:df:f9:44:b1:b9:2a:b0:45:28:34:26:c9:c6:a2:
f9:17:26:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:18 2025 by rpki-client