Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
File: DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json)
Hash identifier: AGyrony/RAw+29jp3nxZbFlBD2IUscOt/K30mPExf+M=
Subject key identifier: B4:AB:B0:87:72:CE:96:2C:92:1D:B1:28:62:71:E1:36:74:76:0C:F0
Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945
Certificate serial: 0196BD80BFB046D30DC447847F765AE7E7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
Manifest number: 0A18
Signing time: Sun 11 May 2025 04:00:53 +0000
Manifest this update: Sun 11 May 2025 04:00:53 +0000
Manifest next update: Mon 12 May 2025 04:00:53 +0000
Files and hashes: 1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: j4brivn+2yc7FXN83lTL0Dmw/ZeQ+9im1J9flmtIlcg=)
2: s3TIKJMGO-H8fbbN5SX9DjrKZbg.roa (hash: nJZCH4ElBXirrkbsvqmvn6OniRKSBo6O3OjFqSqnuAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:bf:b0:46:d3:0d:c4:47:84:7f:76:5a:e7:e7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945
Validity
Not Before: May 11 04:00:53 2025 GMT
Not After : May 12 04:00:53 2025 GMT
Subject: CN=b4abb08772ce962c921db1286271e13674760cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:9d:56:d6:91:36:eb:9e:70:c8:f9:06:43:
25:5e:17:56:3c:ed:ed:7a:41:d1:0d:62:31:9a:3d:
0a:78:03:c5:a1:b6:fb:dd:a4:b4:aa:49:e4:92:da:
a4:da:1a:85:8b:40:3b:da:fe:fe:2a:c2:7d:49:44:
2b:67:b1:6e:da:99:43:59:d2:59:c8:8b:36:d5:b8:
88:1e:6b:6b:08:35:db:54:ca:0f:ad:1b:f6:55:3c:
a0:f7:47:f9:0c:79:a1:0f:64:98:35:3e:7d:1a:f6:
2e:18:37:26:54:a2:af:ca:d9:09:a8:d6:8d:87:06:
6b:d0:5f:42:f4:d3:39:7a:4d:73:b9:74:e0:e6:1f:
b4:81:a7:db:5a:75:82:1b:b5:bc:04:a7:f1:91:82:
b0:2b:88:fd:fe:8f:5e:9c:f4:25:42:3e:d6:20:d5:
a7:18:09:e8:2c:c0:35:8b:f9:60:9c:f2:37:56:a8:
42:69:f1:09:3d:d9:b0:2b:f9:e4:3e:57:f1:bf:15:
09:ed:cd:34:f4:c4:7f:2a:f5:c3:aa:22:f1:e2:dd:
cf:48:fe:62:bf:0c:be:4b:8c:88:c3:0a:44:33:2c:
f2:b3:c7:a2:35:be:a0:66:c6:98:d6:48:ab:be:8a:
e6:d2:ee:76:2b:e9:5f:fd:31:34:83:aa:40:67:5a:
60:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AB:B0:87:72:CE:96:2C:92:1D:B1:28:62:71:E1:36:74:76:0C:F0
X509v3 Authority Key Identifier:
keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:40:2b:b3:58:e3:07:2e:0a:3d:6c:73:b5:32:24:9d:07:50:
a7:20:c4:b7:ca:90:7e:e9:ae:c9:b9:24:96:d1:a0:b2:13:12:
4c:6c:8b:e5:2d:1b:27:e4:cd:db:2f:18:e0:37:f6:64:d6:1d:
4b:11:b9:04:12:a3:5f:f8:81:40:30:88:25:b8:b0:93:0b:b4:
e8:03:6a:06:dd:ac:9d:a6:f3:cf:56:c5:ce:d5:5c:33:29:9b:
4b:9d:93:0a:0e:30:4e:4b:de:42:4a:05:70:7c:5c:84:92:44:
b9:4f:c0:b4:70:16:e7:37:17:61:9d:77:f0:1d:18:a6:9f:27:
e1:83:62:4d:a5:9a:6e:2b:89:f2:b5:ae:0a:22:f7:59:1f:71:
9e:16:3f:8e:b7:5a:fc:1a:b6:33:b6:53:62:8d:b7:3b:cc:83:
ca:89:54:d0:73:f4:01:d5:a8:32:0b:8b:72:70:f3:50:5a:f8:
75:c7:37:55:af:27:0c:94:4a:d2:17:27:ef:c8:52:73:45:f5:
92:49:49:34:91:d3:a1:5b:9c:bf:7e:bb:75:7e:4e:33:1b:2a:
28:95:e4:3c:25:cd:6c:16:e3:d8:18:f3:89:2e:37:43:e3:23:
4d:6f:e5:aa:c4:0f:a3:74:14:58:05:5a:7b:81:cd:65:2d:56:
35:63:ad:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:37:18 2025 by rpki-client