Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: lUryh8wulsq87vugTd1Js+but1961I1PSlV4GR7uhIs=
Subject key identifier: F7:93:90:B6:F7:91:C1:8C:CE:9D:B7:78:AE:41:79:05:DC:1B:B4:AC
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 0198D6607E4173999711B5E9A3FB26B131EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:44 +0000
Manifest this update: Sat 23 Aug 2025 10:01:44 +0000
Manifest next update: Sun 24 Aug 2025 10:01:44 +0000
Files and hashes: 1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: ZjIhH+1x7th1qzfwG6MKxAli5uA4axNWh0EdYndGpwg=)
2: MtUZJrG93YjlOedI7qMBnb84kTo.roa (hash: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:7e:41:73:99:97:11:b5:e9:a3:fb:26:b1:31:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Aug 23 10:01:44 2025 GMT
Not After : Aug 24 10:01:44 2025 GMT
Subject: CN=f79390b6f791c18cce9db778ae417905dc1bb4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4c:40:a3:22:21:f5:40:e2:7b:bc:52:37:6e:
4d:f6:0e:16:78:b6:6c:f4:24:8f:5a:24:b2:d0:f5:
27:79:23:89:6b:49:26:39:ac:59:25:ea:e1:12:d2:
0a:ce:ca:2c:12:b2:21:ef:d8:e3:35:0b:a3:e3:2b:
89:95:ae:96:50:b1:f7:c0:40:da:2c:fe:65:b8:3b:
ed:0a:fc:f6:ee:e4:27:46:1a:d7:82:df:ba:ae:a1:
a4:b8:aa:bc:1d:66:e6:03:1d:2d:70:4a:65:fe:42:
7b:b1:d9:82:1a:b5:eb:e8:8d:6b:c2:48:dc:20:b2:
e2:17:42:91:7d:5f:54:47:e6:f6:18:e0:c0:56:33:
bf:2c:6e:75:21:33:1f:3e:2b:27:dd:42:d9:e2:26:
a0:08:05:2c:58:f2:75:28:81:58:ae:84:b1:e2:16:
4a:48:99:ea:17:f2:6b:19:3e:db:94:49:07:b9:0c:
35:60:ed:9f:87:5a:0d:04:cb:72:9d:b8:53:9d:74:
f1:b3:b8:62:a5:87:ba:04:14:9d:e3:ff:90:25:5b:
95:23:53:37:1a:3e:00:68:37:89:b7:1f:08:e2:b4:
e6:1e:e1:42:87:2f:9a:eb:10:0c:d0:9a:16:7a:67:
c5:2d:ab:9b:84:b9:c0:13:a5:d9:59:1a:23:3f:c0:
b1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:93:90:B6:F7:91:C1:8C:CE:9D:B7:78:AE:41:79:05:DC:1B:B4:AC
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:65:4a:32:e2:35:aa:1c:d5:42:61:4c:3a:c1:31:1b:47:e3:
51:06:bf:0c:06:fa:f4:9c:00:c2:84:a0:30:2d:cd:34:67:ec:
52:a8:95:99:75:b9:67:ed:e1:26:19:b6:5b:99:8c:ac:44:8d:
8a:51:74:0c:7f:36:a5:70:58:e2:e5:05:52:2d:94:6c:e6:2e:
89:58:2f:65:97:b7:8d:19:74:ce:db:1a:bc:2e:73:a5:54:8c:
0e:85:c5:ef:9c:0d:a2:83:59:24:1c:6b:f5:31:23:46:86:c4:
c2:92:d2:0a:4c:10:27:da:1f:8c:36:53:d4:10:33:d9:74:fd:
4f:e1:c8:45:36:07:5d:83:c9:75:d0:9d:36:f3:0d:84:ba:33:
7f:b4:50:33:78:dd:b0:38:ee:bf:bc:cf:13:a5:86:b5:c0:3b:
35:3b:7d:73:bf:02:23:bf:80:52:cf:0f:6b:ca:f7:7d:1a:ac:
73:ff:f6:ea:10:2d:f2:a9:34:fe:46:b3:33:53:a0:56:b0:e2:
c4:49:71:8b:5a:e4:2f:9c:6d:6b:55:39:04:fd:7b:fd:8b:37:
3a:2c:99:75:83:55:bc:54:07:8a:ea:b0:4f:f7:63:d5:78:ac:
fa:45:96:50:db:86:fa:b5:c9:0f:38:48:10:4d:87:46:54:38:
a2:20:d7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:20 2025 by rpki-client