Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: Nh7wvOxA4/fGbRzSio21sfI3+1QN5LEftPSmXWDqlh0=
Subject key identifier: 8E:35:F8:49:1C:05:14:7F:EA:65:A9:13:9F:11:D1:CB:D2:48:CB:44
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 01969E9AC62CF8AD9B646B64303AB5E0AD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 0FFE
Signing time: Mon 05 May 2025 04:01:05 +0000
Manifest this update: Mon 05 May 2025 04:01:05 +0000
Manifest next update: Tue 06 May 2025 04:01:05 +0000
Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: Wyh2zxcn4HQ+d95fmdKl7D9GzKKJYZ+svMai1qTxmhY=)
2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:c6:2c:f8:ad:9b:64:6b:64:30:3a:b5:e0:ad:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: May 5 04:01:05 2025 GMT
Not After : May 6 04:01:05 2025 GMT
Subject: CN=8e35f8491c05147fea65a9139f11d1cbd248cb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:98:7b:96:2e:d4:3c:33:19:fb:8f:32:a2:
a6:f1:a4:3e:14:bf:f2:45:a2:ac:e7:93:6d:d8:21:
33:0d:24:5d:99:b1:98:de:9e:be:1b:9e:c1:ca:50:
ec:13:ab:3f:14:85:1b:0d:4f:cf:97:93:81:3a:ef:
19:a0:05:ac:37:54:0e:ba:ba:ee:56:51:8d:a5:35:
fa:c3:b2:4d:14:09:4e:d0:16:12:23:93:b8:c7:c6:
37:33:d4:d5:10:c6:8f:ae:a0:b2:97:96:c2:fb:57:
44:55:0c:ea:96:3d:9b:58:6d:ca:31:24:50:cd:9f:
d8:11:8f:49:38:e4:d7:fb:a4:ee:00:c0:bc:87:a8:
24:68:75:ad:14:3b:69:d1:9a:91:f2:e5:44:df:ae:
a4:ea:da:1c:52:d7:80:35:3d:67:2e:42:f3:82:b9:
47:43:a2:17:a6:4c:e2:e9:43:c4:6e:8c:d9:e3:84:
12:06:f9:bc:4f:6d:4b:fc:82:e0:b0:23:15:a0:25:
46:4c:8d:cb:e4:4f:47:c2:26:8b:de:58:00:e4:fa:
63:ba:91:19:79:74:a8:66:41:54:eb:6b:2b:46:42:
2a:75:b1:f9:0f:25:ef:1b:2a:14:74:62:c5:c0:2f:
f2:0a:32:82:bb:71:01:f1:b9:8f:dd:18:4e:d8:1e:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:35:F8:49:1C:05:14:7F:EA:65:A9:13:9F:11:D1:CB:D2:48:CB:44
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:23:8f:91:8b:20:97:9c:11:b7:a6:32:73:eb:93:4d:55:10:
81:d6:b9:10:72:d5:2d:f1:d7:ba:7e:9d:b4:fa:cb:90:32:21:
29:99:49:27:94:40:7c:ce:49:a6:96:f5:86:a6:ac:80:f7:09:
be:9e:cf:33:36:ce:7b:85:84:e4:72:e3:a6:dc:cb:6f:d5:83:
ef:c0:e1:82:df:6b:2f:91:a3:bb:de:f0:c0:b7:d0:8a:d2:4c:
7d:ee:e5:e0:4a:91:e1:67:37:1e:06:9b:17:8f:d9:bb:b4:0a:
f1:17:95:d9:44:e3:9c:16:8b:3a:81:9c:7b:31:b0:37:e8:fa:
bc:99:36:fc:4f:6d:47:e5:48:5a:b9:3b:4e:15:5e:2e:f9:3b:
94:1d:00:ec:e0:43:7a:be:9f:bf:da:8f:5b:a9:56:d9:b2:a4:
2a:4c:24:b5:65:d9:91:75:27:09:e4:b0:80:5b:f7:95:ff:f9:
fb:8d:ca:5b:8a:95:21:27:e9:aa:92:1f:f9:7c:c7:e8:ec:e8:
bf:68:d7:69:21:03:c8:0e:f1:3a:48:fa:7d:c8:d6:85:ae:15:
14:fa:88:32:97:53:ce:84:39:69:19:73:5b:8e:3e:d1:89:01:
9e:50:72:c9:dc:7c:78:a9:43:78:05:67:ea:77:18:80:69:97:
26:cc:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:01:44 2025 by rpki-client