Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: i4+Za4zcicooM66GJSWrO3JVpJnnvdTRPPcwI84Eizo=
Subject key identifier: EA:08:FE:33:63:E8:34:02:97:12:D1:3C:93:9D:89:26:B3:72:51:36
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 0198D4740468624D38B0945479EF8A258C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 1123
Signing time: Sat 23 Aug 2025 01:03:49 +0000
Manifest this update: Sat 23 Aug 2025 01:03:49 +0000
Manifest next update: Sun 24 Aug 2025 01:03:49 +0000
Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: lSLNgpNk1sS0rvaydprmOHegvz3bIBSeG7k5+6iKeRs=)
2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:04:68:62:4d:38:b0:94:54:79:ef:8a:25:8c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Aug 23 01:03:49 2025 GMT
Not After : Aug 24 01:03:49 2025 GMT
Subject: CN=ea08fe3363e834029712d13c939d8926b3725136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:12:44:94:e3:94:4b:a2:64:c3:cb:a0:a3:
03:ed:c2:16:43:42:67:91:72:05:85:1a:dd:6f:f1:
75:c8:6d:d2:9c:06:50:e7:18:16:01:81:65:ff:38:
90:09:c2:12:55:6c:31:23:6c:a5:ba:a5:f9:25:2e:
08:30:db:0b:b7:9c:c5:4e:c3:a9:a2:7b:7e:ac:d9:
36:02:2a:62:3b:37:f1:eb:58:63:3e:ce:b8:aa:07:
7c:89:9c:89:ef:cb:75:5d:91:07:4b:53:f5:09:ea:
e0:c6:b1:85:e4:67:08:ec:e2:11:1d:5b:92:96:a0:
3a:18:3a:3f:b5:30:3b:d3:40:48:29:ca:42:38:a3:
2a:1e:f2:7b:59:c0:28:26:2e:98:3d:6f:14:3a:7a:
08:66:6e:31:08:06:65:6d:92:06:9d:70:b7:a2:c5:
53:48:ab:12:e7:a5:e9:9a:21:0c:37:f6:a9:e9:f6:
fc:5b:a5:e9:b9:cb:93:bb:fd:e9:eb:b0:02:40:6e:
a4:a4:99:12:9e:41:32:31:9f:72:a0:0e:ae:df:7e:
f0:41:eb:85:f6:2b:b2:ce:fb:89:e3:bb:b4:65:0b:
e4:b9:4e:f3:7f:95:5e:a9:47:68:f2:02:9c:56:67:
e6:6c:8c:70:98:a9:03:3d:ea:f8:24:34:64:f6:42:
c9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:08:FE:33:63:E8:34:02:97:12:D1:3C:93:9D:89:26:B3:72:51:36
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1e:29:ad:d3:0b:60:21:75:4b:ca:60:4d:f6:92:76:ae:65:
f9:74:17:44:48:8d:5a:d1:19:97:a7:36:b5:14:49:c2:c7:40:
91:e5:17:0d:75:cd:96:69:ae:6a:2a:1c:4f:9d:0f:f0:4a:0e:
f5:84:e6:4d:5e:50:e0:3b:f9:91:45:87:1b:65:69:a9:fb:56:
4f:d8:69:ba:17:07:88:1b:e6:20:ce:1f:13:5c:35:8a:78:18:
8e:ec:e5:29:3c:d9:2f:0a:54:31:bb:f5:1c:39:54:00:b6:47:
a3:ce:7a:8e:59:ee:44:4e:25:f6:89:fb:55:2c:50:54:67:64:
32:9e:53:46:27:ca:95:c6:a9:5e:80:cc:a5:7a:84:f4:97:ec:
5f:64:0e:0c:fa:2a:85:a6:66:05:94:10:ab:d5:a2:8a:d9:1b:
56:70:a9:7a:43:14:21:00:5e:6e:db:15:bb:02:d4:01:a6:58:
72:6c:39:be:a5:44:f2:74:a8:7c:6b:c9:70:9f:a2:40:bc:2b:
df:af:9d:18:db:0c:35:83:be:28:81:c3:aa:00:0e:59:3a:12:
10:d4:1b:db:8d:3f:d3:da:30:f0:d7:79:23:ca:81:62:2f:61:
3a:ba:84:19:3a:28:d5:cc:32:2d:60:4e:2b:9d:e6:d9:61:9d:
ac:8e:1a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:08 2025 by rpki-client