Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: xXLpwuTcOR/hgAcrj8Q6LvoWMgYylaogdEb7T+mK10o=
Subject key identifier: 4B:EB:CC:21:D0:66:83:4A:52:E0:89:02:60:7C:0F:C2:0B:13:B4:FA
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 0196A31BC1B4073965F77C57F909C257A747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 1529
Signing time: Tue 06 May 2025 01:00:27 +0000
Manifest this update: Tue 06 May 2025 01:00:27 +0000
Manifest next update: Wed 07 May 2025 01:00:27 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: s1tTHSk4IIVMEcM7bbcvwTD5tnjKoPKNhFgz6e5AYBw=)
2: G0J3ZwqY7nqQ1F-r-kfCdSWuyO4.roa (hash: +njzM6YBvg7QKHzm9fDQxiSdZRBXgF7BQneYn5PkN18=)
3: zYDOCeKC7kKgpKbk0isuZ6zgxdU.roa (hash: w347S4U24N5+dIdmg0/S6hyDG1PqUwaZbQe5AD4eTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1b:c1:b4:07:39:65:f7:7c:57:f9:09:c2:57:a7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: May 6 01:00:27 2025 GMT
Not After : May 7 01:00:27 2025 GMT
Subject: CN=4bebcc21d066834a52e08902607c0fc20b13b4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cf:9e:c8:06:df:c0:7c:bc:bf:1e:b5:f8:45:
10:a7:25:6b:9b:40:3d:5f:69:fb:7a:5c:12:2e:64:
f8:ad:f4:3b:e3:fb:ba:9c:61:80:57:78:3d:4b:20:
f2:b3:27:e2:4b:36:d0:ed:15:56:bc:1f:a8:c4:43:
07:ad:db:00:fd:3c:9d:f8:84:d3:de:11:a1:47:52:
1b:86:5a:c2:35:a7:00:1a:22:04:95:e8:2f:9f:9f:
2f:22:c2:cd:9a:04:63:91:52:c9:71:83:e7:48:ae:
0f:44:46:60:94:b6:31:0f:14:a6:a1:ce:4e:d9:c0:
16:46:4d:45:a2:f6:7d:4c:4d:77:61:03:65:c0:e8:
31:ca:94:8c:56:68:ad:e3:b3:32:58:04:ad:bf:ed:
2b:bd:4c:b3:e4:01:69:10:52:a7:a8:f6:72:d9:1c:
c2:6c:64:d8:f7:b2:ee:9a:06:4e:d9:07:ae:a5:35:
9f:26:bb:f4:56:8b:80:c7:33:2f:0b:e9:85:c0:c8:
01:f2:28:bc:f1:5b:42:aa:61:b3:ec:24:08:8f:a8:
c2:e1:3d:7d:00:ea:62:96:ec:07:ec:d9:48:6f:f7:
dd:29:1c:e2:72:ed:21:1a:b3:ba:37:47:b4:e2:11:
f5:86:85:b5:ad:d4:21:62:0c:30:cf:b6:1a:49:0d:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EB:CC:21:D0:66:83:4A:52:E0:89:02:60:7C:0F:C2:0B:13:B4:FA
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:83:27:47:08:d9:51:df:95:e3:65:09:f7:f3:0d:2c:ff:6a:
7f:20:c4:ba:40:12:0b:40:59:c5:4f:4d:ea:00:8b:b9:c3:d2:
c3:3f:bb:db:6e:ed:63:8e:13:e0:47:e0:16:11:3b:d5:27:b8:
f0:dd:db:2d:55:69:9e:f5:03:69:ab:06:90:b3:48:d7:9c:f4:
76:48:a0:a5:3e:30:b0:e6:27:bb:c8:01:3b:96:44:81:a7:06:
b3:b3:89:3e:21:cd:1f:0e:cc:6c:60:c3:84:7a:9c:2f:e2:73:
16:b2:7d:c2:a2:b4:a7:51:bc:97:2e:0f:b2:34:fc:a3:7f:bd:
da:6b:e6:e1:f9:a9:b2:e1:6d:b7:e1:b2:cb:77:3e:61:71:39:
18:25:2b:d1:d0:cd:d8:6b:b8:7a:9d:b2:2d:94:1a:be:07:bf:
f4:18:79:32:46:b3:7e:68:65:e3:9f:a6:b6:c0:07:78:2e:ec:
b1:54:95:11:85:67:9f:70:01:00:0c:11:b6:8a:1d:d6:56:2a:
a2:f6:d3:dd:e8:c2:32:ca:f7:e4:49:62:cb:9c:c3:cf:0e:2b:
95:c9:46:06:89:3b:3a:67:01:46:fb:b2:e2:98:ff:2b:17:0d:
b4:3c:f5:b7:f5:e8:0a:b9:66:53:00:2c:9a:4d:48:a1:35:03:
ff:d7:71:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:39:51 2025 by rpki-client