Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: 3aOxh5GOZa+8m1zIzwSTTZlBBs6vteC0sWUHa/6aNuY=
Subject key identifier: 03:44:2C:EE:E0:E7:8F:30:D2:61:43:54:BA:BD:79:2A:B5:6C:04:29
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 0197B745198D150A7F2E3B2D22D80D46A671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 16:00:48 +0000
Manifest this update: Sat 28 Jun 2025 16:00:48 +0000
Manifest next update: Sun 29 Jun 2025 16:00:48 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: xhrwZ1Eu1IMwoIVR0nXUM0Gh8Qdda36er2qYwTuZ9uM=)
2: G0J3ZwqY7nqQ1F-r-kfCdSWuyO4.roa (hash: +njzM6YBvg7QKHzm9fDQxiSdZRBXgF7BQneYn5PkN18=)
3: zYDOCeKC7kKgpKbk0isuZ6zgxdU.roa (hash: w347S4U24N5+dIdmg0/S6hyDG1PqUwaZbQe5AD4eTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:19:8d:15:0a:7f:2e:3b:2d:22:d8:0d:46:a6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Jun 28 16:00:48 2025 GMT
Not After : Jun 29 16:00:48 2025 GMT
Subject: CN=03442ceee0e78f30d2614354babd792ab56c0429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:1e:75:54:f5:d6:7d:9e:10:5a:1c:1d:f6:
1a:a4:1e:f5:6c:e9:fe:bd:2a:45:e9:ba:ce:dc:7b:
88:72:94:e1:b3:d4:17:5f:bd:01:53:60:08:bd:9c:
c0:d4:38:0a:66:5c:87:22:16:c3:78:c2:54:8d:d3:
f9:ac:ab:45:88:25:f6:bc:9b:4f:c1:08:6f:69:c7:
08:69:0f:02:d4:14:04:6a:e7:3d:27:31:6e:41:d0:
0b:62:a3:a6:09:12:91:f5:02:f3:55:bb:8f:17:9c:
83:e2:93:5c:0f:f3:f3:14:5e:a5:98:32:bf:42:85:
ef:c9:bf:ec:78:c5:79:d3:ba:d9:cb:31:91:5a:88:
4a:cf:da:46:c6:85:5d:b4:ca:23:cc:cb:5d:c2:34:
2e:1b:29:57:21:30:6b:ef:a7:57:f1:8d:fb:e7:42:
cb:8a:b3:f2:46:df:74:c8:70:8f:f0:27:8d:c9:06:
df:97:65:a2:b1:ec:6b:3a:6c:30:0a:dc:7b:33:a0:
c7:46:c9:d0:51:12:d1:24:ab:fb:5d:99:71:b3:85:
d2:06:51:15:2d:30:4e:fb:f5:90:8e:c2:95:b7:d9:
b8:3e:ec:52:ec:e2:3e:cd:1c:48:42:4c:01:cd:92:
de:82:4f:92:7f:69:e8:2a:ba:e6:e0:7c:71:1c:82:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:44:2C:EE:E0:E7:8F:30:D2:61:43:54:BA:BD:79:2A:B5:6C:04:29
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:95:05:bf:2d:31:8f:7e:29:2a:71:4c:91:62:cd:1b:5b:01:
27:10:b1:2f:a5:65:0d:c5:38:9c:20:34:fd:b1:c9:a1:a4:05:
00:0a:33:c9:9a:53:c1:6b:5a:c8:d6:d6:e1:2b:9d:16:03:88:
eb:6c:96:6a:4f:f0:c8:e9:68:54:53:69:9f:9b:9c:60:ea:07:
bb:62:32:5b:53:fd:a4:c7:b4:3d:7d:bd:c3:53:e8:ca:04:ed:
41:a4:42:8c:24:62:30:f9:0e:19:4c:76:0c:06:57:45:fe:85:
32:36:8f:2c:81:22:9f:d4:62:aa:36:bf:41:e9:a5:f8:a9:2b:
06:ea:a1:be:5c:44:f4:58:a2:83:dc:e8:95:63:ed:0c:e1:9e:
70:36:13:2c:16:fd:9e:21:45:93:77:70:af:4e:99:2e:4c:8e:
76:d2:57:25:5a:13:f1:4f:33:d0:9f:a7:c1:32:dc:19:80:f6:
6b:82:ff:63:5e:f8:3d:41:2d:ab:8e:27:14:d4:83:3a:5a:4f:
9b:00:d7:9a:13:b3:20:16:f4:b0:64:8a:8b:92:29:49:30:6c:
d7:fb:dd:02:42:51:43:fc:50:6f:15:c5:24:76:9a:f3:34:5b:
16:d2:1b:c3:eb:5d:eb:bb:67:92:1a:1d:a5:57:7f:59:ec:eb:
9b:91:cf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:31 2025 by rpki-client