Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: szCJATO8Eo2O1x6DU6plAZRqOy1L9P85impfRV8huhE=
Subject key identifier: 19:3A:ED:10:D9:C1:C2:85:1F:BC:E7:A8:24:DA:98:98:B7:2B:78:59
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 0196BD815857FC25FF8463D64DC4E05C916F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 04:01:32 +0000
Manifest this update: Sun 11 May 2025 04:01:32 +0000
Manifest next update: Mon 12 May 2025 04:01:32 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: A1WMni2mlIDDqvX44aRYH/AGiFha5fVlm65paMMaZEM=)
2: UxM6DupfvrTiE9Ym5QgQzISnMNk.roa (hash: RfjYqd31h9TXarIc1kWDtlc68P4m+jSBxb+HHdHsfRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:58:57:fc:25:ff:84:63:d6:4d:c4:e0:5c:91:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: May 11 04:01:32 2025 GMT
Not After : May 12 04:01:32 2025 GMT
Subject: CN=193aed10d9c1c2851fbce7a824da9898b72b7859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:32:48:ae:9b:72:7d:26:bc:d4:08:6a:81:
a1:d5:52:56:96:c8:83:80:46:e5:4b:60:74:a8:65:
48:10:17:0c:e9:5b:0d:c9:3a:c4:70:1b:2e:7f:e4:
b3:ec:5f:1e:ae:68:d1:f6:9a:cb:21:6a:08:05:a7:
7c:c1:f1:0d:d9:10:dd:d3:88:90:ba:96:95:d9:c3:
a3:40:cb:4f:9e:85:f7:ff:01:e3:36:87:9d:25:25:
d8:88:85:92:2f:01:20:03:f0:56:61:58:0c:59:5d:
8b:47:53:94:f1:f5:08:44:56:fd:d7:45:05:38:e6:
7d:c3:f3:65:c3:66:b0:3f:2c:79:5c:1c:f8:8f:c5:
cd:a7:b2:85:cf:a7:69:e8:ae:84:06:7b:0d:d1:33:
36:cc:20:ae:01:19:ee:53:e3:0f:94:9c:3d:31:c9:
a9:66:6b:d3:18:48:44:3d:3e:57:06:89:a9:27:d0:
c3:91:74:07:d4:fa:d7:75:15:f2:0f:de:8f:1e:5b:
1b:b0:ee:76:25:41:7a:08:03:1b:15:77:7d:1c:b9:
20:74:11:10:93:72:02:7a:fc:23:99:b1:f1:75:ce:
99:b3:25:b8:90:74:34:63:27:31:17:78:37:9c:49:
55:b8:ba:a3:7c:71:fc:ab:dd:bd:88:3d:b7:83:fc:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3A:ED:10:D9:C1:C2:85:1F:BC:E7:A8:24:DA:98:98:B7:2B:78:59
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8b:58:d6:bf:39:02:d4:c9:b6:00:cb:a1:5e:87:bf:a3:bd:
be:91:36:1c:19:8d:e5:1a:ee:d8:03:79:a9:9f:3f:5b:40:f9:
ab:f4:09:1c:ac:20:0a:96:47:87:48:b6:5f:ea:60:3e:e6:d1:
64:b0:22:99:c3:23:54:bb:d8:b7:23:a0:78:ab:79:b8:ad:75:
41:a9:b0:0b:5d:20:af:81:01:f6:85:0f:66:15:6e:2b:7e:ed:
4b:06:59:e8:cb:23:8b:16:cd:99:a4:13:a4:7c:8d:48:43:16:
86:fc:fc:78:a9:54:3b:a8:6d:c5:8d:75:d7:82:c4:76:46:cd:
e0:c2:43:91:dc:88:ed:3f:50:20:e4:69:53:27:1e:c0:30:26:
ca:69:e2:27:c3:5b:36:4e:4e:d2:86:9c:c6:81:71:5d:86:01:
cc:30:70:ca:fc:f8:62:98:b7:56:e1:80:84:d5:1a:aa:1e:17:
e0:84:f9:60:03:0d:c3:26:dc:25:20:f9:b7:b9:82:ef:8d:41:
a3:9d:80:08:fb:b3:2e:f2:eb:22:be:81:dd:7c:f2:14:76:c9:
d8:98:8a:a2:f4:65:40:a5:47:94:07:29:a6:89:95:25:90:b3:
f7:08:fe:6c:4b:31:35:12:04:17:7c:d0:42:e2:f3:27:87:df:
98:9b:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:49:50 2025 by rpki-client