Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
File: dbciFa46YYMFwSMUKzSd8mZyoU0.mft (raw, json)
Hash identifier: vmxZ3lxkfZcUwbL1P0eWe16Wr2l0UqKahlhKA30rYLA=
Subject key identifier: A6:8E:02:51:A3:60:74:E7:4F:42:F9:E4:D6:2A:F4:6A:3E:9D:D0:6A
Authority key identifier: 75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
Certificate issuer: /CN=75b72215ae3a618305c123142b349df26672a14d
Certificate serial: 0197B6A04983328F08C7A76829B7ACE3756F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
Manifest number: 02A6
Signing time: Sat 28 Jun 2025 13:00:47 +0000
Manifest this update: Sat 28 Jun 2025 13:00:47 +0000
Manifest next update: Sun 29 Jun 2025 13:00:47 +0000
Files and hashes: 1: dbciFa46YYMFwSMUKzSd8mZyoU0.crl (hash: OE1t9ujENgThBcnbMR6S1QDaTPyFE2A2moAUvnxf84s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:49:83:32:8f:08:c7:a7:68:29:b7:ac:e3:75:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b72215ae3a618305c123142b349df26672a14d
Validity
Not Before: Jun 28 13:00:47 2025 GMT
Not After : Jun 29 13:00:47 2025 GMT
Subject: CN=a68e0251a36074e74f42f9e4d62af46a3e9dd06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:3d:08:9b:11:56:85:de:e5:f9:33:d2:98:
cc:74:48:3d:96:c4:77:06:98:af:d2:6d:5d:f5:dd:
7a:0d:ec:a4:18:a0:5b:6d:35:e4:9c:55:5e:7c:a5:
7f:f4:d0:d3:80:72:5d:14:46:9c:7b:9f:94:b5:4a:
11:29:46:51:aa:ce:58:1d:55:f7:58:d5:5e:23:35:
2d:4c:58:2d:a0:6f:e4:52:73:85:3a:7e:84:32:e4:
b0:9e:04:ec:8e:cc:19:30:40:dc:6e:b5:a5:aa:31:
af:3b:94:8f:f0:45:38:fc:26:0d:8f:d2:11:c9:cd:
fd:56:8c:8a:27:f1:93:a2:7f:81:66:ed:8d:c6:a1:
da:04:79:e2:7e:54:ce:7a:26:95:3f:f2:69:34:fe:
ff:2a:bb:0b:e1:55:75:cf:9f:92:ef:e8:14:98:fb:
bf:dc:42:26:50:19:e6:d2:e1:b9:c8:49:af:84:db:
d1:52:9d:38:72:61:da:e8:cd:6e:91:2a:37:bf:71:
32:23:fe:9c:f4:6c:0b:81:ce:9c:8d:b1:75:b7:d0:
e9:95:79:3d:45:12:d1:c4:2d:14:88:c1:c4:47:c0:
9a:d8:2b:ee:eb:84:8b:0b:1c:ae:3c:fa:b0:e3:20:
07:74:fe:e9:bb:6b:a7:e9:bb:6f:90:5f:e8:50:2b:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8E:02:51:A3:60:74:E7:4F:42:F9:E4:D6:2A:F4:6A:3E:9D:D0:6A
X509v3 Authority Key Identifier:
keyid:75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:3b:eb:c6:a5:43:4f:85:85:74:d3:b0:21:cf:bc:3d:96:16:
fb:78:dd:a3:5b:06:25:39:2b:91:d3:d8:c7:a8:5c:c4:1c:2e:
7b:26:05:25:c2:1d:ed:c7:5a:dc:8e:ba:22:9e:4f:c3:30:96:
a2:88:6d:de:c8:30:8e:ee:cb:92:5a:5c:84:8c:5e:7c:76:30:
a7:2b:da:de:ba:12:bc:6a:6e:1e:2c:f3:e8:76:91:d3:47:81:
86:08:e1:59:f3:af:d2:be:e5:f2:64:5b:52:74:b2:6b:d9:d8:
ab:46:a7:58:95:34:27:19:74:9f:f2:b0:42:e3:64:98:4e:1b:
74:d7:bb:fc:d0:46:bd:1b:72:51:ae:ba:88:c2:85:87:69:ac:
e1:20:c5:a2:3b:c6:5c:28:a7:00:ec:43:c9:f2:47:6a:f9:5c:
1d:90:4b:83:7a:2f:e2:a0:87:e6:84:aa:50:ea:5d:31:b0:63:
55:2e:20:4a:dc:83:e3:01:32:7a:d8:68:f2:a0:41:52:f8:7b:
7c:7d:a2:7f:fe:86:1b:f5:c9:21:95:8a:86:ab:88:7f:09:d2:
38:f2:4a:91:dd:d7:5d:1d:72:34:68:07:10:47:9d:55:85:fb:
23:25:0a:45:ef:0c:90:6d:22:e5:18:62:97:88:73:70:29:d3:
85:99:a6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:54 2025 by rpki-client