Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: ReA1bmre3y027dG+SOpc6nlNhdC/+GR/r0GmDONraPc=
Subject key identifier: 85:12:D0:68:1F:AF:0A:8D:F9:2B:68:1C:DB:AE:E8:14:DC:A8:7A:0E
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 01984965DF2FD6E861DC6DEB669926A8F9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 01:01:09 +0000
Manifest this update: Sun 27 Jul 2025 01:01:09 +0000
Manifest next update: Mon 28 Jul 2025 01:01:09 +0000
Files and hashes: 1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: YQVsCOQC99MirN07W97sfF/1F0kX+xGAgKw00utPd6I=)
2: MtUZJrG93YjlOedI7qMBnb84kTo.roa (hash: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:df:2f:d6:e8:61:dc:6d:eb:66:99:26:a8:f9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Jul 27 01:01:09 2025 GMT
Not After : Jul 28 01:01:09 2025 GMT
Subject: CN=8512d0681faf0a8df92b681cdbaee814dca87a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:65:48:3c:0a:b0:e0:e1:12:a4:b3:f1:7d:
6d:07:89:4b:ae:e2:09:99:b2:7e:84:6a:aa:1c:bb:
2e:af:c0:0b:51:ab:8b:e1:ee:3f:8e:19:1c:9f:27:
b4:9e:a8:7d:68:c5:93:9c:ba:8f:f8:70:b6:8b:22:
9d:bc:2f:52:57:ea:88:9a:15:a3:f3:4d:52:e7:f7:
86:d8:ac:64:17:0f:aa:7e:56:b2:e3:b1:69:62:30:
89:9a:10:10:dc:82:9e:0c:03:89:cd:ad:dd:52:67:
9d:4f:02:1f:ee:8d:a3:17:7d:fc:2c:b9:ba:f0:12:
63:0e:24:bd:b7:23:da:86:b4:72:3c:77:c3:57:37:
02:aa:92:62:58:ee:71:66:42:21:ea:23:bc:66:89:
ca:ee:d1:ce:3e:17:33:8a:81:95:b1:b1:1f:58:11:
7d:7c:0b:9b:f3:af:c3:63:d2:9c:a3:0e:c4:a0:24:
e8:46:c6:38:0f:dd:d6:c6:9f:79:a3:e1:21:36:76:
9f:35:01:fe:b6:a7:71:4b:95:e5:5b:40:f0:ac:23:
e0:8e:4e:b1:87:15:8c:3f:1e:79:5c:19:9c:1d:27:
eb:f5:1f:fc:61:a8:d9:a9:0f:46:8d:96:f5:b5:4e:
38:e0:41:22:f4:9a:80:74:9d:8c:00:0a:90:7c:61:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:12:D0:68:1F:AF:0A:8D:F9:2B:68:1C:DB:AE:E8:14:DC:A8:7A:0E
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a2:d4:23:a0:12:55:04:6a:ea:76:b4:ad:7a:96:c7:a7:c6:
58:fe:81:c8:57:3a:94:90:14:a0:5d:fa:fb:90:5a:b1:74:25:
b3:ae:03:74:94:e2:41:1c:3f:44:00:0d:d3:ee:4d:ef:4e:cb:
5d:f1:65:d4:0c:8f:40:d4:47:7f:fa:13:71:1c:bd:c9:5f:5f:
bc:55:ee:07:a7:80:b4:3c:10:5f:fa:08:aa:90:6a:65:67:52:
9c:02:e0:d7:e6:24:c7:63:21:13:ad:2e:06:4d:24:47:c2:a9:
7f:d9:2c:b4:90:3e:9d:54:80:2e:21:a2:0d:6c:98:c8:27:b4:
06:0e:b0:38:69:9f:5d:cb:57:6f:bb:e7:24:16:d0:63:10:00:
7e:99:60:d7:8b:53:c8:d6:25:96:36:86:30:ae:90:4f:15:f8:
29:dc:01:10:ac:d3:74:f4:03:d1:98:6a:17:f9:9d:1a:f5:30:
63:fb:ee:1f:03:cf:bf:fd:62:4b:17:b6:76:06:3c:88:ef:59:
f8:81:88:74:01:46:57:11:ad:d1:d0:48:11:07:15:c4:29:88:
87:18:32:69:f3:08:8c:58:ac:8e:dd:04:42:34:89:db:87:8a:
75:37:16:1b:a2:87:e6:f2:bb:5e:90:f4:ea:c0:db:ab:45:d3:
bd:7b:e4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:36 2025 by rpki-client