Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: c39Eyc8i9/tddXvTRBwEXc7hxbAQDWwGpZRFBQ/7UxA=
Subject key identifier: 71:8A:E8:EF:54:D4:E5:87:9B:9C:84:ED:CE:9A:83:40:A8:9F:61:6D
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 019849658268314EA38BB523C01465C107B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 10DB
Signing time: Sun 27 Jul 2025 01:00:45 +0000
Manifest this update: Sun 27 Jul 2025 01:00:45 +0000
Manifest next update: Mon 28 Jul 2025 01:00:45 +0000
Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: 4TXStB8rrmzoatSfXnWaXg+7SXOl5VWXWeL0OU+GQn8=)
2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:82:68:31:4e:a3:8b:b5:23:c0:14:65:c1:07:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Jul 27 01:00:45 2025 GMT
Not After : Jul 28 01:00:45 2025 GMT
Subject: CN=718ae8ef54d4e5879b9c84edce9a8340a89f616d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:2e:d9:5c:fe:a8:59:f5:3e:da:6c:9b:0d:
6c:30:d0:b8:c2:87:ca:d5:88:5c:43:74:aa:32:68:
0d:4e:6d:89:70:9c:6e:8d:9c:1f:61:f8:90:c2:e6:
e8:1b:51:58:dc:7e:27:58:ee:9e:c4:a9:aa:1e:8e:
29:ad:04:99:49:84:ba:38:f9:c0:c5:67:fb:28:12:
85:90:56:0f:22:a3:93:f2:fe:95:55:16:1d:f9:37:
b5:d6:5f:01:7d:f4:1e:b9:5d:aa:f4:b5:c8:5c:a1:
d2:14:01:f8:29:14:f7:69:f9:1e:74:4e:29:ff:ce:
50:c0:00:db:96:29:b4:fc:bb:d8:59:32:c0:6b:06:
67:00:66:ef:88:ec:cc:ae:a0:e7:2c:a1:9e:99:c4:
c3:1e:7b:7d:ee:54:fa:02:ca:ea:72:06:1f:48:a2:
cf:6e:3f:02:f4:a7:56:49:8a:2b:32:3b:51:bc:e5:
be:89:b8:e0:09:3b:7e:f8:29:70:24:f5:ea:21:7d:
b7:35:06:cf:e9:fa:29:a5:48:4a:8b:58:83:4b:71:
53:e5:6f:76:dd:67:bd:e3:91:ef:f5:0b:dd:0e:b8:
2a:70:92:47:17:cf:a8:47:da:2b:d5:64:24:9a:c4:
c1:2f:32:38:64:92:42:81:58:ab:18:a7:1d:65:ad:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8A:E8:EF:54:D4:E5:87:9B:9C:84:ED:CE:9A:83:40:A8:9F:61:6D
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:88:80:8e:11:9a:55:6b:8c:1c:e7:b9:55:16:5f:71:ff:49:
74:c1:87:97:84:6d:b2:74:64:9a:7f:10:e9:1f:45:c0:6e:f3:
79:34:0b:f2:db:4a:fd:bc:36:fb:64:91:17:40:fa:e9:b1:a1:
90:d6:a1:3d:c1:4f:6c:08:e5:b7:6e:8f:6d:85:1d:1d:01:bc:
da:2d:2b:9e:a3:a0:3e:4a:23:16:41:58:17:36:94:96:10:95:
7f:0a:31:ed:0b:22:00:8d:c4:1f:83:e9:d4:90:cc:f6:0f:8f:
65:1a:44:7b:f4:82:2e:c3:8b:c3:c2:b9:4a:53:a2:3a:19:4a:
69:11:f0:34:d8:3f:6e:24:66:09:d4:db:f9:36:dd:80:f4:60:
3c:73:d7:98:9c:44:43:31:a0:82:7b:0f:73:d8:83:51:30:01:
a4:99:02:56:33:a7:c0:61:d9:4e:0a:56:3f:37:9c:f1:41:be:
43:59:58:a2:17:74:08:a2:1e:3d:99:a4:09:06:f0:06:f7:59:
64:80:87:e0:da:89:dd:92:f1:79:b8:f3:11:cc:f7:83:17:aa:
c0:d2:16:6f:68:1d:87:31:46:b0:22:bc:2f:35:3c:99:2b:05:
8f:0e:75:ed:19:04:20:1c:25:ea:3b:68:9d:a7:1b:f1:92:6f:
e8:61:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:42:55 2025 by rpki-client