Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: og5VBUTA/CnQf7twO7bsLT/OvYz1hPf7K7ImfmRNMRo=
Subject key identifier: A6:5A:4A:40:FF:BC:65:DD:32:DC:79:26:C4:6B:1B:D5:47:8A:EE:A7
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 0197496872A1E141D7D53B252F8B387C84F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 08:01:11 +0000
Manifest this update: Sat 07 Jun 2025 08:01:11 +0000
Manifest next update: Sun 08 Jun 2025 08:01:11 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: mLCfhNvLf8p0zyCcjK9X2yOtdNDXnzq0GuWPMMxf1QU=)
2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:72:a1:e1:41:d7:d5:3b:25:2f:8b:38:7c:84:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Jun 7 08:01:11 2025 GMT
Not After : Jun 8 08:01:11 2025 GMT
Subject: CN=a65a4a40ffbc65dd32dc7926c46b1bd5478aeea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:d3:37:c8:7e:d0:29:90:f8:f2:45:23:1a:
a2:fc:e3:6e:7b:91:c7:ff:4f:5f:cd:ac:c1:ff:9a:
9a:63:f0:02:4d:0e:6a:a9:5a:c3:b3:0f:07:49:e1:
63:7e:59:a0:66:1e:15:59:a5:ed:c3:ef:3d:ae:de:
e0:a0:32:8a:3c:98:65:81:ea:fd:51:48:f4:38:33:
55:80:38:cb:77:71:0f:db:05:95:6d:02:06:c4:b2:
ea:a7:20:32:84:db:88:18:ed:60:b0:91:59:98:c5:
49:70:a7:a4:aa:35:3a:d1:da:f2:69:94:5e:19:f8:
f0:72:a0:a9:c1:d9:cb:35:c2:55:ed:eb:3a:8f:d3:
a4:6b:9f:41:6c:4e:55:7f:1c:07:e8:0d:ea:27:ef:
24:66:72:28:98:91:a8:1c:02:70:2c:41:a1:c3:8e:
95:a2:12:16:79:89:ff:78:02:3e:c6:cd:25:3a:e5:
11:95:1d:84:71:65:b4:f6:c1:cc:4a:de:56:8e:ac:
be:61:6d:f8:4a:27:62:ee:ac:5a:0d:f2:fd:1b:6d:
62:70:8d:28:21:d2:26:ad:16:df:66:50:58:1a:ac:
aa:be:ad:66:36:74:b7:8c:8c:c1:0a:b8:dd:3e:b6:
db:eb:62:44:65:49:dc:99:80:77:e2:cd:15:f9:7b:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5A:4A:40:FF:BC:65:DD:32:DC:79:26:C4:6B:1B:D5:47:8A:EE:A7
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:18:2c:29:67:5d:71:7e:2e:42:fb:7a:9e:3d:b3:a5:58:c2:
72:f3:bd:8a:cb:28:f0:61:70:2a:2e:82:45:08:e6:25:77:e5:
ce:c5:d1:c5:dd:31:55:31:be:a5:14:65:31:ad:b9:46:86:d4:
b0:4c:12:c6:4e:f4:83:80:88:ae:d3:01:dc:d1:72:53:bd:c0:
7c:f2:26:4a:c9:55:1c:f1:c7:e8:a9:e0:65:b4:44:44:0a:33:
c1:8b:86:16:07:55:69:4e:56:3d:63:a1:af:d6:c3:f1:90:88:
68:3b:2b:df:a0:5d:5e:72:e8:d1:5e:4f:f3:50:10:dc:cf:c4:
54:8d:a7:db:02:52:7f:a9:6e:86:07:14:bb:95:46:7e:7b:f4:
05:cd:f2:82:ed:4a:38:ef:fd:6c:a8:1b:3b:d7:70:b5:40:21:
9b:68:ae:90:f7:ad:57:8b:65:75:a2:da:0d:5f:95:0c:5f:aa:
4d:3e:ed:8a:d3:55:be:80:d7:e0:4d:40:61:c3:d8:51:b7:4a:
65:99:a3:6e:4a:02:fd:28:5d:b7:86:fd:e2:3c:f9:6c:b4:f8:
c9:20:63:c7:d6:bd:cf:98:57:40:52:fc:6e:fd:51:33:b3:85:
87:c0:b2:b8:c9:77:5b:e3:4d:b1:ee:a6:b0:b2:ab:41:fe:9a:
6d:a5:d9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:39:29 2025 by rpki-client