Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: lk16rDDgsrWQN2ODenqr6WYhdX1URzP1lh1HH7D+gEE=
Subject key identifier: E2:3F:EE:F0:E7:D9:74:96:B3:1F:41:C6:86:71:4A:93:6C:5F:3D:B4
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 019650483BAEF1B2C11140682BEA14F797C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 23:00:33 +0000
Manifest this update: Sat 19 Apr 2025 23:00:33 +0000
Manifest next update: Sun 20 Apr 2025 23:00:33 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: rt75ctgRAZVbhReOH4jzrtUg0NXrc6inIhL/KaauiIE=)
2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:3b:ae:f1:b2:c1:11:40:68:2b:ea:14:f7:97:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Apr 19 23:00:33 2025 GMT
Not After : Apr 20 23:00:33 2025 GMT
Subject: CN=e23feef0e7d97496b31f41c686714a936c5f3db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:8a:5a:ae:f6:34:63:00:dd:ea:f5:90:11:
b4:3a:ab:6d:c0:57:30:a4:3e:45:85:f0:29:de:12:
12:d8:af:ee:cd:d5:f2:18:28:b8:af:34:74:0c:13:
44:98:13:4c:fe:be:6d:f3:b3:55:e7:71:57:25:e3:
4e:be:a0:7c:3f:9b:ad:fd:9e:5d:cd:0e:d6:67:8a:
79:37:b5:21:00:e9:0f:be:20:38:29:0b:f3:2d:28:
66:6c:2e:57:66:1e:fc:a3:e0:a8:31:b6:f5:1e:90:
61:28:2a:17:15:68:ad:f5:c6:3b:fc:8c:e2:cd:3a:
ba:9f:16:1d:a4:23:91:65:5c:c5:21:c7:b7:cc:11:
b9:6e:ba:63:e0:b2:1c:f1:9f:c6:ee:d3:27:a4:b9:
19:75:c0:d7:99:cb:9c:f8:6a:a9:2d:1f:12:6b:50:
44:4e:43:57:7b:2c:ea:2b:ff:4b:06:a7:6b:c3:46:
be:0e:ff:86:08:ec:62:81:e3:17:61:b9:c5:d9:aa:
7d:e2:76:f2:36:40:7b:62:54:dd:2c:af:d7:f9:6f:
00:2f:f4:ae:c6:b3:b1:28:5c:20:e8:bd:76:28:11:
74:26:da:20:cb:7c:1a:40:9c:dc:70:cb:7b:d2:4e:
95:da:82:92:d7:f9:6f:f9:d3:57:81:f1:fb:2a:d3:
da:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3F:EE:F0:E7:D9:74:96:B3:1F:41:C6:86:71:4A:93:6C:5F:3D:B4
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:57:09:a0:b5:af:a9:c2:42:0e:8c:6d:f0:04:a4:5c:f2:28:
1e:9e:0d:26:3a:3a:db:f8:79:bc:e0:84:53:f1:06:1f:a4:88:
e1:65:62:bc:c4:9a:e5:c1:2c:d8:c7:ac:f3:93:fd:d3:30:93:
3f:77:c9:78:e5:c2:db:b9:21:94:a7:0b:9d:c6:f9:6a:a7:b0:
0a:0c:c9:94:59:69:7e:eb:37:cf:36:3b:e4:0a:d0:cd:8c:f5:
c0:7d:61:6b:88:7a:e7:14:e0:8b:88:69:2e:7c:7c:47:c8:a0:
cd:54:57:14:17:77:fe:3f:a2:d2:c9:69:78:d1:c5:26:74:c8:
66:3a:26:4b:a3:96:62:32:63:7a:0f:ce:eb:88:db:a8:2f:a8:
cb:81:3e:84:92:df:16:76:96:4d:08:a1:0e:a7:87:37:17:7e:
e8:d0:36:ff:2b:2e:e3:db:65:99:57:af:79:e8:5e:78:22:11:
c0:d4:a6:17:de:2b:06:f5:0e:65:b6:ff:8a:fc:03:77:79:08:
ea:63:3d:da:78:43:46:8d:f2:08:74:cb:52:17:de:9e:f0:fc:
cb:0e:0f:bc:3a:63:4a:47:91:74:dc:f5:40:ee:86:84:85:ef:
ca:54:1c:5c:37:26:61:06:f6:a1:37:0d:32:14:04:9a:eb:8e:
79:d2:7b:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQSDuu8bLBEUBoK+oU95fIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNlOGYwOGI1ZWZjNDRhZmFmOGQ3MDYzZTFhZTk1MTgy
NTE0MmIwHhcNMjUwNDE5MjMwMDMzWhcNMjUwNDIwMjMwMDMzWjAzMTEwLwYDVQQD
EyhlMjNmZWVmMGU3ZDk3NDk2YjMxZjQxYzY4NjcxNGE5MzZjNWYzZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAuKWq72NGMA3er1kBG0OqttwFcw
pD5FhfAp3hIS2K/uzdXyGCi4rzR0DBNEmBNM/r5t87NV53FXJeNOvqB8P5ut/Z5d
zQ7WZ4p5N7UhAOkPviA4KQvzLShmbC5XZh78o+CoMbb1HpBhKCoXFWit9cY7/Izi
zTq6nxYdpCORZVzFIce3zBG5brpj4LIc8Z/G7tMnpLkZdcDXmcuc+GqpLR8Sa1BE
TkNXeyzqK/9LBqdrw0a+Dv+GCOxigeMXYbnF2ap94nbyNkB7YlTdLK/X+W8AL/Su
xrOxKFwg6L12KBF0Jtogy3waQJzccMt70k6V2oKS1/lv+dNXgfH7KtPayQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOI/7vDn2XSWsx9BxoZxSpNsXz20MB8GA1UdIwQY
MBaAFHW86PCLXvxEr6+NcGPhrpUYJRQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zYTNlOWQtNmQ3Zi00OTIzLWFmZWYt
MTM2YzlmZmNiODJjLzEvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zYTNlOWQtNmQ3Zi00OTIzLWFmZWYtMTM2YzlmZmNiODJj
LzEvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlcJoLWv
qcJCDoxt8ASkXPIoHp4NJjo62/h5vOCEU/EGH6SI4WVivMSa5cEs2Mes85P90zCT
P3fJeOXC27khlKcLncb5aqewCgzJlFlpfus3zzY75ArQzYz1wH1ha4h65xTgi4hp
Lnx8R8igzVRXFBd3/j+i0slpeNHFJnTIZjomS6OWYjJjeg/O64jbqC+oy4E+hJLf
FnaWTQihDqeHNxd+6NA2/ysu49tlmVeveeheeCIRwNSmF94rBvUOZbb/ivwDd3kI
6mM92nhDRo3yCHTLUhfenvD8yw4PvDpjSkeRdNz1QO6GhIXvylQcXDcmYQb2oTcN
MhQEmuuOedJ7PQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:46 2025 by rpki-client