Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: OKLHfUc7/u7/pCQKYHzhUktcDHu0xqaVXhqX92HwwCI=
Subject key identifier: 38:5C:19:C7:2B:D8:F5:8B:71:C5:2B:60:B4:8A:09:BA:BE:41:07:48
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 01958B4D7EB414C430313E18EC1317726547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 17:01:06 +0000
Manifest this update: Wed 12 Mar 2025 17:01:06 +0000
Manifest next update: Thu 13 Mar 2025 17:01:06 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: 2Z57S4XmZS3bJssH1r+508sSkr0tbM33/OatTtQqVFE=)
2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:7e:b4:14:c4:30:31:3e:18:ec:13:17:72:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Mar 12 17:01:06 2025 GMT
Not After : Mar 13 17:01:06 2025 GMT
Subject: CN=385c19c72bd8f58b71c52b60b48a09babe410748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:24:67:e5:94:21:8a:f7:3e:a2:83:ac:8e:
e3:3e:d3:22:a4:fc:6e:01:e6:2d:49:81:1c:57:a1:
bb:c5:bb:da:ca:67:de:bc:55:d4:5b:d7:1c:ea:ca:
fa:66:63:44:3c:ae:bc:8e:e7:a7:ca:e8:11:03:f3:
ca:75:67:7f:10:9c:b4:b8:94:94:a7:1f:64:0d:69:
03:03:d8:be:b4:a7:c4:58:e2:63:e6:04:40:de:09:
b5:12:03:43:24:f7:87:7b:cb:8d:bb:bd:7d:9c:4f:
d6:7c:98:1d:09:00:e6:92:9a:ec:77:e0:8a:ce:de:
f6:d7:dd:fd:c5:60:37:77:27:03:f8:da:23:d7:7c:
5a:83:6d:61:fe:54:e6:91:3e:40:f9:f9:f5:1a:c7:
01:fa:3f:99:a7:4e:c6:29:b8:39:84:eb:0d:79:f9:
b8:c9:61:91:2a:03:7e:5a:d3:e1:38:b2:74:5f:21:
c3:eb:21:63:74:9b:61:7a:25:73:0d:4f:60:dd:27:
b6:58:ba:df:b7:1b:7d:2e:35:a4:e5:45:fc:3d:ba:
97:fc:1e:ca:21:e8:57:52:f2:53:e1:74:ab:d2:17:
7d:17:43:c6:21:34:71:d1:94:21:b6:36:43:c5:f7:
75:58:8d:44:46:d7:c8:6b:0e:44:c8:e9:7f:04:27:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5C:19:C7:2B:D8:F5:8B:71:C5:2B:60:B4:8A:09:BA:BE:41:07:48
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a3:4c:da:34:b7:ac:26:7a:92:00:2c:01:7e:8f:63:f1:26:
2e:25:09:d5:ee:84:df:b1:d4:2e:64:1c:1b:d4:d4:7b:66:57:
12:e6:16:05:bb:9b:53:1f:67:ac:43:fb:1f:3e:72:f0:d1:1a:
56:8e:2c:4b:0c:22:6c:e6:42:1f:c2:08:8a:f9:6b:44:7a:96:
e5:32:b6:76:10:e8:1a:94:f7:77:dc:37:de:01:6e:b1:4b:02:
04:4d:b3:9c:6c:18:d0:8e:35:21:d2:1e:6e:e1:aa:1e:d6:88:
18:bc:c9:6e:35:07:98:7c:b6:88:01:42:fd:24:52:68:04:06:
c0:75:52:59:8d:58:f1:27:6d:3d:10:e6:24:4f:5e:71:34:2c:
9d:fe:58:4f:43:fd:30:a7:58:f5:88:50:ae:d7:ff:eb:d8:4d:
2e:ed:55:74:86:90:66:9f:2e:37:40:6c:f6:aa:c4:fb:5a:0c:
5d:5d:aa:1c:f4:48:1d:b1:90:25:2c:17:c1:79:61:97:1d:1f:
ad:93:9c:6e:f2:60:74:27:98:9b:37:d1:f4:41:db:60:eb:46:
86:b7:af:e8:67:d4:0c:50:15:12:e1:1a:e7:b9:41:e2:8f:fb:
a7:d4:29:d6:15:8e:35:71:c3:a7:36:fc:c1:4d:ec:56:52:a3:
ac:c2:28:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:08 2025 by rpki-client