Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
File: DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json)
Hash identifier: 3Sh1zxoOJ0mOqCqItnoKOZRwkdrXFfypfdcGyeiXeNc=
Subject key identifier: C1:7D:3F:00:AD:F6:8A:6B:6B:8A:6E:B9:C2:C5:92:A0:30:4D:40:9B
Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945
Certificate serial: 0195903CFDD0F8E5978EAE69E8ECA9D4F8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
Manifest number: 097C
Signing time: Thu 13 Mar 2025 16:01:10 +0000
Manifest this update: Thu 13 Mar 2025 16:01:10 +0000
Manifest next update: Fri 14 Mar 2025 16:01:10 +0000
Files and hashes: 1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: w4WD3A3uajW2FVdGeTguxboZs4P3u5AxkDAwFa0fVLo=)
2: s3TIKJMGO-H8fbbN5SX9DjrKZbg.roa (hash: nJZCH4ElBXirrkbsvqmvn6OniRKSBo6O3OjFqSqnuAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3c:fd:d0:f8:e5:97:8e:ae:69:e8:ec:a9:d4:f8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945
Validity
Not Before: Mar 13 16:01:10 2025 GMT
Not After : Mar 14 16:01:10 2025 GMT
Subject: CN=c17d3f00adf68a6b6b8a6eb9c2c592a0304d409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:2b:ad:18:a5:0e:00:a8:31:3c:a5:25:16:
06:c1:ae:ba:ce:8e:92:a4:28:84:63:2d:48:36:bf:
39:e6:98:93:67:42:d9:33:b1:07:59:60:71:5a:a3:
0e:ea:a1:ad:69:5e:9b:39:77:dd:3f:7d:cb:d4:c7:
9f:71:42:81:e6:d1:82:11:30:c7:78:42:6d:e4:57:
78:82:c7:a5:6e:70:ed:bd:82:3d:3b:ab:03:0c:f3:
a7:13:b6:b9:f2:14:ff:c1:30:77:51:92:4f:58:0d:
dd:a2:bc:eb:4c:cd:ec:52:84:c4:59:0c:92:bf:99:
ac:dc:1e:9d:10:ca:02:cb:26:92:7a:c4:1f:26:e2:
c2:06:42:f7:59:21:f4:5d:8f:98:3f:89:2e:0f:8d:
ef:62:1f:0f:d2:f0:a6:1e:8a:02:83:02:70:b7:0b:
4d:c6:05:df:ad:d1:5f:46:15:1a:41:80:b6:5a:5f:
eb:f2:84:eb:3b:6c:46:b9:bb:f1:a4:c1:6a:cc:27:
76:3e:65:6a:9f:a2:32:a8:4a:d4:35:54:8d:66:5d:
53:6e:5a:16:50:a1:b9:4d:5b:e5:58:3e:69:de:7f:
2f:69:ef:2b:a3:59:98:7b:8c:ba:ac:9c:da:52:ae:
cb:fe:dc:69:9e:aa:0f:b6:50:4e:a9:70:be:e7:d0:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7D:3F:00:AD:F6:8A:6B:6B:8A:6E:B9:C2:C5:92:A0:30:4D:40:9B
X509v3 Authority Key Identifier:
keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ef:38:f7:c7:74:0c:a9:11:4d:03:6c:2a:2f:74:25:ab:7c:
56:61:fa:f4:dc:fa:5e:8c:64:b1:cd:a6:3c:64:c6:f3:73:8e:
51:6f:12:5f:3d:4e:59:5c:09:b4:fa:b1:4a:d7:0a:27:18:ca:
e5:dd:4c:de:41:1a:51:5a:01:53:ce:c9:5f:62:00:69:71:37:
61:b3:f5:ca:bb:88:70:49:57:17:87:46:a3:b9:96:4b:2d:40:
a0:b5:e0:23:b8:30:db:bc:75:46:48:4b:dd:a9:e3:f9:4d:cb:
5b:82:28:d5:c3:1f:02:4c:13:31:d0:f9:40:d4:88:81:c4:32:
3d:6e:53:65:79:89:3c:ae:cf:50:d3:98:a3:24:ac:f1:44:ad:
8c:4b:ff:5c:d9:15:28:39:c4:f5:ea:47:70:bd:53:e9:9d:80:
0f:72:c8:5b:22:9e:03:09:cf:fc:ea:96:19:7d:0c:03:c0:9d:
10:3a:88:9d:94:8d:c8:b7:7d:85:fe:e0:2c:10:44:b1:91:e8:
22:a2:40:f3:73:dc:34:1a:be:07:e2:5b:22:9c:e2:73:43:98:
3a:e3:4f:8b:8c:87:c2:a1:b5:b5:41:69:ce:6d:aa:cb:cd:15:
fa:b3:d3:7d:74:8d:56:68:c0:ef:ab:d8:60:0b:d2:12:93:a1:
ab:58:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:03 2025 by rpki-client