Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
File: DbPDFk09jCZEzymzI2dhpXHuWLo.mft (raw, json)
Hash identifier: DfdwlS3TcyUwa+eV4F1ohSzTV19OFQWQCxk4JeD52ZA=
Subject key identifier: 14:49:7A:62:FD:47:A4:19:E7:CB:98:C0:02:4B:66:94:63:D2:A8:11
Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
Certificate issuer: /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Certificate serial: 01974AE9193218CF85CD19B4A9815843A8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
Manifest number: 0B84
Signing time: Sat 07 Jun 2025 15:01:19 +0000
Manifest this update: Sat 07 Jun 2025 15:01:19 +0000
Manifest next update: Sun 08 Jun 2025 15:01:19 +0000
Files and hashes: 1: DbPDFk09jCZEzymzI2dhpXHuWLo.crl (hash: +7f4QtEZNVAPal04NpRKw78vx13EJkUqaeda6neOFK4=)
2: VCOPnV4kZuweFLb_llPPHRAXNUA.roa (hash: cRLhBmbu/yT6hrLfR7qsKhKnC8knJg7oOO9Ome0I9Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:19:32:18:cf:85:cd:19:b4:a9:81:58:43:a8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Validity
Not Before: Jun 7 15:01:19 2025 GMT
Not After : Jun 8 15:01:19 2025 GMT
Subject: CN=14497a62fd47a419e7cb98c0024b669463d2a811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:3e:76:55:b1:a6:58:2a:58:0d:0c:ea:0f:
ae:3b:f6:31:c6:8e:9c:5d:22:e9:4e:93:e6:5c:fb:
bd:bf:dc:54:6f:34:a8:e1:7e:ff:77:ae:63:c5:39:
7d:dc:66:a2:4c:0f:d2:df:b1:48:e6:46:9b:6a:3f:
71:71:f3:41:b5:cd:39:1f:ff:2b:18:c8:f4:a4:7d:
6e:28:b9:7e:59:dc:d9:ed:fe:fa:d3:23:7c:b5:ef:
a4:25:0b:39:8b:55:ce:13:f2:b6:33:9d:31:47:b5:
ba:07:15:c8:bd:48:81:8a:45:7d:76:01:cb:4e:1b:
08:86:cd:a8:c6:fa:9a:85:6d:1f:3f:90:eb:0a:a9:
22:97:fe:a1:df:33:0b:e2:91:dd:cc:e9:d2:9d:51:
98:2c:77:14:bd:05:66:9d:2a:ef:dc:ad:ea:e2:ed:
12:fa:03:8e:d7:00:a0:17:32:bc:17:2a:5d:69:5c:
50:f7:78:b9:74:0b:f9:62:a7:b3:b5:5d:85:30:b5:
0d:d9:2e:22:4a:49:41:1d:49:00:22:a2:e0:aa:59:
58:d9:1a:0d:0b:b1:1c:2f:71:9b:69:2f:eb:29:f2:
5c:b2:78:3c:61:28:dc:95:5e:c2:90:be:a6:81:9f:
0f:dd:ab:57:cb:b8:9d:d6:8d:1c:56:5b:e8:81:70:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:49:7A:62:FD:47:A4:19:E7:CB:98:C0:02:4B:66:94:63:D2:A8:11
X509v3 Authority Key Identifier:
keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:db:a3:a5:cc:48:1a:89:28:e0:76:15:45:a4:a6:f7:01:c1:
5e:d8:07:65:21:8e:43:14:0d:ca:c4:34:55:05:4b:5c:0a:b1:
6b:f3:2e:83:92:4a:b9:8f:bd:df:5a:fa:e5:3d:0d:c5:70:26:
f7:92:64:dc:d4:20:fd:7a:ac:49:cc:bf:39:8a:a0:e0:c4:fc:
b5:47:59:16:a8:89:51:9b:8e:fa:de:79:d7:ba:3d:0f:54:ae:
22:69:75:56:67:0f:d3:90:44:db:6f:18:9a:cd:e0:31:68:d2:
b3:ed:15:87:dd:62:75:1a:b9:24:4b:30:90:c4:60:25:31:4e:
ee:02:66:21:38:bb:22:e3:b4:00:58:77:a8:f7:36:5f:1a:18:
37:a2:53:36:4a:7d:94:42:26:1d:f9:84:9b:6f:15:37:1e:23:
04:ac:00:be:39:a6:43:5f:96:98:3d:f4:2e:a7:c3:d6:23:75:
04:05:8c:e9:1f:03:8a:8f:71:fd:0f:1e:25:e9:8a:72:c4:43:
60:fe:10:94:5b:b2:89:6b:56:37:5e:70:4a:71:cb:4a:f8:6b:
66:18:2b:36:b2:f3:64:ce:c9:8c:b6:d4:95:3f:a4:30:3c:f8:
13:e3:f6:7a:c6:80:e5:af:5a:b0:c6:40:40:61:1b:70:bc:80:
6b:30:56:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:39:09 2025 by rpki-client