Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: yCAS2eKL1+B6y3ZGxL04N/V/RnOmEC5jS6/hqAjXTcE=
Subject key identifier: F3:5A:58:5D:5A:63:FF:E2:FF:6B:DF:E6:36:E9:A3:08:CE:48:EF:9D
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 0195903DC6D0F244C7C96C840BA9F54CF8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 1496
Signing time: Thu 13 Mar 2025 16:02:02 +0000
Manifest this update: Thu 13 Mar 2025 16:02:02 +0000
Manifest next update: Fri 14 Mar 2025 16:02:02 +0000
Files and hashes: 1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: nekEduSKcSDqPVCvKKzaYZCRI12lvUijdIav+puv/8Y=)
2: MtUZJrG93YjlOedI7qMBnb84kTo.roa (hash: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:c6:d0:f2:44:c7:c9:6c:84:0b:a9:f5:4c:f8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Mar 13 16:02:02 2025 GMT
Not After : Mar 14 16:02:02 2025 GMT
Subject: CN=f35a585d5a63ffe2ff6bdfe636e9a308ce48ef9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:84:d9:c3:82:ee:9b:32:2c:c4:c0:dc:fc:
1f:26:af:85:03:6e:42:b2:77:c0:fa:c5:d6:30:d2:
08:29:8d:ec:38:b1:7a:59:6d:14:b1:49:2b:b7:54:
2c:05:0d:1e:75:3f:6b:34:08:04:6e:0d:5f:cb:30:
98:80:b3:3a:db:53:04:0c:75:89:cf:6e:0a:a5:53:
cf:62:b4:c1:89:81:60:10:ec:f0:2a:6a:42:01:a1:
64:7c:e6:25:53:64:04:4d:3b:6b:7f:0f:4c:41:b2:
9e:24:e3:8e:7e:cf:fc:58:43:26:20:d1:a4:f7:6f:
62:c6:c6:37:25:2a:a2:64:41:eb:95:4e:02:2a:66:
be:09:81:fb:74:fa:1c:8d:f0:60:d4:29:e9:34:91:
cd:31:7c:c6:4d:fe:09:95:f4:6d:3a:ba:d2:cc:39:
36:20:65:b0:90:fb:45:7e:f1:fd:5c:f3:e5:89:27:
7c:31:d3:8f:db:8f:e6:89:63:e7:ee:8a:d2:a4:6b:
82:1e:9a:5c:dd:18:68:10:53:85:75:1b:90:c8:64:
97:ad:17:9b:5c:71:8f:0b:d1:e2:14:c7:0c:9d:b1:
53:9a:14:66:94:da:00:da:72:c3:a3:f1:ea:24:80:
a8:b7:82:7e:df:be:dd:17:d4:6b:19:59:b4:e6:70:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5A:58:5D:5A:63:FF:E2:FF:6B:DF:E6:36:E9:A3:08:CE:48:EF:9D
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6a:61:77:54:ad:cf:29:fc:bc:4e:fd:fa:37:96:52:45:b9:
78:1b:b9:29:6e:3f:bf:53:7e:87:69:b7:90:b5:0b:b5:f5:68:
4e:0e:f3:87:59:0b:f4:79:ff:40:77:f5:49:ab:81:bc:79:4f:
46:cd:00:8f:16:0a:81:4a:0a:ba:ec:24:d5:01:b9:23:4c:15:
cd:72:69:20:59:f4:5b:79:f9:f9:59:de:3a:6a:ca:9b:6b:3c:
05:2f:2b:e3:a8:b7:78:f2:51:49:7b:02:a6:07:d3:62:bf:e0:
7f:f6:3b:83:6b:37:e9:21:e9:c1:a3:8c:86:6a:38:20:a1:8a:
12:02:23:9c:14:47:50:e6:3c:87:df:82:92:d6:66:5c:d0:7e:
7e:05:ad:b9:3e:92:39:ac:8e:3f:34:3e:50:29:34:91:21:23:
f6:ea:48:b8:6b:0d:cf:55:ee:f8:8b:22:3f:6a:3d:1d:90:2d:
3c:69:0e:d7:55:0c:a9:8b:d2:83:89:0e:c2:a2:ba:5b:15:54:
cb:85:18:a8:73:2f:8c:73:63:cf:da:eb:b7:c5:d3:b7:6f:5c:
a5:e7:58:0b:a7:e8:af:14:5b:ce:57:64:70:35:a7:f8:2c:51:
8f:a4:0a:b2:00:ee:ef:de:1e:1c:d8:7d:bb:b0:0a:d6:72:e1:
17:77:59:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:40 2025 by rpki-client