Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: +/bG46ZUmfr3pUCkYCwcfP6ne3ND41ujdNNoDVbaUfA=
Subject key identifier: 5F:D3:EC:70:00:EB:EC:05:7F:E7:B6:E4:F4:16:4D:A4:F9:A4:4A:2A
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 01958C60CED9DCB501289C062E633514D185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 0F70
Signing time: Wed 12 Mar 2025 22:01:49 +0000
Manifest this update: Wed 12 Mar 2025 22:01:49 +0000
Manifest next update: Thu 13 Mar 2025 22:01:49 +0000
Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: kdNjbiczVv0XRkYZsUpe/dgNCX18prW1qMZtgW65f/s=)
2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:ce:d9:dc:b5:01:28:9c:06:2e:63:35:14:d1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Mar 12 22:01:49 2025 GMT
Not After : Mar 13 22:01:49 2025 GMT
Subject: CN=5fd3ec7000ebec057fe7b6e4f4164da4f9a44a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:85:0a:54:db:34:47:97:d9:95:e0:86:76:
37:bf:43:18:86:94:62:2a:ce:a6:08:f2:f6:d5:4f:
6b:e7:0f:bf:6c:e0:83:3f:a2:66:af:56:6f:e2:07:
b6:e0:94:a4:91:85:43:a3:1f:8b:9b:9c:ec:66:07:
d4:24:fc:2a:3b:3f:ab:e0:34:3a:39:c5:5e:26:f2:
fe:9c:b9:70:b5:a0:ec:6b:f3:59:a0:40:d2:2f:7a:
ff:e0:e0:2d:10:00:68:64:98:50:b7:ec:5d:2a:73:
5f:f8:c2:8f:26:19:c4:ba:fe:e8:d5:74:3c:42:70:
79:76:9d:9a:1c:0d:57:42:28:f8:42:36:59:69:cd:
5d:6b:2a:83:ae:78:59:d0:06:fc:96:7b:34:09:db:
d7:ff:fb:e1:35:6f:d4:47:bd:07:da:a9:df:41:43:
a0:73:8a:ca:cf:b3:ea:d0:08:63:f6:6b:1c:f5:9f:
04:7e:e2:ee:01:c0:d4:c1:03:2b:ee:3b:2f:a2:d4:
a4:dc:e6:44:e5:c3:3f:9d:24:95:86:b4:84:7e:84:
9f:ca:d0:e3:ef:d3:a2:4c:ee:fd:d5:36:f8:1a:de:
2c:20:d8:91:6c:e1:c8:ea:f7:61:bc:d8:e6:06:48:
cb:66:bf:7e:e7:b3:7e:41:e7:fd:f1:97:8d:7e:ea:
db:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:EC:70:00:EB:EC:05:7F:E7:B6:E4:F4:16:4D:A4:F9:A4:4A:2A
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b8:c5:e5:a5:cc:5e:3b:49:24:68:f6:16:94:a9:97:96:63:
2f:f9:cd:5c:81:f5:43:e6:b0:94:55:58:d9:16:e0:9b:21:b1:
50:43:11:26:67:1a:ce:79:ff:f2:c4:b4:9c:82:41:90:49:2f:
5c:29:76:5f:13:1e:d6:3a:0d:68:a8:61:17:8e:13:0b:14:40:
d3:76:42:2c:76:de:74:d6:84:51:61:9e:70:57:86:be:de:57:
32:c1:01:30:e4:a0:c9:0b:7e:e5:9c:11:c8:f1:e1:63:2b:68:
3b:ee:3b:c0:45:7d:88:da:b1:38:4e:1a:57:bc:f9:1a:2c:b0:
54:a9:69:43:04:0a:44:ac:20:14:ef:77:16:94:5a:08:91:4f:
5a:15:a7:a0:b3:10:1d:02:95:27:ef:79:80:dd:2c:c7:04:61:
2c:37:38:48:b2:21:54:e8:57:88:2b:1e:49:70:e0:56:f6:b9:
a5:f3:04:29:4b:7a:86:ac:cb:1f:ed:96:c0:22:3c:53:ed:38:
e9:e7:ad:0c:9e:37:91:49:55:e9:d2:05:df:a5:33:25:a7:a8:
c6:6e:5b:35:08:b1:58:04:a4:bb:94:58:21:5c:da:cd:db:29:
20:71:e6:7f:e5:6d:93:bc:bd:02:3b:61:b5:26:bd:86:a3:ab:
b9:e8:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:15 2025 by rpki-client