Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: 6/TzqqzL71aAeW8IRMGSjsotonMTL9Xz0UinlP/6HYk=
Subject key identifier: CA:62:49:60:F6:90:21:EB:0D:D8:A3:73:20:BD:66:40:5C:91:57:C1
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 01974742906305872DDDBAC4A93EE6245614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 22:00:34 +0000
Manifest this update: Fri 06 Jun 2025 22:00:34 +0000
Manifest next update: Sat 07 Jun 2025 22:00:34 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: rMsgzEZDH4uft7aX5fZSCnkr1+9IdpHLovKig3yQsgg=)
2: G0J3ZwqY7nqQ1F-r-kfCdSWuyO4.roa (hash: +njzM6YBvg7QKHzm9fDQxiSdZRBXgF7BQneYn5PkN18=)
3: zYDOCeKC7kKgpKbk0isuZ6zgxdU.roa (hash: w347S4U24N5+dIdmg0/S6hyDG1PqUwaZbQe5AD4eTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:90:63:05:87:2d:dd:ba:c4:a9:3e:e6:24:56:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Jun 6 22:00:34 2025 GMT
Not After : Jun 7 22:00:34 2025 GMT
Subject: CN=ca624960f69021eb0dd8a37320bd66405c9157c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:03:e1:09:6a:ed:6e:e1:00:32:08:46:99:
e7:97:4b:d5:6a:5d:4f:3a:af:3b:da:6c:71:c9:00:
6c:86:ce:75:cb:d6:43:45:83:00:eb:46:41:a4:47:
5f:54:a6:8c:19:e5:9c:2d:6e:8f:fe:c9:e1:f1:8f:
d1:22:af:b9:4e:25:1f:63:b3:3a:9e:03:5f:9c:77:
7d:27:05:57:e6:ec:7b:9b:fe:bd:62:b9:a2:92:ae:
89:f1:3f:f4:c9:64:fe:0c:30:4d:dc:59:89:74:ba:
25:1c:0f:5f:ef:08:02:b4:1a:2f:50:77:40:7e:02:
72:3e:e9:21:1b:8f:72:15:b8:27:33:2e:04:c7:0b:
3f:6a:c8:0b:c1:d9:38:a8:65:fa:d4:0c:3f:a9:7a:
d0:cf:c5:06:c5:6a:69:43:05:c0:00:d5:6f:62:ac:
60:4e:ef:8c:8c:fa:93:5c:1d:d7:97:ed:d4:f5:8f:
3f:a4:2e:1c:14:55:13:a1:41:af:80:69:15:50:75:
4a:df:ef:85:2c:91:39:2f:b3:4f:3d:53:2c:5d:c3:
f7:34:89:14:da:8e:fa:ff:df:25:ff:99:39:07:c5:
66:92:de:24:3e:58:62:d1:aa:ec:5a:3c:6e:69:aa:
ae:c1:f1:46:f9:77:b7:e0:94:6d:0c:ff:fc:5c:07:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:62:49:60:F6:90:21:EB:0D:D8:A3:73:20:BD:66:40:5C:91:57:C1
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ea:01:01:91:e5:2e:53:30:28:5c:7c:28:72:d4:da:cc:1a:
37:04:08:8f:72:68:20:b1:6c:5c:3a:b8:e7:bc:a3:c2:4d:81:
f1:24:38:28:45:4d:60:a3:bf:c7:a6:7a:0c:2b:e9:8c:c5:45:
e3:c6:ab:a3:8e:09:95:37:f2:b3:61:86:a4:b1:2c:b1:1f:04:
6f:a6:3a:5e:42:b4:6e:74:22:56:12:84:df:45:62:66:2e:96:
dc:3c:0d:6c:85:2d:8e:9e:2f:7f:52:c3:81:59:27:87:49:70:
6c:6f:fa:da:5d:aa:13:94:21:ce:fb:0f:81:66:78:0e:79:03:
bc:7f:91:f6:c0:42:7d:f2:01:43:9e:97:bf:9b:49:09:42:62:
62:c0:58:30:64:da:b0:04:eb:da:97:61:d9:bb:c4:70:a7:df:
1c:57:7f:f1:f1:a5:f4:a5:d2:81:c0:04:b6:92:51:c0:41:8f:
ea:10:e4:05:de:72:33:b1:98:db:76:19:f3:9c:97:1b:af:0b:
3a:fe:ca:69:70:26:ba:7e:04:21:4d:4f:79:a2:6a:6f:5a:d1:
bc:84:ca:a3:61:a5:87:6b:61:5f:b5:89:02:80:aa:ef:8c:29:
9b:af:73:9a:d6:65:06:6f:88:d9:ea:f5:86:d2:2e:07:94:7c:
c2:73:ea:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:38:39 2025 by rpki-client