Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: dtghLn3jKLLm5AqKhhkRPiQ3o1rNngqgA41nBG0XT2A=
Subject key identifier: AA:67:CB:35:9F:80:69:AA:29:8E:2B:36:62:9C:32:17:13:AC:9F:E1
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 019780FB39A36F1363A1825203F403B0BADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 03:00:37 +0000
Manifest this update: Wed 18 Jun 2025 03:00:37 +0000
Manifest next update: Thu 19 Jun 2025 03:00:37 +0000
Files and hashes: 1: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: 3y8uRsDpbrd+RxsDAg/eXWzZ83Uu6Fc5/wjg01jBgUQ=)
2: rMYX2ngJRfk9a7fGX1cc8xAfsos.roa (hash: zZBPIZevys4Y238DbVgB+9WvN4FdGE3xhipQLPtn3sg=)
3: z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa (hash: 0P2kU02ZAocYSBgE7zWtiaNGeOEg/Gg5PfdYqLhXNf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:fb:39:a3:6f:13:63:a1:82:52:03:f4:03:b0:ba:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Jun 18 03:00:37 2025 GMT
Not After : Jun 19 03:00:37 2025 GMT
Subject: CN=aa67cb359f8069aa298e2b36629c321713ac9fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:a5:40:16:5b:6c:23:cb:1b:dd:e0:6f:72:
52:45:b2:e8:50:2d:b2:87:59:bc:f5:36:9b:73:35:
c4:1b:c8:a7:b9:0a:d6:b5:3e:6d:34:51:05:28:fe:
a7:91:b8:1b:2e:ff:35:81:d9:cd:ed:98:6a:7c:5c:
1c:67:14:7f:2d:9b:7c:55:eb:71:f7:b7:44:5a:ef:
c2:9a:c7:4e:94:bd:37:a7:7d:e3:61:b9:83:01:eb:
bc:38:5f:6a:6d:12:7f:5e:a3:dd:a8:bf:3e:7e:71:
57:c5:e6:60:48:81:d0:49:02:8a:5b:b3:ba:a0:27:
83:cf:88:63:e9:a8:8e:31:f9:a1:63:b8:e4:fd:05:
bd:df:6a:ec:32:f7:7f:32:d5:e3:a0:cb:9d:2e:72:
c5:f8:13:ea:45:32:d6:3a:e2:4e:e6:da:93:70:ba:
43:82:9c:dc:2e:de:12:d1:1d:30:fa:0e:5d:8f:09:
66:2a:09:46:8e:27:9c:f3:63:91:9f:69:8c:92:33:
fc:98:0a:6f:ee:9d:f1:f8:b0:f8:a4:01:56:35:d5:
d5:9d:f7:5b:5e:ce:ff:0e:15:ea:9b:c8:54:da:2d:
a1:dd:dc:83:4a:0c:bb:57:a8:99:2c:b6:3c:bc:7f:
2f:e6:d0:ac:9a:50:98:a3:56:4d:d2:51:d5:c3:46:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:67:CB:35:9F:80:69:AA:29:8E:2B:36:62:9C:32:17:13:AC:9F:E1
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7c:7c:bf:dd:69:f7:29:83:80:8c:76:80:d3:d2:ec:eb:2a:
12:22:76:3f:0e:05:71:63:aa:f1:25:17:b0:cb:10:cf:85:19:
15:3d:ed:97:39:6d:2b:78:df:3e:7a:51:de:f7:0a:96:9d:e0:
99:aa:f3:1a:4e:f9:0f:2b:e9:fd:98:28:d9:dc:4b:e2:98:22:
75:72:9f:86:cd:02:ac:39:45:9a:fd:ae:60:0b:f5:62:13:f1:
ad:aa:b8:ef:72:e5:f7:30:a5:1b:72:70:bd:c0:43:4a:3f:24:
0a:45:70:f9:19:45:a2:42:86:fd:ad:6c:a6:c4:d6:06:71:9d:
6c:56:05:1e:cb:6c:0a:88:4b:57:3b:91:e2:f5:e3:68:9b:8e:
31:cb:d8:25:70:15:55:0c:ea:78:4a:e9:57:dc:36:21:ad:e0:
b6:7d:60:36:81:00:02:24:b3:33:13:29:99:ad:a8:84:55:55:
a4:eb:97:b6:c2:33:f0:23:12:e3:05:4f:c7:dd:c5:21:02:49:
23:c6:a2:78:15:ed:f7:49:cb:0d:63:56:ee:5d:19:37:92:a8:
40:6b:24:bb:af:ea:e3:72:2e:94:e6:af:ca:b6:85:34:fe:8e:
b1:21:86:9d:e9:3b:74:d4:4d:14:32:d8:41:e1:09:ee:9c:43:
40:53:ba:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:29:10 2025 by rpki-client