Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
File: DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json)
Hash identifier: sfq+GnoX4hpJe51JcObv0G/9HLzzgG018xLh+wdwc1k=
Subject key identifier: DD:37:97:15:82:21:32:33:E4:3E:DC:4B:F5:FB:E6:D4:BF:11:68:7A
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Certificate issuer: /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial: 01987CE56877E8E35BC4BE8465D7DBA0B907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 01:01:05 +0000
Manifest this update: Wed 06 Aug 2025 01:01:05 +0000
Manifest next update: Thu 07 Aug 2025 01:01:05 +0000
Files and hashes: 1: 1-sk04SJKaJ6g1Y9khEpsLFas3Kk.roa (hash: XxZhRBWthERVmL3LKPQQh5B0868NCMjhs1tFs+3eMxM=)
2: 4QpvM3CE_nzBSqatuahpsYYH1qM.roa (hash: Qrg/EHEt9L0x/2vBVqdC/NUou31du+BoDTLXvsaFSGk=)
3: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: JmW7il6ZrLlaZT2K3X/SxwAodkXpqygAZjWByOnYT2I=)
4: OKvzKSdRprY6KmoCf5oHQIz_91A.roa (hash: c7CmyJe2kYuAmiLCH0rQuuU8EyGxHjQvlpZniPCLw0U=)
5: mHALm7hBq5s0140ybe8Xc1F8234.roa (hash: imdhLSNxS5EA5IBXEn3VpwdKjS6o+zDqUc/wlGF8Pzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:68:77:e8:e3:5b:c4:be:84:65:d7:db:a0:b9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Validity
Not Before: Aug 6 01:01:05 2025 GMT
Not After : Aug 7 01:01:05 2025 GMT
Subject: CN=dd37971582213233e43edc4bf5fbe6d4bf11687a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:c1:59:ba:02:e9:04:9b:33:e6:a8:16:55:
ee:57:9b:83:a6:ba:0a:73:8e:0f:f6:1d:28:95:c5:
8f:7c:cc:a8:53:2d:a8:11:2a:79:69:a3:20:0f:f5:
80:27:58:2c:45:41:44:7d:e6:d5:21:05:74:98:e4:
61:79:25:87:d2:78:f6:47:a7:7e:01:07:ed:41:03:
14:0f:22:53:fb:51:32:7f:d2:eb:24:6b:e1:bc:88:
b9:85:09:b8:e5:29:ca:99:2f:af:51:3c:06:59:40:
70:09:58:c6:4f:fd:30:65:2d:69:bf:68:f4:6c:69:
3f:e8:90:4b:09:72:ce:fe:66:f1:ae:d3:ef:e3:2c:
24:3f:a2:be:70:fe:bf:28:89:21:f2:cf:cc:c1:3c:
c8:d5:63:16:c2:43:0a:26:e2:72:b0:95:7b:13:31:
92:02:23:7a:e6:38:21:3c:e7:8f:03:37:56:ad:ee:
eb:f1:b7:0c:96:d5:f8:8a:b5:14:c4:89:06:ef:a4:
35:82:74:37:70:8a:fe:25:eb:5e:8b:c3:62:9d:e9:
25:b4:33:6e:45:5f:a4:a3:10:06:9e:01:d3:4b:8d:
dd:43:26:f2:f8:df:c3:70:fd:6a:76:3b:24:ed:9d:
60:12:b0:f2:c3:43:e9:b3:0a:47:a0:28:16:27:10:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:37:97:15:82:21:32:33:E4:3E:DC:4B:F5:FB:E6:D4:BF:11:68:7A
X509v3 Authority Key Identifier:
keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e6:87:1d:da:b8:87:2c:73:4f:5a:82:36:3a:21:6e:17:ea:
7c:94:2a:a4:f4:21:ed:a5:a8:90:13:11:9e:50:f0:9c:46:a4:
be:5f:b0:f7:5d:1e:61:a9:8a:64:fc:94:5a:78:b9:06:6c:9d:
89:91:0a:e7:a0:41:95:75:00:90:30:a8:cb:fb:5f:d6:0b:e7:
e0:a2:0c:6f:45:96:75:01:64:b6:a1:4a:7a:52:38:15:5e:e3:
c5:27:e3:26:83:9f:5c:2f:10:be:62:84:c8:a1:63:d9:35:1e:
be:20:5d:36:33:68:94:c7:12:86:89:98:99:33:83:d5:e7:4d:
9a:53:e9:0c:ee:02:f8:b6:7e:23:74:fe:f1:f9:92:5e:3f:37:
bd:1b:74:ae:1b:f8:11:52:92:d8:96:e4:fd:b9:bf:ce:d5:ac:
61:c1:ce:39:de:7a:46:2d:33:2c:1c:99:88:f2:56:d3:57:92:
8b:e7:49:ae:fa:15:4d:7f:76:88:f7:70:2a:06:89:9a:b0:b9:
5d:cf:be:1c:48:9c:5d:89:88:7b:f7:80:41:60:7d:d6:60:fa:
fe:fa:a2:27:35:0e:4d:f0:82:da:4b:4b:6c:ae:0a:9b:fe:a1:
4d:2b:6b:22:a8:70:a5:24:5a:8c:6b:a4:14:78:18:d3:ca:88:
2f:2d:e6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:57:27 2025 by rpki-client