Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
File: DZ40sUlHfVXvC1lipeXgDN-1hIk.mft (raw, json)
Hash identifier: rOWQL/gOnrMNf6PFL1TPyfh1jNcro8lY8OPwlHtZHbg=
Subject key identifier: 35:32:28:7A:54:F2:21:E3:6F:D2:39:83:C4:31:33:8A:B3:D6:E5:91
Authority key identifier: 0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
Certificate issuer: /CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Certificate serial: 01988166C478B785510DBB0A02C7DC337658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
Manifest number: 135A
Signing time: Wed 06 Aug 2025 22:00:52 +0000
Manifest this update: Wed 06 Aug 2025 22:00:52 +0000
Manifest next update: Thu 07 Aug 2025 22:00:52 +0000
Files and hashes: 1: DZ40sUlHfVXvC1lipeXgDN-1hIk.crl (hash: yFM19p+18wopj8Hjw3HnxeL55hhOW71e7K/dH5xpoY4=)
2: WGiFR-bGPm6J5ZNuq_i5kJB6Nzw.roa (hash: 74v2TFsnggZrqZFnVMwJ7ZEDqgCLlK+dkXL3Ua1EXV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:c4:78:b7:85:51:0d:bb:0a:02:c7:dc:33:76:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Validity
Not Before: Aug 6 22:00:52 2025 GMT
Not After : Aug 7 22:00:52 2025 GMT
Subject: CN=3532287a54f221e36fd23983c431338ab3d6e591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:16:11:b1:d3:77:d6:37:89:3e:08:d8:b4:c6:
1b:9f:3e:83:57:ac:8e:1b:60:e4:e3:ee:b9:5e:c1:
f1:35:6e:83:58:54:ba:3a:e4:fa:b8:80:fe:89:40:
f3:09:33:2c:ff:8c:ba:37:56:91:65:5e:c3:26:f8:
56:b9:31:9c:59:4a:1a:ef:cb:b6:a9:e6:1c:13:0d:
d4:35:c5:a9:fe:62:be:9d:f5:4a:57:dd:89:9b:78:
31:4d:8c:56:9e:6c:47:b9:88:63:c5:5c:b2:dd:a2:
75:a5:5e:5c:c0:7c:da:5b:1b:c6:a2:65:44:b8:96:
72:37:ca:0e:1b:8b:7e:1d:2f:95:71:47:40:9b:ef:
25:2f:4e:b4:ce:d8:dc:24:3f:1a:43:aa:a9:4f:1b:
11:e6:97:cd:6d:f2:30:2e:9f:7c:b2:b9:b6:63:a5:
98:7f:29:2a:0b:8b:64:75:06:b9:88:5c:9e:1a:b6:
34:f3:18:3e:89:fc:46:23:3b:c3:82:0f:b4:71:3b:
e4:eb:f4:fe:ca:db:e1:d8:8e:03:ec:f1:28:26:ee:
eb:7f:03:b2:c9:97:94:3d:c3:54:ca:e5:e0:75:e4:
ff:f9:37:82:76:c5:5c:ae:f8:64:1e:a8:89:b3:6e:
28:fe:27:6c:fb:df:4e:04:74:d7:3e:68:1b:23:db:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:32:28:7A:54:F2:21:E3:6F:D2:39:83:C4:31:33:8A:B3:D6:E5:91
X509v3 Authority Key Identifier:
keyid:0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3d:db:1e:77:e1:2c:3d:fe:60:fa:56:ab:68:c0:82:dc:83:
9d:18:57:fe:34:cd:4d:1c:aa:42:72:8f:ae:1b:b1:c7:1a:5f:
e1:f1:a4:36:a2:42:02:b7:65:60:cc:98:e5:fb:10:8a:bd:b9:
22:32:03:a3:32:bf:d9:a0:8a:e1:ba:df:dd:7e:86:5e:8f:fa:
9e:97:27:21:44:77:81:07:22:ea:40:1f:05:fa:fb:fb:33:73:
9e:1a:32:c8:ac:56:ee:54:05:5a:09:e5:8d:15:8d:a5:cf:a4:
0b:a7:f8:a8:02:61:35:a9:ed:7f:9a:59:cb:d7:0e:6c:82:9b:
e6:2e:49:76:cd:df:c6:1c:27:47:c1:cd:54:0d:83:96:a5:81:
b4:b7:22:74:4c:94:51:74:1f:54:02:e8:e5:03:35:fc:01:d6:
90:e7:42:bc:76:70:6c:59:38:21:f7:37:56:33:a6:f5:05:c0:
78:6e:94:9f:1d:24:0d:94:c0:d2:0a:89:41:6a:b8:bb:bc:0c:
e1:09:f5:bd:0d:a8:47:a2:ea:28:29:88:03:0a:6a:64:05:31:
66:ac:2b:7e:c7:55:89:af:8f:29:6b:f5:8c:7a:fb:a4:98:3a:
69:a6:40:33:0c:b7:33:4f:f2:d8:82:4f:f6:5d:dd:ea:34:a6:
08:10:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:31:32 2025 by rpki-client