Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: T9ppL9I6Q3d23XuYp6zuBNP4IwYtKugJIDM90lnggtQ=
Subject key identifier: 9A:C0:40:3E:09:10:A5:02:72:C7:03:EB:90:C1:E5:5F:B4:AC:D7:A5
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 019892C8A50D99D865DDBE0D071E0E5801BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 15A4
Signing time: Sun 10 Aug 2025 07:01:19 +0000
Manifest this update: Sun 10 Aug 2025 07:01:19 +0000
Manifest next update: Mon 11 Aug 2025 07:01:19 +0000
Files and hashes: 1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: z5vqFRcKtdRWi2NZdd5V1Ncobz6OauWIOYatnZadSwY=)
3: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (hash: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:a5:0d:99:d8:65:dd:be:0d:07:1e:0e:58:01:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Aug 10 07:01:19 2025 GMT
Not After : Aug 11 07:01:19 2025 GMT
Subject: CN=9ac0403e0910a50272c703eb90c1e55fb4acd7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2b:7b:b9:5f:ab:9c:c6:dd:f8:bf:a9:83:81:
e5:50:26:08:b0:a3:27:2a:81:11:87:52:5c:6f:de:
f1:51:52:d7:06:77:4c:28:24:64:61:75:8b:95:3d:
17:4c:99:fc:6a:fe:d5:47:79:92:32:3d:d3:ad:e1:
8d:06:85:7a:a0:58:d3:4b:d8:0b:15:76:d5:97:00:
19:af:65:11:21:e9:fe:74:eb:68:f3:a8:fa:49:8d:
ed:e1:41:86:08:b1:39:2d:31:03:25:2c:a4:95:f8:
43:d9:e2:21:73:23:f3:cb:d3:af:4e:ee:e6:77:52:
90:90:a4:73:48:ac:21:cd:dd:72:a7:11:da:b2:46:
8d:e8:31:c5:33:b9:c2:79:af:eb:92:37:04:c3:27:
81:f3:1c:dd:03:c0:ca:8a:f9:b2:30:1e:84:e7:5d:
a8:5c:31:4f:71:96:44:5a:fa:b0:b3:a1:77:23:53:
de:5b:e9:3c:c0:7f:dd:b4:7f:50:22:f8:f9:50:71:
95:0c:81:ac:9d:59:64:45:4c:52:65:ca:98:22:c7:
89:98:51:71:a5:2d:0e:d2:e7:bb:af:74:98:cc:49:
ad:9a:58:24:82:45:27:b5:2d:a0:29:74:81:41:31:
5d:4d:33:ef:ea:e4:76:9d:58:ce:ef:73:3f:24:c8:
7f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C0:40:3E:09:10:A5:02:72:C7:03:EB:90:C1:E5:5F:B4:AC:D7:A5
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:54:4f:b6:64:33:39:90:3b:0b:23:12:23:70:05:a6:92:60:
16:36:30:97:f9:2f:08:3a:f3:19:00:ca:be:92:bc:c8:87:1c:
a6:ed:4d:78:bc:66:a0:f1:ee:d7:8d:06:20:50:4e:1f:a1:60:
34:2c:17:34:14:86:3c:f6:2b:d7:8c:dd:1e:67:16:d2:30:35:
de:85:52:73:19:fa:7c:5a:be:33:28:73:dc:5c:8f:6f:3d:0c:
0e:40:aa:81:72:86:86:29:f9:21:cb:da:af:65:9d:8d:0d:d3:
56:48:1b:08:ef:0a:5c:71:e8:06:e9:16:07:3b:b2:95:73:eb:
d3:35:70:93:db:ae:7e:a9:7a:40:0c:9a:6f:97:a9:2b:53:49:
d8:0c:d4:5c:29:cd:b4:9c:f8:0b:07:d9:16:6f:ad:28:0d:c6:
4a:39:bf:4d:3e:4f:a8:b8:fc:80:dc:70:53:8f:63:3d:41:83:
32:72:39:3b:3a:ce:d3:f2:cc:f6:7e:d3:f2:6c:d8:9a:56:6b:
88:fc:dc:cf:56:0f:69:87:3e:d8:0f:e1:a6:34:55:05:e9:40:
c3:de:ac:ec:60:d0:cf:c2:2c:64:37:b5:b6:4c:d1:69:ae:4a:
37:b5:3c:2d:7f:24:02:f2:47:f8:54:24:5f:f2:73:6b:c2:de:
cf:65:e8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:09:57 2025 by rpki-client