Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: NDHjN7+mPTdH8qKyfttw7uMNEPbmWojgaxFYh7fSCeE=
Subject key identifier: FB:6A:77:63:58:43:B5:1F:34:35:7A:7C:84:40:6B:83:41:71:27:69
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 0198744FF42C3F7D438F1E1C7363EECD0EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 09B3
Signing time: Mon 04 Aug 2025 09:00:53 +0000
Manifest this update: Mon 04 Aug 2025 09:00:53 +0000
Manifest next update: Tue 05 Aug 2025 09:00:53 +0000
Files and hashes: 1: 9AG_khzlUq_52M_uwAyAT--X2D8.roa (hash: j5npHva08ps2FjnGO8hTZ3BTaOYOIDt9K8fTqv+VPPw=)
2: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: UeSFZeHrREf4MjZOekSgnozAieXjXghU/+H2DA82pQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:f4:2c:3f:7d:43:8f:1e:1c:73:63:ee:cd:0e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Aug 4 09:00:53 2025 GMT
Not After : Aug 5 09:00:53 2025 GMT
Subject: CN=fb6a77635843b51f34357a7c84406b8341712769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:25:2f:65:ab:a9:29:13:da:01:8a:74:72:b5:
ea:e8:40:97:4a:6d:a4:92:f8:ac:76:bf:c0:4d:6a:
45:2e:6d:06:f5:f8:65:c9:e6:c1:a3:7e:fe:20:75:
4e:79:8a:fa:f2:23:b7:1a:e5:66:a2:64:fb:98:75:
6f:c7:74:ff:4f:4b:0a:aa:1e:d7:57:a9:76:eb:48:
41:e4:f2:2d:b1:30:ad:f2:86:66:fa:59:8d:ba:02:
55:78:03:21:6b:99:da:dd:4b:b0:89:aa:2d:62:c0:
23:6f:aa:b4:f1:0e:bb:b1:c8:49:83:42:e3:5b:ac:
fb:5d:9f:54:56:89:9f:28:b4:a5:8e:62:f3:df:e4:
f1:fd:5e:dc:5f:70:e7:38:69:95:ce:4d:90:07:3e:
e7:e7:77:14:0e:2b:d0:1b:8a:27:40:d6:c6:5d:9d:
a6:3a:4d:04:33:26:2f:bb:54:4b:a9:c6:c9:00:46:
4a:50:ea:69:f2:91:ee:fd:ea:f5:11:57:c7:e5:db:
26:6b:36:18:42:64:0e:8b:4a:a5:74:a3:b4:aa:ed:
0a:f4:f7:b5:fe:e1:eb:92:4c:8b:37:37:1d:0a:19:
f5:a2:39:ff:6f:08:3e:6c:52:5e:f8:cc:35:09:24:
24:80:69:62:56:f9:fa:fb:23:89:a7:6f:63:5e:ea:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6A:77:63:58:43:B5:1F:34:35:7A:7C:84:40:6B:83:41:71:27:69
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:91:0f:86:b4:38:36:20:d1:93:83:01:35:90:d4:dc:74:65:
3c:17:87:4b:a3:e8:61:46:53:0b:7c:cf:e8:e1:10:08:cc:be:
ac:bc:ec:ec:0a:7a:25:0a:d2:7a:c1:ac:92:54:f2:28:43:18:
59:ed:77:77:39:95:67:2c:72:4a:40:1a:a7:79:b9:d6:71:34:
dd:e9:d4:9f:b9:8c:31:e3:4d:74:33:fb:13:33:b5:2a:8e:4f:
15:0a:f5:b8:a7:56:f7:79:81:bc:62:8d:f4:f7:a1:1f:54:a8:
a3:1f:b2:81:01:58:bc:c0:7b:a3:52:c9:74:b4:67:bb:76:57:
de:93:65:1d:91:3a:fe:9d:a4:fb:88:1b:63:0e:08:21:51:3a:
13:1d:ed:cc:a9:ad:34:87:24:cf:29:2c:f3:c8:6b:c1:96:03:
93:a4:91:e4:af:32:7e:52:3b:42:66:7c:16:a2:8a:a6:68:92:
e7:b6:ca:08:16:b1:58:ec:a0:c0:77:fb:63:a7:64:b4:f9:4a:
bb:60:9f:db:92:57:cb:df:94:ce:b4:45:d3:85:2f:dc:5b:00:
d7:23:26:77:90:5f:86:4d:2d:c9:8a:97:62:41:51:d2:36:3c:
a8:78:ee:7e:c3:33:db:f7:1a:67:bb:c3:61:67:47:ce:0e:65:
7a:9b:8a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:21 2025 by rpki-client