Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier: QkmtMc3mF/U98RVGWGW8zzGNI6aXZsqYNpLWwbZW+lY=
Subject key identifier: 5C:CB:40:20:50:6B:C3:46:5C:8A:2D:0B:88:71:58:29:81:96:26:03
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial: 0198936D7B990CD31323C0DDF2742B155253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 10:01:22 +0000
Manifest this update: Sun 10 Aug 2025 10:01:22 +0000
Manifest next update: Mon 11 Aug 2025 10:01:22 +0000
Files and hashes: 1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: r5HpHSpDjhSY7EBIcgF0y6fB6lrV16MTd88TSyR4Nww=)
2: ayJmzYBNfcdq3NPJ8M3cFOVfzCs.roa (hash: 0bZlkgsn21QwI80X8EQdx07gNzwAcET4bz9RvPxajWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:7b:99:0c:d3:13:23:c0:dd:f2:74:2b:15:52:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Validity
Not Before: Aug 10 10:01:22 2025 GMT
Not After : Aug 11 10:01:22 2025 GMT
Subject: CN=5ccb4020506bc3465c8a2d0b8871582981962603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:8d:28:a2:3f:92:d1:97:58:3d:11:ad:33:
46:bc:13:41:50:be:bf:9a:11:68:34:2b:67:7f:05:
f0:8f:1e:53:ca:05:ab:91:0b:8f:9d:c8:1e:f6:3a:
6c:66:e3:b8:01:61:9f:fb:55:98:8a:50:f5:10:0d:
87:27:70:59:a7:2b:75:af:0e:36:34:e1:d5:43:fa:
45:7d:8e:15:0d:69:ed:f3:4a:89:29:92:25:8f:3c:
f1:58:be:e4:f6:a8:7a:bd:c2:6a:10:fb:9a:1d:ad:
af:1c:ac:ba:e1:8d:72:c6:a4:09:b4:14:61:0d:a4:
3e:f8:23:d1:fe:26:d4:a1:cd:24:c5:d3:b9:df:a0:
5a:71:37:df:09:eb:c7:df:b3:51:94:21:78:36:2b:
8b:45:6f:df:23:e7:60:9a:84:93:9a:a8:3b:98:73:
ca:80:20:9c:ab:ee:d8:dc:8c:e7:ff:95:7f:a9:51:
b4:79:d6:56:6e:b2:d0:ea:02:2b:80:56:83:11:51:
c3:35:b3:be:01:36:64:49:ba:fe:0a:a6:92:27:a1:
86:0b:ee:50:0f:21:f6:49:41:03:83:17:c5:44:ea:
00:2f:df:b5:70:dd:b9:58:cc:44:7e:fe:13:a7:7a:
40:77:cb:17:4e:6c:b1:e9:0d:a9:e7:75:e2:f0:82:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CB:40:20:50:6B:C3:46:5C:8A:2D:0B:88:71:58:29:81:96:26:03
X509v3 Authority Key Identifier:
keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4a:95:a0:64:e6:bc:04:0b:d2:0d:fe:a5:fa:29:f5:cb:34:
c5:79:52:60:97:29:ae:89:18:4d:95:20:3b:d9:41:e4:99:66:
1d:30:64:a8:ff:7f:d3:bb:3f:7a:d5:8b:a2:d2:60:69:d7:34:
3b:07:ee:b7:67:49:dd:74:87:44:c9:49:75:fe:7f:11:93:66:
7a:6a:64:11:dd:29:0c:8a:a4:88:60:c4:2b:5b:6d:f2:bd:a0:
92:5b:f2:0c:ba:fc:67:8d:e5:bf:b1:aa:d6:bf:27:86:18:26:
a3:be:89:c6:ad:1d:5d:65:54:7b:52:e5:35:c9:cc:8a:c2:62:
fa:84:54:cb:b5:cc:62:5f:56:2e:e1:3e:81:20:4d:d1:18:ba:
fb:df:40:d7:41:c5:19:43:30:88:49:ff:8f:8e:3c:b8:6f:51:
63:a2:14:70:c0:76:88:40:e3:4c:dc:0e:6f:51:dd:50:a0:ce:
3a:f9:7d:c2:64:05:97:d0:fd:22:d5:c4:8f:d5:e4:5f:1c:fd:
5c:5a:f3:f5:f8:78:49:3b:79:e2:4b:a9:1a:3e:89:5d:d1:01:
b5:a0:7a:6b:ec:73:62:fe:c0:3a:ca:dd:98:61:c2:28:e2:37:
3d:7f:41:ab:34:1c:f3:dd:ad:56:9b:f8:36:5a:59:b6:bf:ac:
4b:91:22:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:47 2025 by rpki-client