Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: 7D3W8qhR2PtVy9t+XV5bTFpS2w+SgKjmn545ID4UKlk=
Subject key identifier: 3F:EF:B8:7C:19:D8:18:A4:C6:7A:60:E2:B7:AB:5B:EB:C5:53:44:D2
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 019873E38AFA0C46091FE3956D3E822C0EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 074F
Signing time: Mon 04 Aug 2025 07:02:28 +0000
Manifest this update: Mon 04 Aug 2025 07:02:28 +0000
Manifest next update: Tue 05 Aug 2025 07:02:28 +0000
Files and hashes: 1: Dtmeeo2Ahqu20IUfCd65FxwTl2k.roa (hash: I+vjjlJcdrLb3KMRUhvwUitmKXx1JxbgC5EfsL3L6hI=)
2: MA5FazDAuWizu2sArINAiZDNSkk.roa (hash: RRjoWKPkJksBjTPCtL+V2nNMKG6oIx2+O6vH374Aw7I=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: imW0mvGOBu7MQd1T1j09WOUBi6OATtiOFfhHgzds5Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:8a:fa:0c:46:09:1f:e3:95:6d:3e:82:2c:0e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Aug 4 07:02:28 2025 GMT
Not After : Aug 5 07:02:28 2025 GMT
Subject: CN=3fefb87c19d818a4c67a60e2b7ab5bebc55344d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:ad:ee:5c:f4:b3:48:d3:10:c0:7a:04:05:
05:0f:12:ad:65:9b:88:cf:e9:76:30:12:7e:92:58:
92:3b:92:ab:28:a7:8b:a8:1b:28:7e:4f:f5:06:28:
fb:3c:00:6a:5a:8c:b1:77:aa:b6:a7:6a:d9:d4:a1:
13:9b:2c:d3:88:51:d8:9f:d6:7a:ef:0f:d9:32:63:
b9:fc:35:aa:23:3c:44:1b:e2:34:78:72:89:2f:5e:
71:77:3b:4c:eb:7e:ca:5b:45:d7:77:8c:5f:9f:c1:
4a:7a:01:9d:89:db:74:23:49:47:42:41:bd:2e:9d:
ad:b3:4c:0a:91:ed:b9:e1:a4:85:3d:8c:e5:59:43:
06:14:30:4a:7a:c0:cc:c2:8a:1f:a0:ae:b5:24:8d:
ef:29:70:00:78:80:f0:93:e6:d7:35:d5:7b:bb:5f:
24:40:dc:30:ee:23:31:7b:ef:40:ec:36:31:d4:c7:
db:61:2c:c0:ac:bf:84:02:08:b4:fc:79:23:9c:0d:
92:b6:15:6f:89:dd:65:e4:57:b3:22:3b:13:38:fa:
c7:59:4c:c2:2d:d8:2b:f2:53:2e:ea:37:1d:5e:0b:
ca:a6:f8:33:36:f7:e0:1c:b9:27:f0:29:bf:77:fc:
63:46:c8:51:33:ee:71:d8:71:0b:dc:fa:29:56:28:
46:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EF:B8:7C:19:D8:18:A4:C6:7A:60:E2:B7:AB:5B:EB:C5:53:44:D2
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:72:74:25:f3:02:51:ee:e3:a2:0d:28:ac:56:0e:77:0d:df:
73:7c:2a:38:ed:04:f0:58:62:8e:db:4a:56:b1:17:e6:f5:62:
d8:6e:a3:bf:93:37:5e:f6:66:20:c3:25:3f:f1:dc:4b:43:62:
3f:90:f6:4d:06:8d:34:b4:bb:55:9c:47:1e:74:3d:a5:53:08:
e3:b1:e3:85:7e:88:0a:95:42:7d:48:ea:6b:6d:27:51:0a:d8:
56:c4:2c:92:5a:27:6c:a1:23:2b:20:69:9a:54:39:fd:d1:43:
d9:2c:c0:53:e9:98:29:41:ec:4e:5d:43:bd:2c:23:fa:73:72:
50:5b:b9:00:4b:58:8e:10:0c:fb:fe:2f:be:c9:95:d9:df:f7:
96:83:7b:d1:fb:7d:24:5e:42:2b:0e:60:c9:35:52:35:80:f4:
be:38:ee:18:c1:f6:55:95:65:8d:b8:37:73:2e:29:72:af:41:
e3:63:79:5d:55:fa:42:7f:bf:3c:59:c9:5d:5c:58:21:d6:4b:
40:df:14:81:9d:00:a8:3a:3c:63:68:a2:2e:0c:b3:a3:ab:74:
7d:42:a7:d5:9e:7b:7b:81:be:1d:06:e8:38:7a:67:64:ec:00:
12:54:b7:0f:54:da:10:41:c6:e7:a8:91:7c:14:06:2d:f8:30:
42:29:e6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:36 2025 by rpki-client