Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json)
Hash identifier: TuqeUK0LePlm83wKLmy3GPKjBBiSPalmD2YP+t7lhsk=
Subject key identifier: 2E:BF:E9:1C:F8:68:B7:4C:ED:5E:76:F5:D1:07:59:00:AE:ED:CC:AC
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 0198733DC7B9262FB3D5A2CC331230BDA42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
Manifest number: 10E2
Signing time: Mon 04 Aug 2025 04:01:25 +0000
Manifest this update: Mon 04 Aug 2025 04:01:25 +0000
Manifest next update: Tue 05 Aug 2025 04:01:25 +0000
Files and hashes: 1: IqOWD9aJ14QW67iQSHAr_IsG4xE.roa (hash: w3ZVvZLPlnQKzQOQmLMJRlyI3uHeVIilgUta/ectFxM=)
2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: nEm8HMGxZOvjSkg9kiiwE8jg6041XHBAtqZaNb0889o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:c7:b9:26:2f:b3:d5:a2:cc:33:12:30:bd:a4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Aug 4 04:01:25 2025 GMT
Not After : Aug 5 04:01:25 2025 GMT
Subject: CN=2ebfe91cf868b74ced5e76f5d1075900aeedccac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:7a:0d:07:41:f3:8c:6f:33:0f:37:38:db:
81:7b:c5:ba:32:1a:4c:34:5c:f6:89:62:03:80:7f:
54:d1:b0:76:87:58:d6:5e:c1:27:c4:f3:72:7f:18:
9e:e2:7a:f4:73:01:68:a0:41:0a:1a:3a:e9:b7:e6:
c2:97:cf:53:91:fc:64:f9:98:ed:18:ad:36:52:d9:
f3:a2:55:9a:1f:8f:e8:b0:01:79:7e:c3:47:76:ec:
d4:b1:a4:76:31:12:c0:47:62:45:e4:49:88:35:9f:
00:f6:6d:3d:aa:50:21:bb:20:a5:34:0a:02:a0:c6:
bd:91:80:10:33:f4:e4:96:b4:b6:2d:a5:a9:99:db:
65:10:31:13:43:56:fe:7c:7c:e4:c1:8f:82:1a:4d:
71:2d:e3:b8:a5:6b:7a:27:48:0d:e6:7a:c3:bc:ca:
10:fc:8c:f3:ac:09:ff:bf:c6:45:72:70:e7:b3:78:
3e:30:18:23:ab:92:17:60:62:64:8e:bd:ed:96:3f:
e4:0c:62:d1:67:ac:7f:ea:91:17:96:95:a2:e8:56:
f5:0c:52:8c:46:c1:ad:21:80:ad:0d:c5:69:5d:b1:
87:bb:66:4f:c7:93:fb:ad:af:72:60:71:fe:8b:58:
bf:53:d6:c2:ff:0d:43:6c:b9:de:bc:09:65:87:ac:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BF:E9:1C:F8:68:B7:4C:ED:5E:76:F5:D1:07:59:00:AE:ED:CC:AC
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:86:c7:62:6c:66:7e:aa:e4:d7:9c:53:82:a4:fd:87:f9:0f:
1d:9c:e3:8f:04:f4:df:72:47:f6:89:ec:6f:0d:a0:80:16:49:
ae:91:23:c9:90:b4:05:17:3f:cf:07:01:83:da:73:17:ba:6b:
19:82:19:37:07:0e:f1:bc:cc:9a:70:95:00:a0:e5:b2:1a:53:
6c:91:f5:40:a2:86:99:7c:19:ae:cd:b5:5e:cd:41:4e:9c:54:
3c:5e:ea:8e:55:c0:8d:f0:91:bb:56:c4:14:5c:22:31:28:e5:
7c:41:e7:b0:5e:c2:de:52:cd:48:c9:05:61:5b:ac:8e:b5:8c:
3c:3f:fc:64:40:1a:da:c9:68:04:8b:6c:16:f9:65:ed:ea:21:
2c:27:1e:85:f1:25:1f:5b:49:07:ef:16:bb:3c:96:9b:8e:bd:
b6:4b:d5:d9:5b:86:a3:dc:e0:ed:56:81:b8:00:75:68:84:10:
ce:b3:63:22:ff:c2:55:c7:e3:07:b8:e7:94:37:3a:86:3e:c8:
15:c2:c9:59:11:ec:e5:3e:84:27:13:4a:a3:a6:95:b0:81:92:
35:62:93:bf:b1:9a:53:4e:da:90:02:b1:2e:37:62:0c:26:cb:
09:62:18:16:00:0d:ee:e8:a9:a3:cb:2e:21:b0:ce:e7:17:04:
55:b7:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:19 2025 by rpki-client