Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: gVDtZ+k4q93uc2OL6qqBsljmGMXCGSmU3Kz5lWZEKQU=
Subject key identifier: 2C:20:9A:9A:EC:45:F1:9D:9B:9A:88:C8:10:D9:AF:6D:4F:CB:5D:AA
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 0198D8BD850787DED994397C1EBDABF09A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 21:02:35 +0000
Manifest this update: Sat 23 Aug 2025 21:02:35 +0000
Manifest next update: Sun 24 Aug 2025 21:02:35 +0000
Files and hashes: 1: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: k0IeEGXGL3lbl8r/ID72EtoRsPofL+9IOfkiOfT1vu4=)
2: rMYX2ngJRfk9a7fGX1cc8xAfsos.roa (hash: zZBPIZevys4Y238DbVgB+9WvN4FdGE3xhipQLPtn3sg=)
3: z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa (hash: 0P2kU02ZAocYSBgE7zWtiaNGeOEg/Gg5PfdYqLhXNf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:85:07:87:de:d9:94:39:7c:1e:bd:ab:f0:9a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Aug 23 21:02:35 2025 GMT
Not After : Aug 24 21:02:35 2025 GMT
Subject: CN=2c209a9aec45f19d9b9a88c810d9af6d4fcb5daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6a:2d:ad:0b:15:0c:b8:45:75:01:e4:28:7a:
9f:f4:5f:c3:81:99:ad:44:a8:0d:55:bc:67:10:52:
4f:50:2a:7b:33:3e:03:ca:f8:5c:e5:e7:68:70:e1:
92:b3:f2:eb:27:32:51:9d:66:c8:7b:73:d4:f0:74:
d9:47:1a:38:fe:76:20:50:7c:f9:20:d8:d9:19:9a:
43:f0:11:91:84:38:c0:54:fb:c8:7c:67:db:ee:f3:
ba:fd:67:4e:2e:c9:5c:5c:9e:d0:43:5b:e3:ce:dc:
dd:cb:83:34:71:d6:48:a9:e2:35:e1:8f:2d:92:26:
81:6e:dc:3c:c7:fc:08:65:7c:e0:79:60:bf:69:91:
5a:62:c9:9c:e2:a1:1a:c9:73:c5:a9:7b:c0:0c:d2:
e2:8e:c4:bc:c8:ab:03:b0:cf:ff:94:7f:32:21:c7:
fb:39:05:7e:94:2f:4f:1f:f8:c5:aa:ab:d8:2d:b4:
21:13:58:52:51:7b:ff:8b:ea:fb:21:38:14:8d:1a:
62:66:47:1b:97:44:4d:d1:c5:01:40:d2:ff:f6:9e:
a2:8e:18:ea:37:23:8c:6a:0e:0d:2e:32:e8:11:ce:
30:28:4c:86:f5:b6:1a:6e:04:50:0e:9a:ae:91:a1:
8e:da:87:02:ee:2d:c5:b6:db:52:6b:4c:85:a2:39:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:20:9A:9A:EC:45:F1:9D:9B:9A:88:C8:10:D9:AF:6D:4F:CB:5D:AA
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:59:59:06:4a:b2:2d:6a:c5:89:58:d7:8b:c9:0f:2c:c3:22:
6c:30:eb:ad:be:a5:d4:7b:eb:d5:1c:2a:9b:6d:1a:ff:00:88:
ad:69:ec:76:87:5e:a0:28:39:2d:b5:8e:35:8f:6e:b8:9d:c8:
b1:c0:b0:34:37:cc:0b:80:15:84:e2:6f:bc:3f:e2:b0:18:30:
8e:1d:00:78:51:8f:87:67:96:92:60:36:f1:a8:71:82:7b:83:
08:45:1c:97:5c:b3:f8:37:64:4e:bf:ec:6d:8d:7a:f3:46:b8:
ea:c8:d7:1e:e8:0a:66:9b:38:ac:40:57:99:7f:07:3a:55:2a:
9a:b0:79:0c:0a:23:d5:fe:57:52:f4:f8:33:64:db:64:5c:2a:
0f:a3:3b:94:ad:6e:e7:a6:5d:87:cb:08:e9:50:22:23:c7:29:
49:dc:04:3b:e3:ca:49:91:7b:48:c1:47:3b:79:09:6a:8d:1b:
44:bf:d5:25:dd:63:80:fe:ec:c4:59:46:9c:17:46:ad:e7:19:
83:ee:b9:c0:b9:d5:31:45:ef:5f:c4:04:1a:56:5f:85:15:2b:
e3:67:af:c9:e9:de:bc:49:9a:72:44:91:77:b9:0a:2c:ec:4a:
51:13:2f:e8:ca:e4:6c:ba:c2:ef:2c:21:28:5b:78:01:37:f9:
64:e6:84:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:57:29 2025 by rpki-client