Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: 8rbTAg/8HvUIQ4dW3xN7bsaRR1dEFzStt1BAfk2qMDo=
Subject key identifier: 2C:0B:4E:3E:EC:CC:5A:FC:92:C7:72:13:BD:D1:74:E9:62:A6:F1:58
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 0198D47315E25A187E346E8DC9E73C42360B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 15C6
Signing time: Sat 23 Aug 2025 01:02:48 +0000
Manifest this update: Sat 23 Aug 2025 01:02:48 +0000
Manifest next update: Sun 24 Aug 2025 01:02:48 +0000
Files and hashes: 1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: u5qrpsnrSKo0V/guUqVLvOa/Us7tRBOhG8Jq3qvZu3U=)
3: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (hash: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:15:e2:5a:18:7e:34:6e:8d:c9:e7:3c:42:36:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Aug 23 01:02:48 2025 GMT
Not After : Aug 24 01:02:48 2025 GMT
Subject: CN=2c0b4e3eeccc5afc92c77213bdd174e962a6f158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:5c:b5:a8:49:94:8e:48:8b:44:e1:ae:88:
ae:f8:7e:eb:81:81:92:a1:85:05:18:58:60:17:91:
4e:44:1e:55:7b:05:ea:42:72:1e:b8:f0:a8:a0:d5:
46:18:78:08:70:1d:b9:c8:4f:a5:5d:52:25:0a:a4:
f9:68:a6:59:27:55:50:1a:22:1f:78:ef:0d:dc:d7:
b6:bd:12:3e:1a:a9:9f:8b:61:7b:97:b9:4d:b9:c0:
89:cf:1d:3f:9c:c0:8c:ff:0e:1a:73:fc:d3:ce:d8:
5a:27:19:42:b7:3e:c1:96:17:5d:7f:73:06:df:f5:
86:26:36:bf:30:ea:0b:48:63:3f:3a:fb:73:9e:54:
56:e1:9e:a9:a3:f3:22:28:f0:b7:cb:1a:d2:92:fd:
a3:fc:a8:ca:e0:c6:9b:44:40:69:ac:b3:ce:d1:8d:
41:30:20:0b:44:9d:c4:81:c2:82:33:08:69:74:0a:
b9:2a:7b:e2:b6:4a:c7:0e:7e:d6:0b:98:f8:72:95:
e0:cf:44:83:54:9c:ce:9c:04:1b:c0:c2:0f:de:e0:
e1:78:e9:d8:4a:91:e9:c2:6a:29:e5:8b:3d:82:9c:
c6:f9:8d:ff:b2:90:e0:ef:d4:a7:76:e3:90:0f:70:
cb:a9:52:a5:71:55:4e:95:ba:14:44:ba:58:73:14:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0B:4E:3E:EC:CC:5A:FC:92:C7:72:13:BD:D1:74:E9:62:A6:F1:58
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c6:10:26:e4:6f:6a:12:b0:85:06:46:21:c8:96:51:85:df:
e9:e6:8d:39:96:01:d9:79:29:b2:80:7c:61:bd:38:d7:f5:16:
03:8c:45:04:c3:75:87:41:56:5e:3d:93:bb:04:80:76:5e:bd:
28:71:ae:fb:6a:55:fc:a5:f3:33:fd:3f:0a:04:d8:4b:8d:ca:
4a:fe:bc:25:36:d8:b2:7a:22:23:86:3a:56:89:cf:fb:bc:b4:
8f:72:08:32:97:ea:ce:af:57:da:f1:b1:2d:5f:15:0b:3d:be:
14:7e:6b:99:51:68:4b:24:f8:97:67:fd:2f:42:da:bb:a3:23:
47:a3:0c:39:03:cd:6d:35:b9:e5:63:33:5e:04:a7:47:01:d6:
90:e5:a8:a3:a1:07:f4:a1:97:7f:a2:73:e1:3c:fc:35:a4:4d:
f4:9b:6c:e4:ac:6f:57:31:22:df:bd:6d:54:4c:d8:75:3e:e5:
ff:69:a7:58:e8:2a:b6:5a:0c:95:d6:14:85:21:6d:0c:56:16:
41:88:23:0b:08:8c:6d:34:dc:bc:11:b5:36:b4:da:90:4a:df:
13:db:92:23:57:ad:5c:1d:13:d4:70:db:c9:1a:4c:0c:1d:8e:
64:67:c3:07:b8:7c:3a:de:0c:a0:78:e4:b3:ae:1d:48:3f:ca:
72:0d:63:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:35 2025 by rpki-client