Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: OEFaTipy1xwQzisvJRg1HSM3Ev+jdNVpBk3nUBTnaN8=
Subject key identifier: FD:3E:06:21:D1:38:6D:09:74:8F:47:13:2F:1E:0C:E3:09:0F:11:8A
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 0197D963D24A0412C4766A22E7D774546007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 1544
Signing time: Sat 05 Jul 2025 07:01:27 +0000
Manifest this update: Sat 05 Jul 2025 07:01:27 +0000
Manifest next update: Sun 06 Jul 2025 07:01:27 +0000
Files and hashes: 1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: 0veVBVcxHq2PNm1KTPHd90TzmlwraVJMa/Uln+vVbZA=)
3: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (hash: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:63:d2:4a:04:12:c4:76:6a:22:e7:d7:74:54:60:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Jul 5 07:01:27 2025 GMT
Not After : Jul 6 07:01:27 2025 GMT
Subject: CN=fd3e0621d1386d09748f47132f1e0ce3090f118a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:01:fb:85:b2:0e:5e:26:df:91:ce:2d:94:
25:96:69:45:02:dc:36:e6:2e:89:5d:3e:7f:e7:b3:
d0:3a:3c:87:ba:b4:b8:42:5a:ff:de:a2:38:1a:3a:
30:59:68:1d:15:37:20:a6:47:43:e0:91:81:67:45:
3c:fe:be:a4:fa:23:8f:58:d4:a1:5d:65:29:9c:b8:
6b:31:20:2e:4c:b4:2a:6c:d1:01:99:39:9c:8f:18:
d0:06:ae:b4:9f:79:ac:2d:44:3c:db:0b:fb:8b:0e:
79:e4:05:51:6d:69:2a:74:2a:1d:b1:86:c7:33:1e:
d0:c7:f7:5d:37:b5:1d:c2:c9:e6:bc:0d:56:52:4f:
c8:8b:72:b1:4e:cc:2f:5c:b7:17:2d:7b:0c:33:0a:
9c:6a:a3:57:39:65:1c:03:e2:53:1d:13:5b:f4:c2:
6a:ba:69:85:b5:a2:73:98:19:8c:3c:0f:ec:8a:8e:
81:9f:50:39:ec:c1:e6:de:47:18:da:d4:48:b1:7d:
4b:f5:70:63:2b:12:63:c5:c8:92:f2:88:42:f8:ef:
bd:e7:c3:13:b5:c7:b8:21:16:0d:c7:40:d7:70:55:
70:66:9f:97:8a:0e:98:cf:82:55:65:d3:78:21:ed:
9e:52:6c:96:f9:8d:f6:8d:e6:0a:76:1d:65:a6:8d:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3E:06:21:D1:38:6D:09:74:8F:47:13:2F:1E:0C:E3:09:0F:11:8A
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:78:55:24:a6:cc:43:53:72:bb:22:47:8b:0b:db:c0:b4:d1:
0d:8a:93:f3:73:dd:5e:ad:ac:e4:3c:38:02:98:de:be:0e:49:
95:09:53:81:c8:dc:70:77:22:08:1b:a2:84:fb:53:bd:fd:2d:
da:21:30:fa:f0:4e:13:6c:2c:de:e5:14:0c:ac:10:90:11:3e:
15:f2:f3:7a:5b:1a:fb:b3:c4:d3:11:ff:84:30:15:78:1d:3b:
e3:52:ad:e6:9a:df:6c:3f:63:e3:02:bb:7b:9e:d7:05:8b:e4:
90:38:98:ca:fb:da:34:71:aa:09:d1:ee:6d:0c:f9:85:45:6b:
e9:43:b0:a5:79:c4:a9:db:9f:1f:f8:5d:fe:54:89:5f:e2:fc:
ce:d3:57:ee:32:31:f3:1b:ef:e1:43:92:95:50:85:ca:81:51:
b4:05:36:d0:9e:6a:ed:75:18:be:1a:73:d5:a1:98:42:fc:54:
ac:a9:f4:5d:18:45:a3:06:c6:7b:87:cc:62:ca:64:f9:cf:9c:
40:8e:19:01:b1:9c:ca:ec:cc:38:9c:ea:31:3f:08:cd:74:0b:
00:83:c8:98:37:5b:76:46:b9:aa:e5:5c:ab:7c:f1:33:94:4d:
19:4f:65:61:f3:d1:7a:75:1a:40:59:0b:23:08:72:5c:44:bb:
f6:1f:56:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:30:10 2025 by rpki-client