Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: r2BHZfh+i5OdMiVIataxXRCd+iMFVxbKoXaZ5f8poTE=
Subject key identifier: 33:AD:63:B5:D7:AC:A1:60:1A:5D:A5:2D:BD:C2:52:CB:82:BD:15:D9
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 0196CACE3B4C8631BEF7669702107CD8E3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 14B8
Signing time: Tue 13 May 2025 18:00:35 +0000
Manifest this update: Tue 13 May 2025 18:00:35 +0000
Manifest next update: Wed 14 May 2025 18:00:35 +0000
Files and hashes: 1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: lX4ulzagj5+ilLJsru4BNE3YVbcF9NUjnZT4Eg7ucWk=)
3: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (hash: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:ce:3b:4c:86:31:be:f7:66:97:02:10:7c:d8:e3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: May 13 18:00:35 2025 GMT
Not After : May 14 18:00:35 2025 GMT
Subject: CN=33ad63b5d7aca1601a5da52dbdc252cb82bd15d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:96:61:da:51:3b:02:6d:29:f7:18:99:59:
a2:8c:4b:77:31:81:a9:d3:5e:e7:81:fa:d3:b7:82:
9f:5a:db:f0:9e:e8:f6:e3:06:7c:dd:e3:3d:bf:46:
26:73:07:f8:c3:a6:8a:b6:25:d8:96:d4:ee:6c:d1:
d9:75:32:d3:10:dd:aa:e8:01:26:86:5a:77:2c:b6:
67:b7:6b:84:92:85:cc:f2:32:75:19:38:34:a7:b9:
1f:9b:05:1c:ed:fa:7c:b0:b8:61:3b:93:27:36:b6:
79:39:2b:32:51:c1:43:ac:46:de:ce:97:73:a4:1d:
1d:fc:9a:c2:e7:5b:ec:1a:50:59:82:ba:e8:71:70:
a7:23:2a:ff:51:fd:2f:b5:1c:38:f1:9f:05:d0:eb:
92:0c:db:08:a9:85:e8:10:05:de:78:32:98:0f:f4:
0a:64:2b:99:9b:dc:d4:d3:c8:ef:02:bb:aa:c3:4c:
97:5e:77:f0:f2:36:0c:42:07:2a:01:a1:69:10:70:
22:22:27:4e:46:3d:3f:23:da:32:0a:37:89:12:9c:
3d:99:30:11:4c:c0:2b:a4:d1:0b:3c:82:1e:8e:6b:
17:8f:75:99:a8:21:a2:81:b6:fc:2c:eb:62:8f:d6:
18:53:b3:2c:7f:0c:ba:8f:28:85:1c:6e:5f:e4:67:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AD:63:B5:D7:AC:A1:60:1A:5D:A5:2D:BD:C2:52:CB:82:BD:15:D9
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b3:f0:5c:5e:63:2e:f6:ea:83:ae:0a:92:fc:11:f6:bd:e2:
f4:52:60:cf:cd:3c:74:4b:d7:cb:23:6a:cd:3d:de:76:da:f5:
9c:c9:05:ae:6b:c3:de:f1:59:50:f8:23:85:b2:c4:20:54:18:
d6:eb:7d:10:67:12:dd:af:c4:bf:ab:6f:e2:5f:83:9b:58:c5:
d7:0f:60:a7:64:d4:af:30:fc:d2:8b:e8:6b:e4:d3:76:84:52:
c1:9d:6d:63:88:26:69:d6:af:65:dc:fc:77:f8:13:d9:20:81:
48:1b:79:36:5a:97:0d:fd:41:65:4f:0b:43:b9:2a:7c:62:73:
b3:38:19:08:e6:3b:b0:82:45:81:f6:05:6e:fc:b3:f3:a7:be:
ea:8f:61:a5:e6:8f:9c:21:c8:2e:77:07:49:50:f6:61:f6:ae:
98:68:a2:ee:16:ef:eb:83:4a:d4:ee:54:7f:94:e3:15:99:10:
9c:a7:24:87:73:e2:78:ac:41:00:6d:93:9d:aa:6d:a1:50:60:
7b:a9:84:9c:6a:eb:90:94:d2:6d:8f:24:ae:8e:49:de:dd:13:
2e:aa:03:d4:45:3b:f1:42:50:dd:84:c2:d9:8f:da:21:7e:39:
54:c3:96:d4:e3:f8:0f:96:c0:6e:47:00:a9:4b:c7:ad:b8:8c:
4a:7f:3a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:40:04 2025 by rpki-client