Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
File: dZBZSelj01d74HYybKC5H_MvloQ.mft (raw, json)
Hash identifier: okVHci3w/IBi+fEpdWXJE2zKehtId/7N3vuAq4jmmNc=
Subject key identifier: 73:8F:DF:5E:EE:93:CB:A2:02:25:BA:F8:DB:E3:88:D8:8A:25:88:BF
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial: 0198D515EEB970CA65C786E855869BF78840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
Manifest number: 076E
Signing time: Sat 23 Aug 2025 04:00:41 +0000
Manifest this update: Sat 23 Aug 2025 04:00:41 +0000
Manifest next update: Sun 24 Aug 2025 04:00:41 +0000
Files and hashes: 1: 6DM2EcyU67ptxBh9GKlJrzks2YY.roa (hash: dGsT7/dH6GvyheXKVe0ZbgWrcxrzH7zYFhEqctDv4NQ=)
2: GsWSBNzv988JIATL2hLeFJWT77g.roa (hash: Ly0cVrt55lxuS7TrsXNQWpKEZ4VseFVE3p+bnlbkQgs=)
3: dZBZSelj01d74HYybKC5H_MvloQ.crl (hash: ACcrWtTkPoMIi5G+CywA1/5icgubHl8wqJvLaumsUIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ee:b9:70:ca:65:c7:86:e8:55:86:9b:f7:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
Validity
Not Before: Aug 23 04:00:41 2025 GMT
Not After : Aug 24 04:00:41 2025 GMT
Subject: CN=738fdf5eee93cba20225baf8dbe388d88a2588bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:6f:cc:83:ed:a5:c4:4d:a0:6c:38:23:34:
33:0e:fd:fe:65:d9:c1:e6:64:d9:55:88:54:5b:ed:
ea:12:d1:65:4e:8c:97:f6:fa:61:d8:46:81:78:1b:
1d:92:8c:96:59:a5:d3:23:88:64:03:31:82:eb:02:
14:79:ce:3b:86:ae:fb:ee:53:43:33:e6:9c:8c:6c:
df:b4:90:de:08:ad:2d:36:70:e8:27:88:84:6c:e8:
2b:33:d4:bc:15:05:3e:06:32:9d:3a:90:be:2a:39:
14:a4:76:06:f6:54:b9:a1:14:b6:ba:7c:0e:65:56:
f2:36:4c:f4:44:60:b0:d2:66:4d:46:ee:32:cf:8c:
c2:b2:56:7b:15:27:fd:88:76:65:65:60:e2:74:3f:
c4:70:74:cc:c4:e8:fa:d7:20:9a:4e:6e:a9:d3:a8:
4a:cc:af:b4:71:c2:f0:6c:53:57:22:9a:91:74:53:
04:b7:1c:4a:48:9a:73:52:57:b7:7a:d3:9e:82:0e:
fb:70:fa:86:e3:a9:70:b7:58:b0:d3:0f:96:36:59:
09:37:0e:e3:fc:be:70:04:17:60:a7:af:a4:2d:10:
84:7b:2b:9f:2b:f5:c1:04:dc:4b:70:78:ce:37:dd:
57:88:0c:fe:51:1f:92:53:8c:59:a3:d3:22:4a:c3:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8F:DF:5E:EE:93:CB:A2:02:25:BA:F8:DB:E3:88:D8:8A:25:88:BF
X509v3 Authority Key Identifier:
keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e5:9a:17:c8:d5:66:19:94:96:c2:bc:86:be:2e:38:05:16:
9a:28:47:1a:89:72:92:2e:e8:bf:c9:d2:ea:b6:50:81:04:6b:
e7:62:f4:7b:9e:9c:53:9d:07:c4:b5:50:cf:96:d0:ab:36:c5:
a4:5a:ee:20:f2:d9:d4:a9:24:ed:a4:f3:92:c6:8c:e1:0d:3b:
b5:47:d9:63:ee:a6:3b:97:6b:29:18:ce:b5:36:fc:05:cb:b6:
5d:ee:84:0d:56:df:0e:3b:68:4f:9a:49:ec:b9:0e:d6:9d:bd:
3e:f5:3d:63:e7:60:b7:72:2e:d9:db:4b:0c:70:93:19:c3:35:
2b:b8:10:f0:7b:09:59:6a:21:9e:5a:fb:bb:93:ea:c2:c3:f7:
ed:f3:28:f6:7a:5d:12:09:8a:8e:0f:a0:10:a8:a5:22:16:4c:
81:1f:de:4f:24:97:d0:83:ab:57:bc:4a:16:23:fe:1c:9e:71:
29:69:84:2a:97:3a:d9:69:c9:7b:f3:4d:c2:cd:86:74:be:f2:
d5:30:ef:96:b3:8b:cf:8d:41:fb:dc:e9:43:38:e1:76:c2:28:
34:03:7e:d9:87:31:06:34:60:02:93:e5:be:96:68:af:f5:9e:
3a:81:11:af:52:84:12:d6:0a:8d:74:72:5e:25:c3:67:b0:bd:
cf:40:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:52 2025 by rpki-client