Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
File: dZBZSelj01d74HYybKC5H_MvloQ.mft (raw, json)
Hash identifier: CqhyPtLTqU3mz3ex6kYG7CQ0mrpSua5xzAUCogQmgcs=
Subject key identifier: F3:4F:7F:5C:F4:6F:54:39:23:91:B2:0F:1C:54:A4:1E:F6:B1:D3:46
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial: 019A006C5319B9399E30643C964664815F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
Manifest number: 0809
Signing time: Mon 20 Oct 2025 07:01:30 +0000
Manifest this update: Mon 20 Oct 2025 07:01:30 +0000
Manifest next update: Tue 21 Oct 2025 07:01:30 +0000
Files and hashes: 1: 6DM2EcyU67ptxBh9GKlJrzks2YY.roa (hash: dGsT7/dH6GvyheXKVe0ZbgWrcxrzH7zYFhEqctDv4NQ=)
2: GsWSBNzv988JIATL2hLeFJWT77g.roa (hash: Ly0cVrt55lxuS7TrsXNQWpKEZ4VseFVE3p+bnlbkQgs=)
3: dZBZSelj01d74HYybKC5H_MvloQ.crl (hash: J3JsRKmfZDO4fTkMnqKN+diJfM3i2IM3j4awyGDzFPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:53:19:b9:39:9e:30:64:3c:96:46:64:81:5f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
Validity
Not Before: Oct 20 07:01:30 2025 GMT
Not After : Oct 21 07:01:30 2025 GMT
Subject: CN=f34f7f5cf46f54392391b20f1c54a41ef6b1d346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:29:d1:69:02:81:cb:cd:dd:6d:69:00:bb:
81:45:39:72:15:5d:dd:a7:be:a2:b6:30:72:df:08:
30:1a:34:bb:f3:d0:c9:75:5f:3f:c5:1a:a9:3c:7c:
89:d5:eb:bd:ac:cf:8b:17:b2:bd:97:1b:4d:a0:45:
24:83:43:d7:b5:c9:45:b4:c0:58:2a:75:21:c3:85:
ac:0f:bf:88:77:85:01:ed:fd:d7:cc:88:8e:f2:e9:
44:88:8c:7d:04:76:57:c3:2a:e7:69:6d:f1:02:de:
4c:c7:9a:c8:07:3f:c4:a7:b7:5a:79:cc:54:25:0a:
5a:43:85:80:ff:bf:92:5a:77:44:fb:9b:94:8c:d4:
47:33:f8:b5:50:81:c8:8a:a9:d1:b5:ea:4b:85:60:
19:9e:fd:b2:bc:af:5d:20:ec:15:18:23:89:4e:24:
6d:4d:5c:94:ec:a3:a0:6a:0e:e9:db:d4:2a:73:03:
2f:8a:22:77:c4:3f:8a:80:a9:bd:37:1d:ff:1c:7a:
13:8a:81:7d:7d:5f:d6:f9:30:17:55:93:7a:73:cf:
16:1f:0d:28:b5:5c:20:33:41:c0:83:c0:67:24:ad:
a9:1c:b4:ea:fb:b2:f6:db:bc:d6:46:a5:6d:2f:fb:
ef:cb:19:ba:c7:52:d1:d0:1e:3f:a8:62:85:3b:51:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4F:7F:5C:F4:6F:54:39:23:91:B2:0F:1C:54:A4:1E:F6:B1:D3:46
X509v3 Authority Key Identifier:
keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:07:ac:b3:87:56:a3:5f:9f:a3:7d:be:0e:32:60:da:10:23:
2e:ca:4b:58:b8:52:29:ef:13:ac:d7:d0:25:bb:dd:b5:97:2d:
99:2b:58:51:30:b1:3b:ed:23:c2:2a:31:8b:04:95:90:8b:f1:
27:f8:3a:0b:7f:34:dc:41:b3:1d:bb:59:d5:4f:5f:ce:6a:40:
40:1a:06:91:74:87:0d:63:2b:07:07:4e:25:d3:0e:25:03:22:
35:f0:83:98:24:86:c8:8b:5c:03:24:72:e0:f5:f7:ed:9c:b1:
97:aa:b5:d2:6e:32:1f:89:4b:25:0b:02:6a:36:f6:5d:f0:c5:
4f:3f:f8:b0:7a:76:53:e7:ac:9a:46:e4:eb:6d:db:c8:8d:3f:
2c:a0:08:81:c8:1d:c6:2a:fb:a1:95:6f:bd:0d:e4:3e:20:5e:
4c:06:40:83:80:e1:3c:93:6b:cb:ba:eb:05:cf:57:70:ec:af:
ea:1d:29:89:60:b3:2e:d1:6b:1f:5c:16:94:a7:2a:30:1c:5a:
1a:c4:5c:51:b3:0e:08:e3:78:35:9e:c5:86:59:6d:61:46:e6:
60:64:18:ab:59:9a:bb:05:be:94:b9:97:3f:1d:82:d1:6a:a4:
18:c1:6e:37:c0:db:b9:80:d2:a0:af:a5:29:1b:80:5d:80:c4:
32:bf:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:10 2025 by rpki-client