Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json)
Hash identifier: MsUgcdh7vJeBR7FwnVCep7np/W80k78g4sIgmO4Mh90=
Subject key identifier: 23:1D:EB:9E:0D:26:C0:86:18:D0:50:CA:E1:EE:EF:6F:F1:8A:73:EE
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial: 0198D5BBDD2FB35B92B642C5CCF6E6A4A8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 07:01:55 +0000
Manifest this update: Sat 23 Aug 2025 07:01:55 +0000
Manifest next update: Sun 24 Aug 2025 07:01:55 +0000
Files and hashes: 1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: +d+C+8L9KaXL80eizgBP7KEvFRsR5VGfVuvyvBdOeGE=)
2: oiZHTdtEDz6aP8WgUPcMGh6h5wQ.roa (hash: ewlicz9ndLYefeC/+lwNbWi0WIXINkEHOt0Ubc6GHQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:dd:2f:b3:5b:92:b6:42:c5:cc:f6:e6:a4:a8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Validity
Not Before: Aug 23 07:01:55 2025 GMT
Not After : Aug 24 07:01:55 2025 GMT
Subject: CN=231deb9e0d26c08618d050cae1eeef6ff18a73ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:d6:d1:09:d4:aa:00:16:89:5b:33:dc:d0:5a:
a6:c0:67:99:65:e8:1b:d4:8b:6d:ac:39:fc:26:c9:
9a:3e:f8:80:4c:22:e3:fd:b9:6a:69:31:99:d5:af:
b6:3f:49:6e:40:20:a7:44:7d:e1:f5:15:7d:b6:a0:
77:9a:38:a2:89:40:d8:53:43:6b:3d:51:d6:fc:5a:
7e:ec:81:b9:e4:79:83:ce:26:89:45:ac:bb:01:0b:
d3:c2:19:49:c3:2a:00:da:e9:1f:b7:13:de:1d:4c:
20:3b:06:a3:47:72:b9:73:95:28:26:19:b5:37:89:
1b:a9:72:2e:ad:a6:6d:f6:3e:93:a8:ed:01:ee:5f:
1f:30:00:60:fb:64:f9:79:17:94:51:c7:e1:8c:18:
9f:ab:2f:6a:75:e8:9b:53:a3:ec:a0:a5:62:43:23:
81:0b:69:7b:a5:35:67:7b:9d:e6:30:42:5e:cc:c4:
01:b0:79:c0:6d:60:14:00:90:87:98:1b:f8:0a:7f:
46:b3:35:51:c1:2d:41:1a:f8:a7:77:91:fc:5d:3a:
2f:bb:ab:c1:22:84:4a:65:58:24:38:45:e0:08:99:
ac:72:71:10:8f:61:2e:5d:91:80:f9:1e:11:28:24:
d2:7a:29:e5:15:38:e7:7c:1b:e1:73:fb:9b:8f:d7:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1D:EB:9E:0D:26:C0:86:18:D0:50:CA:E1:EE:EF:6F:F1:8A:73:EE
X509v3 Authority Key Identifier:
keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:12:b5:2a:d9:c1:01:f2:82:a3:d0:b9:62:97:f0:98:3a:f4:
0b:88:45:0d:69:ac:b5:71:72:59:06:37:13:8d:e7:df:cd:68:
be:a6:e6:2d:97:4f:9d:05:89:d3:af:ec:66:8d:f4:c9:e7:81:
ef:7a:27:3f:30:f2:43:d2:4f:5a:bb:9f:ee:d7:88:ad:a4:45:
0c:90:ff:1b:05:19:27:49:c6:7c:80:96:08:f5:cd:aa:ea:cf:
b5:ef:b4:dd:92:59:35:41:d1:da:7d:73:9d:a4:87:15:5a:f1:
eb:1d:dd:ba:f0:ad:13:66:a6:04:14:38:1c:82:54:4e:98:a7:
b1:e5:70:aa:2d:cb:89:89:d7:68:ee:f7:c8:97:21:c7:7e:d6:
29:8f:47:ea:19:9c:53:ea:a1:dd:37:62:bb:57:92:47:30:2f:
c6:79:18:15:c6:0b:65:5d:9c:53:ad:f5:9d:d6:31:b3:7f:ac:
96:1b:39:c5:40:73:b7:45:e1:56:37:d8:80:73:6a:5e:c8:8d:
bb:ad:3e:cf:fd:87:25:27:ad:49:3a:0c:78:aa:2a:1e:df:d6:
ec:1f:08:dc:cc:6a:f4:6f:1d:1e:eb:6f:43:28:c5:b3:3a:d0:
cc:54:ad:bb:b0:4d:46:50:05:e8:bb:65:9b:fd:d6:b1:3f:c7:
d5:0e:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:06:25 2025 by rpki-client