Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json)
Hash identifier: negfIWSFvaT8WS9yIYiTW0uph7nzIu+1QWSX3XO6N0M=
Subject key identifier: EA:DA:B9:21:C2:7B:08:3C:C5:07:F3:D8:2C:64:84:02:A9:02:57:40
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 0197B7EA5915C32071A5D4BB6D64F2449ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
Manifest number: 1081
Signing time: Sat 28 Jun 2025 19:01:18 +0000
Manifest this update: Sat 28 Jun 2025 19:01:18 +0000
Manifest next update: Sun 29 Jun 2025 19:01:18 +0000
Files and hashes: 1: IqOWD9aJ14QW67iQSHAr_IsG4xE.roa (hash: w3ZVvZLPlnQKzQOQmLMJRlyI3uHeVIilgUta/ectFxM=)
2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: 6wgXeoFKXovujWYxPNGLre90JguK/6KSWqnHvV4CLwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:59:15:c3:20:71:a5:d4:bb:6d:64:f2:44:9e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Jun 28 19:01:18 2025 GMT
Not After : Jun 29 19:01:18 2025 GMT
Subject: CN=eadab921c27b083cc507f3d82c648402a9025740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ca:ca:91:35:43:70:5e:f9:33:63:9b:f8:c6:
98:6f:ed:64:d1:54:b5:6b:17:9e:a9:fe:31:d7:24:
ed:c8:87:5a:d2:c4:70:80:c5:cd:ae:c0:b2:71:87:
f7:e6:15:71:07:fe:f4:9b:17:fd:1d:db:58:05:fa:
a6:28:00:8a:ca:5e:52:04:3b:2d:c5:11:3c:31:01:
1a:18:bc:71:fd:37:e4:93:f7:6e:17:1f:16:2a:c8:
5f:6e:a1:bd:7b:07:ed:af:0c:59:3f:1a:c5:b7:4b:
6b:94:ba:01:d8:6a:37:cc:9c:b1:6b:33:d4:b7:fb:
c6:c3:24:8e:a9:6d:ba:8c:60:95:35:20:44:3a:19:
0c:80:17:23:47:e7:72:e5:0a:9a:e2:a1:68:e7:94:
ab:b7:79:e4:aa:ec:3e:7f:b4:88:a0:d2:b4:93:b2:
9c:d3:78:6a:0d:54:10:f1:fc:2a:16:87:01:76:10:
98:03:e7:21:ab:95:fe:19:a4:e9:8e:54:0a:3c:c3:
3d:f8:50:b2:0e:ce:0c:df:f8:eb:a4:d8:fc:ab:2d:
8e:0e:2e:70:7a:ca:fc:3e:70:d5:09:3e:b4:10:e1:
be:c3:e0:1c:62:e5:7e:36:d8:9a:2e:a1:fa:53:8b:
45:ab:d4:85:d7:54:41:07:77:93:c6:74:0d:e3:39:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DA:B9:21:C2:7B:08:3C:C5:07:F3:D8:2C:64:84:02:A9:02:57:40
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:db:05:ff:e8:90:84:8c:9c:9d:6e:90:b6:fd:08:6d:00:1d:
be:09:54:76:d8:31:f9:93:cd:30:d3:59:fd:71:2a:63:dc:89:
24:d6:64:22:8a:17:8e:07:c5:9e:eb:b2:4e:ed:33:91:7d:12:
14:7e:a0:27:06:47:b9:22:ee:0d:5d:f6:7e:f9:11:b9:45:b0:
19:27:e4:8f:55:48:31:8b:91:87:ec:95:46:e5:21:1a:3b:66:
ad:c1:11:7e:45:ef:ce:5e:36:5f:a7:60:55:6b:b3:93:5f:c1:
53:20:77:eb:7e:41:f4:28:13:ff:3d:76:a2:7d:0f:b9:c7:29:
53:44:9f:d4:4e:19:dc:53:48:b2:a5:21:30:e0:65:ef:de:91:
9f:2b:78:54:d8:94:cf:a8:14:99:b6:8f:78:62:14:03:1b:62:
24:d7:33:b3:13:c4:64:42:b4:ee:f8:94:b8:b9:ac:0c:1e:0c:
2e:95:ab:06:1e:1f:8a:c9:95:f0:64:10:d6:db:34:f4:c8:82:
da:b1:f2:6f:d7:d8:d9:d6:0b:ca:4f:1b:95:7d:46:26:80:45:
77:9f:0e:b3:f8:12:cd:11:1f:56:c4:00:13:7c:70:a6:d1:5c:
3a:72:29:3d:33:68:d1:fc:51:1d:97:2f:6f:df:5b:71:46:61:
b3:1b:e3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:35:03 2025 by rpki-client