Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
File: dXzv42s_zGikLAr_gdFEmA8yd38.mft (raw, json)
Hash identifier: /CpM/GjPgmOXNscgV52s4xa5aAuRBTBrFwv75HIqTV8=
Subject key identifier: 56:9C:BF:4F:E2:BA:C0:DC:03:11:09:13:85:74:61:9A:11:FD:57:3C
Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Certificate serial: 019833F00E778C03B2FDAD330F73B9C46CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
Manifest number: 0D2A
Signing time: Tue 22 Jul 2025 21:00:26 +0000
Manifest this update: Tue 22 Jul 2025 21:00:26 +0000
Manifest next update: Wed 23 Jul 2025 21:00:26 +0000
Files and hashes: 1: 1TRtZnjq7TTtmFmMwtPs4KbKu44.roa (hash: wIEdMzzW9jRKXoj00OQHzkUyKOO3GqmvJI2wEWN8eV8=)
2: KSDXhKgWWVEkkC6NVIKBP_o1Rpo.roa (hash: jVQCkscbVa1q5LANqcaP37lQjUSQCWfQx/8k3fovaCg=)
3: N1rTidaACgh8Wl5J2g45GZumvQs.roa (hash: btCaFx/Jws6uzlXHydN6cLSWM9L6FDcS4ymcYrWP048=)
4: QG4XDauoT3YZZWiorRFZU6wgCqI.roa (hash: W86DoxWPLH5owIhWIAeb+OOV4etuYSaHrSDEQRlHSvY=)
5: XsLjp43XqVLOf-UiZTsjZx3E54g.roa (hash: xErYg38+N/tFwn9w696LSX/zjDpD0mxUiTuXvg0H92I=)
6: dXzv42s_zGikLAr_gdFEmA8yd38.crl (hash: aTCce4RtZLvLwGeWMwKDmSKyXKfOahMogTrPVLbRMGg=)
7: j3Ptqby32qT75eey4SmrtVS5UGY.roa (hash: tbC4b9hbySMoKM3B3guWgAqJSnSfoMlB2VYMhfTqDik=)
8: qE8D3nsEUOLG1NuGsSRIci9iQRY.roa (hash: vOpcrcbGrhK1e/m6LFFrSilITZsrUmccTwgae/Ijt/E=)
9: wUhuDMSsBwbclPWnAiFhijhk7qY.roa (hash: q7eZn2UzqXEGHVmt/34LCyZFoshnRxuQaC2DK2NKxpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:f0:0e:77:8c:03:b2:fd:ad:33:0f:73:b9:c4:6c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Validity
Not Before: Jul 22 21:00:26 2025 GMT
Not After : Jul 23 21:00:26 2025 GMT
Subject: CN=569cbf4fe2bac0dc031109138574619a11fd573c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:63:b2:ee:2e:e9:62:2d:5d:c9:b2:70:39:
01:6d:75:95:4b:47:f0:b2:c2:c8:1b:fd:1a:2c:27:
d9:04:cd:b2:13:13:09:f0:c8:8c:3b:c6:ae:bc:0f:
6b:ec:2f:5d:7b:ce:86:2f:ae:56:15:08:f8:7b:76:
9f:20:7c:3a:8f:4d:65:10:31:c1:07:c4:3a:d3:80:
76:4b:e6:db:49:db:ba:25:13:52:b8:2f:97:81:e3:
9f:f1:af:e2:21:d4:6e:48:39:af:dd:1c:c8:4b:8b:
87:a5:a3:dc:a9:9f:c3:0a:ef:08:3e:c7:d2:cb:9b:
f0:2d:0d:45:56:54:68:1f:be:24:82:f3:4b:25:5a:
19:62:30:30:97:91:43:8b:1a:32:0f:30:1e:8a:3a:
b0:ad:f9:7a:03:ed:7c:9a:1e:83:dc:95:aa:99:6e:
e5:4d:87:56:c1:12:68:ab:96:a3:95:b5:42:81:a1:
a2:74:a5:71:4a:33:86:01:43:fa:fb:9c:0c:d4:84:
80:6a:a3:35:ac:14:e9:bc:c7:4e:2c:a8:8f:58:0c:
80:6f:5a:1c:a7:c6:0d:a4:a3:e0:59:15:8a:44:bb:
89:88:d7:4f:57:f9:a5:3d:07:13:f5:e6:be:76:2e:
61:e6:fd:b4:26:61:25:61:0d:1f:d7:b6:89:0a:a9:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9C:BF:4F:E2:BA:C0:DC:03:11:09:13:85:74:61:9A:11:FD:57:3C
X509v3 Authority Key Identifier:
keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a2:55:89:d7:39:9b:bb:c6:91:8e:e2:b3:52:83:75:7f:63:
aa:18:f8:0a:bd:c9:5d:fb:aa:51:41:bc:28:86:08:9e:c0:35:
a5:74:e1:ef:0c:b3:f5:93:1e:f7:d5:b7:f5:4b:48:b3:01:5f:
19:ee:ce:9d:4d:52:0d:7e:68:12:ac:59:08:5e:76:f2:a7:ef:
dc:88:8c:1a:a0:85:4a:08:8b:98:56:2e:c1:ed:a3:8b:8b:d4:
41:34:dd:85:65:b7:9b:39:80:54:48:20:25:28:34:65:19:41:
1a:22:1d:0b:fc:cb:cd:b2:cc:b1:17:df:f7:f4:cc:5a:22:13:
28:cc:f4:20:e5:eb:92:53:01:8d:ba:e5:e0:93:88:a0:ae:09:
7c:cd:8f:c8:87:80:4b:a3:1c:18:21:d0:b6:de:2e:25:da:14:
5d:3b:82:40:da:54:fb:90:98:f1:4f:d1:7e:70:10:f3:9f:7c:
07:74:ee:40:5d:8e:88:39:c5:22:42:b4:55:ef:c4:6f:73:7b:
de:bd:f3:1d:2c:5e:8e:c1:74:f4:a4:27:e3:61:7d:8d:db:9e:
b7:c7:48:ef:81:f3:79:49:93:62:04:50:5f:71:cd:88:7c:17:
1a:15:39:47:b5:ce:34:c7:2a:f5:59:cb:b0:f7:33:a8:c6:bf:
93:5d:04:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:13:19 2025 by rpki-client