Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier: VMuP5lWvPHcOC3+yu8glw8b9wD4IbKNR2z/pqgWezJI=
Subject key identifier: 9E:90:AA:89:E6:AA:AD:F9:F1:F2:93:A3:B3:34:49:51:48:42:2D:7E
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 019854FC330C119A7556409E1CEBE044A118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 07:01:10 +0000
Manifest this update: Tue 29 Jul 2025 07:01:10 +0000
Manifest next update: Wed 30 Jul 2025 07:01:10 +0000
Files and hashes: 1: 8GPy1nq-d8qyd5DzcEoD7_wmnRk.roa (hash: VU25KKsH1DHg8pytMPBtSMEdGMuo9BZsAecAtygfZnk=)
2: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: IQ8p9RLfSse7hc9eWlvySHXcNJG49jx1d3TKZ5aLD1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:33:0c:11:9a:75:56:40:9e:1c:eb:e0:44:a1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: Jul 29 07:01:10 2025 GMT
Not After : Jul 30 07:01:10 2025 GMT
Subject: CN=9e90aa89e6aaadf9f1f293a3b334495148422d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:47:b9:1d:e6:91:e3:4a:b9:0c:54:59:58:
30:86:55:81:da:47:8b:c2:05:db:4e:85:fe:67:e0:
8e:1e:be:1a:94:3d:6d:ed:18:25:d0:bf:ef:26:55:
06:c6:4c:c1:a8:aa:e3:58:38:43:0b:af:cf:34:a6:
39:50:b3:9a:42:cb:90:40:ac:84:f6:0c:09:38:7b:
8a:3a:3f:92:c6:9b:96:e4:a5:6b:b1:df:4b:f5:da:
62:29:53:3e:a9:54:59:1a:32:76:4a:5d:b6:56:c8:
ed:08:2c:df:8f:c5:a4:04:18:b4:cb:12:aa:32:64:
a7:ca:f5:df:a5:06:9b:79:58:f3:d3:9c:14:57:5a:
04:09:85:0e:78:26:90:fb:fd:48:5e:dd:da:37:60:
4e:6a:12:05:d7:dd:4b:4f:f5:53:ed:17:54:34:59:
2b:fb:e6:7a:60:fc:8a:2b:38:f7:48:68:1e:6c:06:
79:cf:ee:68:1b:b9:0e:51:25:8e:f1:53:a3:30:08:
da:bd:00:76:b0:b4:ba:6a:0f:51:be:9f:4c:72:b0:
5b:04:da:87:e8:52:64:df:c9:27:91:d1:ce:97:b6:
a1:51:a4:7e:43:fd:4c:6c:24:31:6f:34:b7:71:95:
86:d1:1a:d7:90:c1:dc:18:5e:5e:88:7a:00:db:a5:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:90:AA:89:E6:AA:AD:F9:F1:F2:93:A3:B3:34:49:51:48:42:2D:7E
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1c:04:84:c4:77:a3:22:c8:4b:29:56:f5:9b:2d:22:8a:09:
10:ee:8e:87:46:a6:66:b9:34:ea:ed:97:86:1b:cf:5e:d5:30:
4d:6c:7a:bb:dc:7d:fe:1c:9e:69:2a:cb:f6:01:86:fa:6d:26:
e1:cf:86:4f:22:a1:23:cc:6c:a6:ec:3b:f6:f3:a5:5d:af:e4:
e6:f0:65:b4:ba:65:8c:b1:80:f9:5b:6b:e9:dc:b4:c0:61:05:
c8:44:52:6a:bd:bf:ac:5f:ea:df:27:d7:18:ae:a3:83:55:fd:
e3:a1:41:ae:04:fb:12:fd:5f:13:2f:b3:c2:3f:af:f7:fc:c5:
0c:7d:c6:14:f4:5e:ec:d5:6a:01:b9:b4:55:3f:1d:3b:7e:b7:
ef:d7:37:a0:48:21:d0:87:fa:44:d0:4c:5b:2b:bb:1c:7d:bb:
cf:a0:db:29:4c:b1:ba:f3:a8:67:97:f6:19:dd:5e:1b:a8:63:
3e:c6:67:63:02:bb:aa:d4:cf:49:ba:d3:28:13:3c:79:f8:7a:
19:79:f6:c6:71:94:70:22:a9:81:c1:53:8c:d0:8c:35:b9:f9:
03:0d:a0:8d:30:d1:cd:52:bf:48:0d:54:29:38:0f:17:42:d4:
f0:69:18:b8:e4:5e:31:85:74:a5:dc:35:81:3c:d7:2f:40:55:
24:ca:d8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 11:19:38 2025 by rpki-client