Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: mKublVdUu6aO75rs0zLAabLeEpZAXr5pqvC9Sd+2eqY=
Subject key identifier: 2A:23:D1:0F:C5:8D:D6:58:8A:09:B7:4A:B9:1E:BE:49:A1:11:ED:EC
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 01984B543D7A6B1F0160051CDAAC2DDA94C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 157F
Signing time: Sun 27 Jul 2025 10:01:08 +0000
Manifest this update: Sun 27 Jul 2025 10:01:08 +0000
Manifest next update: Mon 28 Jul 2025 10:01:08 +0000
Files and hashes: 1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: LwUYvmPoNm0e3wBVj56wdcSesNU8Yon4+SjjVxjFo+Q=)
3: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (hash: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:3d:7a:6b:1f:01:60:05:1c:da:ac:2d:da:94:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Jul 27 10:01:08 2025 GMT
Not After : Jul 28 10:01:08 2025 GMT
Subject: CN=2a23d10fc58dd6588a09b74ab91ebe49a111edec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:b8:68:a7:a5:b1:b2:97:6e:4a:10:f9:69:
ce:f3:f5:05:83:f1:bb:7e:93:36:40:e0:f2:ba:c4:
9d:b0:c6:28:94:69:ca:65:bc:11:37:53:05:e0:7f:
33:1a:53:6b:60:77:1e:ac:2c:8c:54:35:0f:72:63:
21:26:74:e7:fd:25:72:e5:98:74:c4:94:d3:d8:63:
3f:cb:4c:1c:76:72:d6:26:9f:02:47:a4:c5:8a:c8:
7a:e6:fa:fd:17:77:1c:03:9b:dc:30:07:72:be:40:
48:6a:c9:ab:8f:ba:5e:de:49:d6:e2:00:53:08:34:
77:2a:df:02:92:09:b8:1d:cf:e1:c3:47:10:d4:30:
af:61:44:04:aa:9c:7e:82:76:a5:d7:2d:e9:bf:54:
6c:05:8e:cc:2e:d8:7a:b1:b5:29:f3:e0:71:55:16:
ad:dd:2c:cb:50:e9:b4:45:36:63:7f:f8:ed:78:33:
fa:70:db:e9:dd:07:37:f5:dd:3f:3b:ca:e4:14:94:
79:ad:59:df:70:c0:f7:6e:69:16:1d:8f:a8:e8:c1:
b4:ba:1f:c7:73:16:9b:48:8a:25:f7:42:31:eb:76:
dd:46:09:9a:ec:aa:08:d9:46:cf:10:54:48:69:26:
b6:79:74:40:97:a6:dd:8f:22:33:06:4a:15:ae:4c:
9c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:23:D1:0F:C5:8D:D6:58:8A:09:B7:4A:B9:1E:BE:49:A1:11:ED:EC
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6a:21:ba:b2:0a:21:32:0f:cb:01:60:59:52:0f:f0:e4:89:
4e:3e:04:ae:92:83:df:47:e2:3e:de:b4:9c:d5:4d:91:1c:39:
e8:fc:4d:06:54:67:f4:0c:4c:ea:eb:cb:04:2e:d2:01:30:f8:
f6:66:aa:32:8e:bf:94:3f:a8:ab:de:d3:b7:43:b0:30:54:2e:
13:3e:d0:36:dd:1a:23:0e:da:08:58:4c:07:c0:28:2f:67:45:
4d:38:79:6c:1a:d4:41:7c:48:9c:78:ed:90:44:6c:ce:51:31:
fa:4c:ef:af:52:29:27:b5:57:c0:cc:d8:7b:26:df:4c:a6:cc:
3e:3c:87:6f:50:22:2b:d5:d0:47:0e:ec:e3:18:de:54:db:e2:
73:6e:9c:66:8d:e5:ea:cf:07:fb:af:df:03:96:e4:f6:36:25:
be:d7:a7:a1:9b:a6:0e:bd:5d:f2:c1:cf:24:97:9b:12:3b:6e:
29:7c:9d:2d:3d:2d:ec:c4:6e:2d:3c:da:5c:b6:7c:ef:99:ca:
8c:f0:1b:fa:fe:98:43:8f:a3:ba:d9:bc:4d:bc:67:b7:7a:a3:
29:7c:e3:10:b8:34:b0:99:64:28:41:a6:31:2a:89:ca:09:e3:
db:49:ec:f6:df:a3:32:eb:89:80:2f:51:83:49:61:20:e8:70:
31:e6:f7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:10:16 2025 by rpki-client