Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
File: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft (raw, json)
Hash identifier: VebbSHFJZzwD79g0Nz8ba3oPwganxWvSCDi0zpokls0=
Subject key identifier: 40:77:41:2A:FB:F9:A7:FB:04:F8:7C:E3:67:8D:C2:93:73:08:21:8C
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 019849663F4BD00123620D4C0502489BD9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
Manifest number: 1607
Signing time: Sun 27 Jul 2025 01:01:34 +0000
Manifest this update: Sun 27 Jul 2025 01:01:34 +0000
Manifest next update: Mon 28 Jul 2025 01:01:34 +0000
Files and hashes: 1: AGpWRsY_xlGvwtNQWAnABWymQ8A.roa (hash: pZbxN4jH7CXcAGUCPIracQWWJ5Fx7UpJPwtV6JB2GN4=)
2: BCBgNqu47uxxNNiHpeHJ8N3bbPk.roa (hash: YwTUOz8aV/A2kQXL80C7PIKK4Uk0yf33ChXiFW3offA=)
3: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl (hash: OIiIm/Pw4vXzoJI1JzhYs5KwRHfPFRd5wWm/bsFKkU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:3f:4b:d0:01:23:62:0d:4c:05:02:48:9b:d9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: Jul 27 01:01:34 2025 GMT
Not After : Jul 28 01:01:34 2025 GMT
Subject: CN=4077412afbf9a7fb04f87ce3678dc2937308218c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:dd:e6:9e:cc:a4:da:33:9b:c3:bc:d9:db:
be:91:06:df:e9:51:b9:66:66:28:07:2f:76:95:29:
f3:62:12:dc:b0:70:79:09:54:17:c0:fd:80:02:a1:
be:e8:bd:31:e8:06:49:4c:a5:5e:c3:39:84:4c:4b:
3b:ac:c2:ff:be:74:bf:9c:1e:01:9e:15:58:83:af:
a4:51:8a:b9:62:85:51:f6:a7:58:7e:6d:69:07:bb:
33:74:c0:d5:aa:b2:16:e0:61:35:83:79:9c:85:24:
07:e6:06:4c:67:b2:c0:b8:ec:24:5d:d7:36:b8:b5:
c8:54:31:4f:4f:69:fe:4e:9f:39:69:a8:4e:4d:37:
22:bb:a2:23:b9:12:75:ed:42:d2:46:23:59:87:35:
89:d6:ce:27:fb:9d:13:bc:c7:94:17:e5:5b:82:3a:
26:3a:3a:d9:27:62:40:29:e6:c0:f1:fd:db:51:58:
d2:08:af:c6:5d:01:f2:bf:09:03:ff:d9:5a:1a:9e:
a3:a8:86:2d:e0:85:a0:3d:95:54:ff:54:c5:ad:d4:
2e:9a:91:5b:a7:e6:4f:86:06:e0:a1:b8:6e:89:43:
c6:82:d0:e2:ea:83:9d:8e:26:ec:9f:48:1f:c4:e8:
2b:34:25:04:9d:03:b0:2c:c3:a5:57:8c:4e:8a:4f:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:77:41:2A:FB:F9:A7:FB:04:F8:7C:E3:67:8D:C2:93:73:08:21:8C
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bf:d2:36:00:c1:fa:ab:fb:f9:24:0e:8f:12:d8:f5:43:11:
51:48:41:2a:3c:89:2e:8b:27:70:a3:6b:eb:56:10:e5:f3:a3:
eb:12:52:b4:08:7a:77:0d:d8:17:62:ca:c8:35:90:cf:ab:f4:
4c:47:82:9e:9e:ca:05:96:69:d3:78:79:83:a2:5e:44:b0:81:
3c:74:8d:c1:ae:60:f4:81:d9:d6:bf:12:7b:7d:f5:f4:33:5e:
e1:0f:d9:5e:bf:6a:06:af:4b:e9:42:1c:4f:c5:25:11:f5:22:
e6:6f:82:33:1b:e7:bf:28:14:09:8d:ec:c3:15:6e:9d:65:67:
ba:50:4e:cd:d6:7b:3f:14:57:a3:47:a1:3c:be:7a:ca:83:df:
1e:4f:5f:b0:4e:3b:da:73:cd:61:c4:d2:7c:18:76:1b:b1:09:
ae:f5:bb:9d:13:18:2c:bc:e3:c3:31:e8:4e:27:ab:e5:2e:ef:
75:3b:df:71:e0:53:a9:4e:44:19:26:6c:97:99:3b:44:0f:86:
c9:76:06:34:8c:bc:4d:4e:2c:3d:5e:ab:97:d7:b9:0c:03:4c:
a6:33:f9:dd:da:a0:aa:6d:aa:df:67:e5:80:dc:28:75:70:70:
0c:02:e6:93:b7:6e:c5:94:72:8f:3c:36:74:1d:54:a7:31:98:
1c:8f:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:10:12 2025 by rpki-client