Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
File: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft (raw, json)
Hash identifier: ZhfwtdFZpl4VNhJAJAHXVaGbJ70pnod4FV1sI6y8eJo=
Subject key identifier: 69:B5:F1:C2:D3:51:3F:FB:F3:97:CA:90:FC:08:92:B2:2F:F1:E6:DA
Authority key identifier: 75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6
Certificate issuer: /CN=753cff430f7f1751e697bb30f87fef397cc17fa6
Certificate serial: 019849661A1CA0C0A669C45CEF6643EF086A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 01:01:24 +0000
Manifest this update: Sun 27 Jul 2025 01:01:24 +0000
Manifest next update: Mon 28 Jul 2025 01:01:24 +0000
Files and hashes: 1: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl (hash: gddc8S8uy+k8nWOkAGg/F6c2wPTq0a7swSR1jzzggG4=)
2: dnhmPWmpRWX9rAh9nBMTSVjDqxs.roa (hash: fzOf1Or3/SM11VjxsfHMYPlVNvpYFDsl88MJ3GBj7FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:1a:1c:a0:c0:a6:69:c4:5c:ef:66:43:ef:08:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753cff430f7f1751e697bb30f87fef397cc17fa6
Validity
Not Before: Jul 27 01:01:24 2025 GMT
Not After : Jul 28 01:01:24 2025 GMT
Subject: CN=69b5f1c2d3513ffbf397ca90fc0892b22ff1e6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:7a:76:fc:04:2c:2f:dc:64:3f:0e:88:13:
54:74:f8:06:22:80:89:fe:83:b9:18:26:e8:55:b6:
f0:78:65:9a:7a:c6:d6:1d:9b:83:75:7e:cd:21:82:
e7:4b:12:4b:c4:86:33:cb:9b:40:9d:58:6d:b1:96:
36:32:1a:41:78:4e:a3:e5:83:e9:be:d1:91:5b:fa:
84:2c:69:cd:9a:da:0f:af:eb:59:bf:31:11:2a:d1:
3e:70:6d:75:fc:8c:57:0d:44:3e:c6:d8:47:fd:45:
80:64:51:43:4f:a3:20:ee:69:2b:43:ee:17:a8:82:
65:64:e7:d1:14:2d:9a:8a:ed:bf:b9:63:1b:a2:db:
56:01:8e:0c:40:eb:b4:cb:c0:98:27:1e:9c:ef:41:
0e:62:15:61:54:85:4f:36:0d:a8:00:87:2c:74:f6:
e9:cd:d7:7a:75:bb:35:a6:39:9d:0c:db:68:8d:25:
a0:25:2c:c5:63:26:2e:9d:73:1b:96:fc:33:b7:86:
ef:05:8d:bc:50:98:02:f7:e4:d7:08:4a:54:5b:b1:
f6:fe:57:68:38:51:3a:52:8e:15:dc:cc:4d:c9:54:
63:97:40:72:6e:37:01:b7:03:5a:23:9c:62:5b:28:
01:91:39:c1:36:4c:82:25:bf:f7:6e:48:f8:1f:cf:
f2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B5:F1:C2:D3:51:3F:FB:F3:97:CA:90:FC:08:92:B2:2F:F1:E6:DA
X509v3 Authority Key Identifier:
keyid:75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5b:ac:7b:c8:79:51:b3:89:d7:a0:6d:08:e6:0c:6a:36:ff:
da:3a:fc:fc:30:45:ff:6c:9f:ae:a2:4e:7e:d6:61:80:c7:6e:
59:a3:73:66:b7:ce:56:bb:6b:21:4d:67:20:e1:27:c7:00:d8:
31:25:26:2b:29:86:62:d4:22:a0:d4:c4:12:b0:74:60:37:4a:
26:2e:a3:6d:9b:28:74:1b:70:0e:e4:8f:d0:70:e3:6d:78:05:
47:17:f1:cb:c2:a0:15:b4:70:f5:00:1f:45:c5:f8:34:56:6a:
f7:c1:fd:92:9c:76:69:92:22:cb:b6:92:23:a4:98:e9:ad:a8:
a3:7a:81:5a:57:b1:6c:ae:91:68:8d:a2:d9:bc:30:27:0a:80:
85:07:0c:91:27:68:fb:b7:27:06:e4:f7:f9:60:f7:7e:29:56:
ce:7d:2f:91:f0:ce:7a:26:e1:c8:a9:ef:d1:b4:69:39:cb:b7:
c6:aa:cd:4e:e2:3f:b9:81:12:15:f1:70:4b:57:e3:cc:a5:5e:
f8:e2:61:34:73:4a:50:a1:31:c7:1d:05:aa:4c:4a:60:c1:0a:
c5:01:b8:b7:c8:8d:a6:56:5a:3d:db:17:f8:6d:da:66:69:93:
e4:89:6f:1a:72:0e:5a:3b:77:55:28:30:f2:1b:f9:61:d4:90:
47:03:36:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:16 2025 by rpki-client