Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft (raw, json)
Hash identifier: iEhdLN5ObHRQhDuVQg5HkzYy+ZBKp0PIw5PZUHdfgb0=
Subject key identifier: F5:2E:D0:64:17:68:B2:45:BC:58:EF:2A:81:FE:3B:DE:49:51:8B:CB
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 01984399DF4163F2B6DAA6AB65CD22F0AA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
Manifest number: 1602
Signing time: Fri 25 Jul 2025 22:00:14 +0000
Manifest this update: Fri 25 Jul 2025 22:00:14 +0000
Manifest next update: Sat 26 Jul 2025 22:00:14 +0000
Files and hashes: 1: 8lBoSilDtW0ItY1m1FNkzFR9g7g.roa (hash: eMaeIeeNpB0IKHLHfs7pADlpK9Gp8r9cF63rKmEO7/4=)
2: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl (hash: z+uf/EsCnll7ViMZBFsRjjj0RO4nsbXBrEzoIBGqFLw=)
3: vijarIUYgiNYSjUBEIP4lkhLgNI.roa (hash: 2GV5AIMYaF2M+jJbsLpgLW6R69LfUwGZ1/GjUEqVegk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:99:df:41:63:f2:b6:da:a6:ab:65:cd:22:f0:aa:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Jul 25 22:00:14 2025 GMT
Not After : Jul 26 22:00:14 2025 GMT
Subject: CN=f52ed0641768b245bc58ef2a81fe3bde49518bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:78:53:00:5e:2c:78:f4:ff:38:51:9e:ca:
84:bc:5e:4e:96:79:a0:f4:ec:0e:49:3c:52:c5:67:
2f:4d:89:3a:5a:b6:82:66:e7:b1:31:99:f9:6c:d3:
ad:32:e3:81:05:63:4c:73:ee:2d:53:40:53:43:c7:
03:0a:f7:4a:67:88:ee:cb:f3:2d:d0:6b:21:d8:f9:
f9:6e:69:4c:22:46:ba:e1:3f:62:67:ba:64:85:c5:
05:1e:29:2d:7c:6b:38:7e:bd:f2:27:37:3e:76:29:
19:ca:d9:74:ea:5b:52:20:c5:14:9a:50:c2:7e:9b:
91:0e:cc:1f:1a:3d:7b:ff:00:60:d7:ea:c7:ab:4f:
6b:cd:1e:71:2d:cf:6e:e3:c5:37:96:a8:0c:18:ad:
20:50:85:10:a4:3c:b2:37:30:74:cf:0f:59:6b:45:
40:5a:50:1b:c8:a2:cd:69:62:44:d4:d4:40:9e:ed:
e7:e7:4b:75:b3:db:a5:62:60:2f:e6:24:3f:8c:c4:
31:26:1f:cd:37:55:d0:1b:9e:ff:63:9d:32:74:72:
39:3c:a2:a5:4f:b8:1a:e0:90:59:c9:38:3d:b9:34:
15:3e:76:79:01:48:0d:12:4a:05:2d:fb:f1:01:72:
2b:56:e5:3f:9f:4a:25:06:73:ee:5e:96:a7:bc:b4:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2E:D0:64:17:68:B2:45:BC:58:EF:2A:81:FE:3B:DE:49:51:8B:CB
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e9:b1:91:73:30:ee:e4:8a:c8:18:46:14:14:f3:3b:47:0e:
00:88:f4:37:9d:35:b2:ca:08:a0:23:f6:9c:16:af:43:23:64:
75:5d:4a:cb:b9:fa:29:13:10:91:dc:3b:03:09:df:a5:d8:20:
64:98:62:1c:25:d6:0f:c4:86:14:83:4d:c0:c0:bc:c5:54:a9:
8f:0e:2a:46:b5:cc:7d:7c:25:da:0a:3f:7b:a4:1d:3e:c9:67:
19:90:cf:5c:f9:8c:8f:ed:07:7f:5c:eb:8a:39:28:f7:4b:79:
29:38:5c:64:a8:94:09:04:ec:5d:3a:d3:5c:4f:eb:20:cf:d5:
f5:6b:86:a8:5d:9c:04:4d:05:c8:b3:3a:ac:42:a7:c7:ec:0e:
be:d8:63:ba:e7:bd:4e:69:0c:a1:d9:d6:35:e6:af:33:10:97:
2c:5f:cf:04:bb:5f:88:21:99:fb:45:9b:6b:93:aa:ba:c0:ed:
2b:ce:a5:5b:9d:02:95:8a:2a:ee:0a:45:2d:f6:e4:ec:9e:00:
a0:99:e9:79:45:31:32:f9:a5:25:4e:bf:0f:85:62:09:f2:6c:
de:24:41:3e:ec:a8:20:88:84:ac:0e:94:33:6f:55:0d:66:9d:
f4:ee:a1:0a:23:14:66:75:24:ed:a7:36:bf:c8:17:02:10:d4:
09:ea:51:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:03:01 2025 by rpki-client