Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: DM8J21Dz5G7btEOjMKSn9dNdzmsrGoDd0jHI+o10t+k=
Subject key identifier: 8C:DF:F4:FC:E4:AD:EA:1F:E1:DC:3B:06:14:92:90:28:71:88:1F:AD
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 01984B545AC781E224150133359FD82E242B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 073A
Signing time: Sun 27 Jul 2025 10:01:16 +0000
Manifest this update: Sun 27 Jul 2025 10:01:16 +0000
Manifest next update: Mon 28 Jul 2025 10:01:16 +0000
Files and hashes: 1: Dtmeeo2Ahqu20IUfCd65FxwTl2k.roa (hash: I+vjjlJcdrLb3KMRUhvwUitmKXx1JxbgC5EfsL3L6hI=)
2: MA5FazDAuWizu2sArINAiZDNSkk.roa (hash: RRjoWKPkJksBjTPCtL+V2nNMKG6oIx2+O6vH374Aw7I=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: gNgyLPlb0D8TPR9sqOGFZll1Wp+6pDHMo6OfSCzdsT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:5a:c7:81:e2:24:15:01:33:35:9f:d8:2e:24:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Jul 27 10:01:16 2025 GMT
Not After : Jul 28 10:01:16 2025 GMT
Subject: CN=8cdff4fce4adea1fe1dc3b061492902871881fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:d5:bb:09:de:99:91:ef:8a:19:3f:22:f0:
27:56:79:78:b9:23:7a:fc:fb:60:76:29:2d:12:7e:
ac:5d:c6:09:01:36:e2:99:97:72:34:b5:97:f4:1e:
fe:ab:fb:ae:f6:64:ed:02:53:ea:ed:cd:8a:4d:64:
5d:b8:d5:4f:13:3f:9c:60:fc:c8:3b:d3:68:be:d5:
b1:6e:99:c1:97:33:a0:ba:e8:13:54:8b:b3:a3:f8:
70:9c:e2:c3:bc:05:fe:6d:60:91:12:cf:55:c4:82:
3a:d1:c1:38:aa:8f:87:f0:8a:9f:99:47:d0:85:51:
93:26:a2:ce:34:07:13:76:93:b7:9e:f2:c8:72:c9:
fd:26:a0:1f:c3:d5:95:23:b7:9f:2d:31:4e:87:55:
65:6b:00:f7:37:63:f0:c8:e2:11:ea:12:16:37:a2:
7c:93:83:c6:0d:13:16:9c:25:72:1c:79:35:cb:90:
0f:9d:fb:cf:da:23:81:8a:79:f5:76:14:97:01:ac:
77:72:44:a7:ee:26:a7:87:9e:a9:20:66:3a:b7:f9:
6b:39:88:25:f3:9e:8a:26:5d:8e:12:88:05:d5:44:
7a:b3:fe:34:b6:64:cf:b4:ad:26:37:1c:5a:b3:ea:
1f:73:9a:cd:e8:1e:20:2c:a7:9f:d2:07:6f:a8:d7:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DF:F4:FC:E4:AD:EA:1F:E1:DC:3B:06:14:92:90:28:71:88:1F:AD
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c0:a1:e6:4b:61:6f:dd:9b:4c:fc:6d:76:1d:1c:53:8b:7a:
bd:9e:fa:3b:c9:4f:99:d4:c5:65:3d:33:9b:74:bf:44:b3:c6:
92:a1:b4:7d:2a:40:bc:ee:61:be:b9:17:06:02:2b:1d:e1:9c:
ac:71:cc:97:06:7f:f4:19:c0:73:d3:87:e5:ef:ec:44:54:1a:
c1:99:f6:5d:07:9e:9f:44:ee:c4:d5:99:95:e8:f9:28:af:2d:
dc:23:d0:6e:56:bd:a4:28:14:70:b6:7d:88:9b:61:45:8c:e2:
e3:c1:8c:38:8a:e7:04:28:ce:69:2e:4e:d2:97:88:10:8f:3d:
2f:03:e6:7f:02:4a:27:34:49:11:99:a7:db:cc:c1:ec:c8:a4:
8a:e1:6d:dc:a6:fd:ca:93:3e:eb:01:c3:90:57:b9:99:28:95:
37:ac:b8:48:b5:fc:48:90:de:3f:69:c8:33:f8:e2:f2:4c:e9:
01:0a:1f:fb:2d:72:2f:39:35:4e:c6:1a:36:76:9c:25:45:5f:
af:cc:13:1f:21:f6:aa:48:72:03:5b:75:0a:f7:63:51:25:bf:
7b:33:3b:c1:12:30:59:52:fb:07:3b:b3:49:81:30:43:70:79:
cf:1a:a2:03:84:b2:49:c9:d5:ea:74:56:36:ae:6d:dc:ee:fb:
f6:21:d5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:21:24 2025 by rpki-client