Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: /04fYrkHh/Gidlz1zt/BcQ20rrA0gU5CXqEiFORbUkU=
Subject key identifier: 58:73:FF:31:EB:F5:E2:0D:C4:60:79:4D:85:0D:EC:97:0A:AF:66:33
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 0199221E35AE7AC171E67D3760139A798F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:29 +0000
Manifest this update: Sun 07 Sep 2025 03:00:29 +0000
Manifest next update: Mon 08 Sep 2025 03:00:29 +0000
Files and hashes: 1: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: 4nLVLf0pxl+TpsBJQc+gYSq7h5KqsDAZFNxty4iK+Tw=)
2: rMYX2ngJRfk9a7fGX1cc8xAfsos.roa (hash: zZBPIZevys4Y238DbVgB+9WvN4FdGE3xhipQLPtn3sg=)
3: z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa (hash: 0P2kU02ZAocYSBgE7zWtiaNGeOEg/Gg5PfdYqLhXNf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:35:ae:7a:c1:71:e6:7d:37:60:13:9a:79:8f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Sep 7 03:00:29 2025 GMT
Not After : Sep 8 03:00:29 2025 GMT
Subject: CN=5873ff31ebf5e20dc460794d850dec970aaf6633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:b1:68:a0:26:d7:bf:be:dd:0d:54:cb:0d:
0b:a4:18:48:ca:47:2a:7e:bc:a3:00:61:a2:fd:ac:
81:70:d9:11:2b:45:82:dd:9b:36:03:22:17:1e:6b:
3a:5a:08:9d:24:37:3b:94:31:fb:75:81:82:e9:6d:
b2:8e:ca:95:c8:97:5b:bf:a1:c8:86:be:fb:77:92:
be:69:73:63:88:fa:73:37:2a:cb:5d:ce:38:74:54:
2b:7d:b0:aa:d7:97:00:64:b5:6b:c3:1f:3e:0f:62:
9c:c3:39:9e:a4:2d:71:8d:4a:a8:04:a8:84:44:d5:
05:9d:7f:a9:24:ae:d2:e9:42:34:dd:33:16:d6:dc:
70:bf:2b:6e:ae:b4:06:b3:94:fa:b1:a6:72:9d:c0:
a9:98:44:b2:62:9e:6e:c9:e1:5d:70:78:66:48:d0:
78:54:f8:f6:44:45:b2:89:38:09:15:77:c1:6a:26:
ff:e6:e8:0b:af:69:18:8d:24:02:82:f3:fb:c3:03:
d6:8b:af:b4:e0:c1:17:99:e7:bf:a2:98:df:27:43:
30:81:af:44:13:14:5e:57:bc:9b:76:7b:8b:47:a3:
af:cf:85:7d:64:40:b8:a6:01:a9:15:1f:b8:5e:71:
68:d1:05:fb:ca:07:14:ba:6b:77:d8:ea:a7:5b:91:
eb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:73:FF:31:EB:F5:E2:0D:C4:60:79:4D:85:0D:EC:97:0A:AF:66:33
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:54:0c:03:3c:f5:9e:0a:b3:f4:71:a1:fe:d5:b4:f8:e6:77:
aa:07:6a:36:b0:fa:80:a7:bc:ee:5d:1c:08:4d:17:83:f4:0c:
21:a7:69:60:78:93:3b:ce:60:54:89:71:85:95:23:62:af:bd:
7a:70:61:d0:ed:80:95:15:b6:ed:17:df:c0:ea:99:ea:28:75:
3a:ab:14:01:90:9e:a2:fc:f3:ef:1e:13:3f:f7:0a:ef:3d:67:
1a:2d:9d:85:bb:af:5f:e1:3b:6b:6d:69:98:78:f6:33:38:6c:
17:da:7f:d8:64:66:04:63:1a:5b:65:98:33:bb:e1:a2:d9:50:
af:31:9a:a2:01:aa:5c:ca:5b:3d:41:0a:cc:2a:21:10:d7:0e:
26:40:f7:b1:fb:63:37:b2:05:71:1e:25:03:73:0d:c2:50:e8:
b1:be:10:df:e8:9a:a6:a5:64:1e:82:9f:81:41:c6:eb:72:e7:
a8:70:67:96:7f:f1:51:3b:f1:db:8d:13:85:ae:67:6d:8e:87:
41:ca:9b:eb:be:58:b7:8f:b3:80:fb:ce:b1:39:8f:09:fb:03:
83:e8:43:71:9f:1d:f2:3a:2d:6a:dd:04:88:7a:1d:b7:70:d3:
04:8f:67:7f:b1:c6:e0:77:0c:b5:81:4c:bd:aa:ed:11:c4:a9:
74:41:9e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:26 2025 by rpki-client