Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
File: DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json)
Hash identifier: vUatTXs9T5jJOXXbxZGeFCkX8X0dyVjiYjvw1nYSwYs=
Subject key identifier: 77:D4:A8:D3:7D:75:FF:87:B9:B6:F2:79:88:61:F6:6D:E9:53:85:34
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Certificate issuer: /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial: 019A7301181E0985E9B0AE1300CB3DCE8BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 13:00:42 +0000
Manifest this update: Tue 11 Nov 2025 13:00:42 +0000
Manifest next update: Wed 12 Nov 2025 13:00:42 +0000
Files and hashes: 1: 1-sk04SJKaJ6g1Y9khEpsLFas3Kk.roa (hash: XxZhRBWthERVmL3LKPQQh5B0868NCMjhs1tFs+3eMxM=)
2: 4QpvM3CE_nzBSqatuahpsYYH1qM.roa (hash: Qrg/EHEt9L0x/2vBVqdC/NUou31du+BoDTLXvsaFSGk=)
3: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: 1os3tLUpfUINEgtQGxF3SPyB2HphOxC0IGV63wJzAW0=)
4: OKvzKSdRprY6KmoCf5oHQIz_91A.roa (hash: c7CmyJe2kYuAmiLCH0rQuuU8EyGxHjQvlpZniPCLw0U=)
5: mHALm7hBq5s0140ybe8Xc1F8234.roa (hash: imdhLSNxS5EA5IBXEn3VpwdKjS6o+zDqUc/wlGF8Pzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:18:1e:09:85:e9:b0:ae:13:00:cb:3d:ce:8b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Validity
Not Before: Nov 11 13:00:42 2025 GMT
Not After : Nov 12 13:00:42 2025 GMT
Subject: CN=77d4a8d37d75ff87b9b6f2798861f66de9538534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:22:3e:26:db:97:6a:c2:78:8a:99:f9:23:
5a:71:04:e7:4d:c5:56:d5:b8:78:e8:6c:03:af:ce:
d3:c6:70:19:3b:57:68:8a:c8:38:f1:cb:6e:44:63:
0a:de:56:88:1e:bc:fd:73:74:ec:6e:34:0b:19:d2:
e5:26:9c:70:fd:9f:4d:42:75:1f:65:c7:1e:2d:bb:
b6:e3:ac:89:ac:d5:5e:19:95:71:01:b4:4b:86:25:
02:cf:ac:61:80:df:ee:73:1b:f3:e5:ca:74:c7:54:
2a:9b:2e:2c:d9:91:53:6e:ce:f1:84:11:67:64:f6:
ad:b8:8c:57:a3:61:e9:7a:e3:6b:4e:5f:d5:79:a1:
61:94:9b:1e:ea:bd:7c:f4:39:4a:8e:5c:78:4a:f9:
44:1d:df:09:be:68:80:47:da:67:98:cd:39:f7:58:
a5:f2:15:a7:a2:8e:48:74:2a:84:af:9a:32:76:83:
d0:b3:14:80:d5:96:e3:36:7b:6b:6d:a2:fb:68:b0:
dd:8f:b0:de:10:50:43:13:ba:e6:48:28:8d:58:87:
cc:26:0e:7d:b7:f6:fc:19:ac:cf:05:93:2b:ae:9a:
c8:c8:45:28:bf:0f:77:d5:60:b5:fc:ee:9d:d1:29:
dd:45:80:db:e0:0a:9c:9a:16:a7:7e:3a:8c:83:0c:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D4:A8:D3:7D:75:FF:87:B9:B6:F2:79:88:61:F6:6D:E9:53:85:34
X509v3 Authority Key Identifier:
keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:42:17:5c:9a:f7:7b:02:86:be:ed:58:e9:60:05:3e:0c:6d:
61:c7:ca:1a:d4:45:57:2a:71:16:31:de:13:67:25:e6:fd:a8:
29:94:ea:17:35:b2:02:12:af:61:87:24:c8:d3:8c:98:35:ed:
fd:1d:5e:b9:97:c1:61:e2:9e:73:ec:eb:8f:2e:ab:3a:9a:f3:
a3:cd:4f:fb:47:f0:62:dd:13:15:7f:8d:58:5a:40:32:11:db:
68:81:f3:9a:86:6a:40:57:2c:7f:20:e3:e5:b4:04:cc:ac:64:
33:48:2c:12:ac:ca:8a:0d:f5:82:c9:49:59:8b:0e:0b:c1:dc:
90:05:c5:2d:af:e7:c4:46:68:6a:6b:b5:7f:6a:a0:d0:31:4a:
59:da:ea:8f:64:95:ba:07:e6:2a:67:8d:e3:d9:fd:79:78:50:
ff:4b:95:f3:9e:25:cc:e3:71:ee:f4:ab:cc:58:78:66:66:79:
c5:3c:34:09:e6:3b:ea:af:00:6b:5d:82:0e:3e:9a:9f:05:10:
05:21:52:4d:21:e6:d8:1c:70:74:6f:a7:7b:de:6c:f9:64:3d:
37:3f:83:88:08:0c:77:be:09:46:d7:8b:8f:29:9d:3d:d8:25:
6a:78:a2:3f:1a:be:cc:73:e5:c5:29:a0:9d:87:9f:39:fb:3f:
51:80:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:54 2025 by rpki-client