Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: I9T7lYMYi4nu43b1ca4aBOE/vJxIw6IRVwqfwJb+VQY=
Subject key identifier: 45:89:45:AC:BE:30:F0:9F:63:54:04:26:70:D9:C3:34:B1:73:86:51
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 01993ACCA5A6CCD6B01CEDFEF27E7DE1982B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 15FB
Signing time: Thu 11 Sep 2025 22:01:54 +0000
Manifest this update: Thu 11 Sep 2025 22:01:54 +0000
Manifest next update: Fri 12 Sep 2025 22:01:54 +0000
Files and hashes: 1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: 7A70Ad1EyUVZG7Amz6E6eejQZBw1R1nK7AucsqFBfL8=)
3: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (hash: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:cc:a5:a6:cc:d6:b0:1c:ed:fe:f2:7e:7d:e1:98:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Sep 11 22:01:54 2025 GMT
Not After : Sep 12 22:01:54 2025 GMT
Subject: CN=458945acbe30f09f6354042670d9c334b1738651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:94:eb:15:6e:9d:4d:30:79:44:74:f1:bf:
f6:20:44:b6:41:bb:27:17:1c:83:cf:5d:b5:a1:e6:
b0:e6:d7:65:59:ec:41:ad:a6:92:c0:f6:9a:8f:4e:
97:95:b4:47:d4:e0:27:c7:32:e7:1f:c2:00:38:b2:
b0:5b:f5:99:d7:5a:a7:f0:99:d5:18:f0:d6:69:66:
e9:85:b6:08:b9:25:c8:3f:1e:9d:f5:15:d2:53:4b:
7d:dd:be:b7:6d:c5:a4:b8:9f:d6:76:bf:42:f7:49:
16:58:e3:6d:75:70:dd:ca:51:d4:aa:8f:24:1d:4d:
5e:e0:c8:38:2a:55:63:75:02:5f:82:96:1d:bd:04:
bd:3d:bc:40:0d:a2:85:d1:9d:71:bb:d2:54:8c:df:
bf:3a:87:93:7e:26:dd:c7:19:cc:14:5b:c3:4a:2d:
34:15:97:45:0c:e0:85:0e:63:bc:cd:26:e1:97:b0:
b7:81:d8:14:f5:a4:be:37:2d:40:f0:10:27:24:a5:
5b:93:4f:74:c6:cd:1e:83:2c:5d:78:37:51:1e:c7:
68:f3:12:e1:ee:bc:91:28:7d:0e:e0:8b:9a:50:d5:
b7:08:65:e3:43:19:bc:7e:43:95:b2:f4:8f:05:12:
f2:ee:fd:27:74:4d:d8:be:2c:66:9b:b0:71:32:9b:
99:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:89:45:AC:BE:30:F0:9F:63:54:04:26:70:D9:C3:34:B1:73:86:51
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8c:f7:82:2b:a2:17:80:21:05:90:9b:0b:12:51:a9:cd:4d:
c1:cd:3c:a7:13:3c:b1:98:19:41:fb:bf:67:93:6d:0c:28:f4:
47:d7:43:ee:16:6c:02:1a:9a:c1:91:1f:a4:e3:02:ce:03:5b:
9d:17:e6:c3:a7:b1:e6:d0:3c:a7:63:7c:47:90:9a:80:a9:15:
ac:18:cb:7c:af:21:ba:01:b6:fd:aa:7d:1a:c3:b8:db:f3:c6:
eb:11:08:ef:ca:47:4f:91:2d:42:12:c4:09:3b:7a:92:4d:35:
b3:9b:f2:f3:47:84:c5:29:f1:be:e5:64:fe:b4:57:93:42:97:
ac:15:e2:9b:cc:d7:8b:db:4b:43:ed:74:02:4f:45:db:43:a0:
3d:df:b7:55:70:d3:48:17:eb:34:99:d2:31:e7:e5:ed:c6:08:
43:b9:3b:c8:85:3d:cb:6a:f0:1d:55:f6:fe:a9:53:1c:dd:50:
96:74:84:0b:6f:db:ce:73:ee:0a:0d:5e:78:63:d6:32:29:7a:
15:1c:d9:34:be:03:58:7f:b9:f1:d4:98:93:2f:50:d4:f6:83:
0a:2d:6c:3e:25:c1:d3:ec:97:79:93:95:f0:3e:88:4c:ee:b3:
44:80:63:ae:3e:8e:de:d0:f2:52:b0:f0:f9:7d:03:f9:65:0e:
c0:68:00:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 23:37:59 2025 by rpki-client