Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: nl48klFAMa+R9V5xs0TUioR6FxY0W4hTVutDPtDrGXM=
Subject key identifier: 53:A1:B2:07:7B:E4:EA:46:E4:38:98:C4:BD:0C:4A:29:0B:AF:6F:DA
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 019A71B8EF31F1ED7651B760954A272CDE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 169C
Signing time: Tue 11 Nov 2025 07:02:16 +0000
Manifest this update: Tue 11 Nov 2025 07:02:16 +0000
Manifest next update: Wed 12 Nov 2025 07:02:16 +0000
Files and hashes: 1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: WTDKA6Jl49OKJCgtqufwKQAHrtBoxIc1QMp0CqYXOYM=)
3: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (hash: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ef:31:f1:ed:76:51:b7:60:95:4a:27:2c:de:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Nov 11 07:02:16 2025 GMT
Not After : Nov 12 07:02:16 2025 GMT
Subject: CN=53a1b2077be4ea46e43898c4bd0c4a290baf6fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:f1:71:96:b0:c8:f0:cf:23:9a:b5:1d:15:
9c:11:4c:54:fa:97:78:12:a0:4a:99:4b:05:90:50:
e3:03:1b:a5:68:4c:73:d9:48:31:1a:b1:49:36:b1:
a6:8a:96:2c:6d:9f:97:38:33:41:88:ca:91:37:fb:
ef:56:0e:79:72:a6:64:88:ed:ed:6f:d9:50:11:73:
d8:a1:d2:ee:60:b7:20:1a:a8:f6:bc:80:21:a7:2e:
d1:f0:44:f1:67:68:82:ca:23:fe:96:eb:86:83:92:
eb:6d:42:a8:75:15:31:19:1e:bb:6f:49:5d:63:6a:
d5:9e:84:ff:bc:d2:63:ac:9e:46:4e:a0:8b:a1:28:
0d:e3:b5:ee:2f:ff:37:88:4f:03:c1:20:bb:94:80:
88:e4:b5:29:e1:48:40:0f:b1:15:da:1f:8b:16:a2:
12:de:aa:55:7a:0b:5c:7b:0c:11:7d:c2:dc:5e:c2:
70:11:10:f4:ca:ef:b3:ea:fb:cd:d8:88:ce:71:d8:
fd:b3:72:91:55:28:bb:25:3f:72:30:84:0c:ce:b2:
bf:95:11:43:02:29:4f:2b:05:4b:a3:8f:df:60:a8:
61:cc:f9:67:d9:9d:25:1c:13:49:2b:38:2e:74:59:
eb:ad:3b:78:19:d0:a2:52:ab:e6:36:c3:5d:3d:ad:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A1:B2:07:7B:E4:EA:46:E4:38:98:C4:BD:0C:4A:29:0B:AF:6F:DA
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:af:3f:3f:2a:b0:d1:3b:62:cb:a8:a6:cb:99:8a:d9:d5:8a:
60:b0:0f:e1:ae:aa:c7:30:39:ce:cd:b2:db:1b:e1:3a:57:07:
8a:e6:cd:6f:61:0f:78:97:99:6e:ac:ef:06:24:9b:91:28:b2:
11:60:ad:10:5d:41:a4:33:3a:12:5b:2d:c4:8f:f3:6b:ef:45:
1d:dd:bf:53:bc:17:f2:a2:fc:77:a0:ec:9c:14:fb:e6:bd:c4:
09:4c:03:95:5a:4b:3b:02:ec:79:c4:fd:8e:c1:24:81:fc:f9:
d7:3e:f7:14:79:63:a9:af:bc:19:c6:c9:2d:56:1e:8f:23:f4:
51:0d:c4:5e:23:c5:9e:03:c3:92:06:5d:8d:ac:b1:0d:29:6b:
8b:6b:1b:0e:38:c5:d3:76:c9:d3:91:a2:e3:36:80:49:a9:c5:
51:bc:7e:a9:06:94:eb:e3:98:d2:f7:ad:1a:5a:45:8c:8f:f2:
17:6e:4a:85:d6:0f:80:39:3f:b0:6a:8b:69:cf:44:18:ca:2a:
32:58:3c:54:2b:d6:eb:82:34:3e:e7:ac:a3:9f:1d:16:75:a7:
46:ef:40:0e:f3:b4:13:5c:db:c3:9d:e7:00:3e:37:d9:10:75:
59:8a:31:9b:86:ca:f2:85:e2:61:73:46:ef:3f:d7:6b:3c:79:
02:18:26:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:46 2025 by rpki-client