Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: LwfO0g976wmwSd6ErahKPKfLG+waYXw6y9eK6vMKEaQ=
Subject key identifier: 12:9C:83:28:8A:44:47:3D:35:60:AA:38:10:4B:5A:4A:F7:C7:59:CA
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 019753EB71CAB60BD76CE4A3A055B109CEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 14FF
Signing time: Mon 09 Jun 2025 09:00:28 +0000
Manifest this update: Mon 09 Jun 2025 09:00:28 +0000
Manifest next update: Tue 10 Jun 2025 09:00:28 +0000
Files and hashes: 1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: M7ndaAIr2ibbqoMpLd+n2cnQfjpnSkKKKLlQ4iVgqjE=)
3: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (hash: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:71:ca:b6:0b:d7:6c:e4:a3:a0:55:b1:09:ce:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Jun 9 09:00:28 2025 GMT
Not After : Jun 10 09:00:28 2025 GMT
Subject: CN=129c83288a44473d3560aa38104b5a4af7c759ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:23:20:be:bd:d4:f7:76:b4:d9:cf:80:fa:
3c:e1:e0:9e:f3:38:97:19:eb:2a:83:0c:fd:40:69:
f1:3a:0c:80:d8:f7:1f:dc:af:07:02:26:70:16:99:
f6:8a:e8:0b:94:a6:32:82:a1:e7:97:a2:df:66:96:
3c:86:f0:f7:f4:27:8c:52:60:b9:20:e0:78:99:12:
c3:e4:8b:79:d9:bb:06:4f:f7:b1:94:ad:4f:97:ac:
3c:05:69:4f:ea:ea:d3:23:b9:92:8f:f0:91:41:f1:
ee:88:50:3a:c5:33:85:24:9d:e8:2d:d2:03:0f:82:
08:b2:46:4e:da:d2:49:f7:16:dc:c4:16:53:22:e2:
e1:a4:f1:10:59:43:33:16:7c:fc:c9:d0:10:9a:1d:
da:5e:68:0e:51:97:71:da:b8:6e:de:14:ca:51:f1:
08:1e:b7:57:b9:dc:7a:5a:ea:4b:f4:4b:28:c3:82:
8b:0a:8f:fd:06:e5:82:ee:a0:ee:54:78:68:8c:7b:
0e:d3:79:72:8b:f7:22:a9:e7:c4:da:61:66:25:31:
2d:f4:91:21:ab:47:4f:ba:5e:da:2f:29:cb:b8:84:
e8:41:c6:56:f5:38:dc:07:a4:66:dd:f3:a1:82:ad:
10:5a:5a:e3:cc:13:8f:77:5b:4d:07:04:b4:b0:09:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9C:83:28:8A:44:47:3D:35:60:AA:38:10:4B:5A:4A:F7:C7:59:CA
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c2:e7:41:0f:c3:80:a6:8f:46:c4:75:fc:ef:55:a9:18:41:
45:d3:17:a1:a3:0e:00:33:71:d2:fc:c1:be:b3:8c:8a:d8:58:
6c:9b:48:e2:fb:55:ec:d9:e2:12:7b:a1:cc:51:d9:8e:69:db:
50:22:da:fb:24:42:61:86:db:8e:98:d7:af:cc:20:6c:11:f9:
48:cf:fd:d4:bc:2b:1d:a3:74:db:69:65:ae:85:49:c9:20:e2:
ae:34:7f:59:ff:40:15:4c:89:e5:9f:2b:01:9b:85:16:03:c4:
e9:13:8f:42:08:7a:74:9c:a0:c7:18:61:8b:2b:09:0f:58:f1:
41:fe:98:40:ed:99:87:37:5c:67:42:1e:14:88:56:ed:16:1c:
3a:5c:e2:23:83:6d:23:0a:51:e6:52:54:ae:d5:a1:86:eb:ef:
47:49:e8:91:f0:bb:24:30:79:a3:95:87:32:93:00:34:2b:80:
73:bc:44:ae:09:60:ec:e9:04:c3:0c:6e:1b:bf:4a:3d:33:92:
65:68:5d:19:48:2c:00:c4:fe:ed:01:d1:fa:50:31:15:09:e3:
aa:8f:b8:bd:a1:56:71:e3:8c:7f:be:16:e8:88:c8:68:0f:6d:
89:e9:ba:5a:56:f6:93:0c:2c:ab:a7:29:d0:6e:52:fb:53:12:
4b:32:36:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:40:54 2025 by rpki-client