Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json)
Hash identifier: mG7Kkja8Zq2I9rl3oSpWtbacD04mJ7QzUHfmug3cbqQ=
Subject key identifier: 22:EF:18:07:01:AC:7A:7E:C7:7C:C1:8B:3A:DA:03:0D:26:A5:EB:C7
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 019A70DC30476DC42B24F283C65B524470D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
Manifest number: 11EA
Signing time: Tue 11 Nov 2025 03:01:09 +0000
Manifest this update: Tue 11 Nov 2025 03:01:09 +0000
Manifest next update: Wed 12 Nov 2025 03:01:09 +0000
Files and hashes: 1: IqOWD9aJ14QW67iQSHAr_IsG4xE.roa (hash: w3ZVvZLPlnQKzQOQmLMJRlyI3uHeVIilgUta/ectFxM=)
2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: iSR13B8RzUO6LNHoqwY/UcU9pI+26tWwju+CZsFYnbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:30:47:6d:c4:2b:24:f2:83:c6:5b:52:44:70:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Nov 11 03:01:09 2025 GMT
Not After : Nov 12 03:01:09 2025 GMT
Subject: CN=22ef180701ac7a7ec77cc18b3ada030d26a5ebc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:46:02:ab:53:85:1c:eb:7e:09:14:80:9d:
46:f8:91:b5:01:5c:3c:59:89:83:d9:a3:28:f5:0b:
3a:9e:ae:ca:2c:59:82:9f:d3:7e:65:1b:e9:0a:ec:
17:1e:ee:85:7d:70:73:52:b7:2e:d7:54:dc:4e:93:
06:86:89:f9:29:14:cb:cf:d6:96:bf:81:08:49:ff:
0c:5c:bf:9e:ee:af:11:1b:6a:7f:8e:b9:26:aa:6f:
c6:d4:df:3a:1b:17:c8:07:2e:45:ba:29:19:90:67:
5e:28:a0:13:9b:d7:aa:54:b5:2e:3c:8c:e6:d2:62:
5d:6f:5e:45:db:91:f5:09:0c:e6:82:7e:d9:bf:a6:
cc:54:b6:17:8b:2d:73:e4:d3:ad:fd:31:66:e9:5d:
6f:b6:77:40:61:da:c1:ba:b3:14:0c:7c:2e:76:b0:
38:7b:89:47:b2:11:0b:27:e3:e2:6f:36:1f:89:71:
14:fb:7e:cd:76:13:c0:22:a2:f5:38:d2:37:2a:0c:
f4:db:f7:c0:bf:41:32:bc:7b:af:ee:36:49:49:82:
82:12:ff:3e:4a:45:6f:0c:87:a0:d7:c2:4f:87:d3:
32:3e:db:d8:f9:7a:73:dd:a2:7c:cf:14:0a:a5:b1:
aa:a4:23:28:7e:34:c4:ee:d3:b4:01:b8:d0:66:79:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EF:18:07:01:AC:7A:7E:C7:7C:C1:8B:3A:DA:03:0D:26:A5:EB:C7
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:37:ac:2f:73:64:f4:1f:4c:b8:c6:63:b3:05:72:70:cf:e9:
8b:e9:2f:2b:0f:14:82:dd:5d:65:ed:99:36:1d:9c:7d:0f:08:
ef:f8:36:70:f8:c3:1e:90:3f:2c:57:c7:e7:65:5a:03:9e:48:
a2:b0:14:f0:63:65:c1:ec:3d:cc:c6:e1:a9:4e:98:7d:d3:b2:
66:6e:78:81:42:fa:82:e8:e4:24:8b:d5:b0:e9:d7:43:3d:1c:
68:9f:59:45:20:dd:30:5e:52:69:69:89:2d:d8:8b:61:54:8b:
60:50:f3:65:32:6e:31:4c:a6:1b:de:20:65:58:4e:4a:80:e5:
a1:4f:8e:e2:d0:53:f9:2b:46:95:2b:94:e5:03:7e:1c:a0:67:
bb:47:69:9b:35:dd:d9:68:90:83:d3:90:99:33:86:6d:05:ce:
02:5c:91:b7:d0:93:0d:31:03:fb:ca:42:97:8d:f9:0e:3f:82:
a9:f0:ad:c8:ad:bb:43:48:f8:2c:73:e1:4e:71:f8:dd:48:15:
84:09:92:b8:24:e9:d1:15:a0:2e:27:57:ac:6f:56:ec:db:12:
36:e9:bc:f1:d0:94:ed:25:bf:07:e5:a5:fa:4c:38:2b:d3:25:
4b:b2:d8:b7:83:95:69:af:50:fa:7a:7e:49:d8:a3:cb:8e:22:
cd:6b:cd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:28 2025 by rpki-client