Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json)
Hash identifier: mLAhlPG6+B3qKnyPq7sh66ECRyr9PcxaVWQTDHIV9cE=
Subject key identifier: 6B:CC:54:47:D5:13:68:FB:6B:72:3B:F4:E9:08:05:55:BD:BB:89:27
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 01974B1F21356D3382EC202C8A42D85E8A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
Manifest number: 1048
Signing time: Sat 07 Jun 2025 16:00:20 +0000
Manifest this update: Sat 07 Jun 2025 16:00:20 +0000
Manifest next update: Sun 08 Jun 2025 16:00:20 +0000
Files and hashes: 1: WntehPztUAsCnfsYWJyPGRUsUHM.roa (hash: 5/L8DbJ4CG3bN8z8g844cMQvNk+i0ElV2AgHgE9q718=)
2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: 7czLIq5wh3Ds5eNaS3BrtI9IxQDP4tkbAD4ZkCtZX+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:21:35:6d:33:82:ec:20:2c:8a:42:d8:5e:8a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Jun 7 16:00:20 2025 GMT
Not After : Jun 8 16:00:20 2025 GMT
Subject: CN=6bcc5447d51368fb6b723bf4e9080555bdbb8927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:bd:4d:9b:5e:ba:9e:48:91:02:ea:0b:d2:
ed:41:8c:63:b7:f6:4f:ec:b0:75:fa:89:54:70:a0:
90:d5:25:1a:b5:a2:00:26:61:48:69:23:4c:b7:1e:
a7:63:55:00:a3:19:0e:0e:9e:13:dc:1b:32:87:05:
d8:ee:0f:81:ee:fa:42:45:72:19:47:52:49:9b:98:
2d:8a:7c:52:82:b9:af:c1:2b:20:ee:4e:13:c2:89:
03:a1:85:d6:36:25:03:a4:6e:43:70:ad:ef:8d:44:
94:4a:bc:c0:06:a4:03:65:9f:d7:e6:ff:01:fb:d0:
5d:86:d7:cd:8f:2a:33:94:3e:25:93:f0:c9:fe:4a:
46:91:16:53:69:6d:e8:a0:90:aa:59:cb:ae:71:d9:
29:73:fd:d8:a1:43:ed:5e:cd:01:1d:9a:80:18:5b:
a8:e6:85:2c:d5:ba:d7:93:1c:27:95:d5:d0:92:bc:
e1:f1:6a:f4:a5:a0:8d:7b:8d:fb:f4:80:96:5c:61:
52:db:90:e5:81:21:e3:6c:58:c0:19:81:a0:c6:b2:
2e:b9:a5:ac:56:d6:0d:04:c8:5a:67:73:0a:f3:12:
87:08:50:9e:4c:5c:52:d7:1c:05:a2:52:af:34:05:
eb:5e:bd:f5:1b:bb:20:26:cc:bd:6f:10:13:a8:52:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CC:54:47:D5:13:68:FB:6B:72:3B:F4:E9:08:05:55:BD:BB:89:27
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ec:1a:4b:0b:41:67:43:86:a6:02:72:3b:8c:66:75:34:a9:
16:6f:3c:e5:92:f3:c6:d1:61:ce:ad:b7:e2:ee:95:b8:a0:4c:
e4:6b:87:f9:a0:dd:96:ec:75:6a:6a:6d:7a:1c:bf:9b:b4:3f:
93:d6:0f:bb:14:f2:00:6e:b5:b3:82:02:6a:7c:92:96:4a:7e:
96:c4:76:c1:6b:a8:99:b4:96:20:9b:c4:e1:c5:2d:8b:5e:99:
51:33:74:d0:5c:7b:dc:b7:05:ec:71:94:ca:3b:8a:d9:24:1d:
58:28:7d:50:1d:cd:87:9e:be:d2:21:7a:1c:ae:85:13:6d:3a:
6b:c2:5f:45:13:a9:a5:0a:2c:46:f0:5f:0a:cd:7b:60:1f:90:
f7:07:1f:f7:8d:b2:1d:33:8d:9a:03:50:53:4c:a4:6b:df:e7:
21:ab:f0:46:62:22:74:04:60:a1:78:b1:47:c6:88:6e:72:7d:
94:c0:3e:cb:de:11:0f:49:ef:c5:7d:bc:8b:dd:93:9e:d0:c0:
20:bd:7b:b8:02:b2:1e:3b:65:f4:9e:5a:22:29:60:d5:2c:54:
38:d9:65:4f:02:bd:f7:ea:6e:5e:84:d2:95:31:2d:38:13:a8:
50:1a:c4:5f:11:53:4e:ab:8d:d3:05:0b:4a:e2:88:7d:26:47:
62:42:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:00:24 2025 by rpki-client