Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
File: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft (raw, json)
Hash identifier: G8nkWdEXlX+m8+Fg7MUYz3cepe3fAxE+CuigBErfALw=
Subject key identifier: CB:C9:F4:D2:91:7B:6F:52:F6:9B:9A:5A:DD:3F:48:39:DE:F1:30:22
Authority key identifier: 77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
Certificate issuer: /CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Certificate serial: 0199FC5887014AFED23CB49359AB41D5DDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
Manifest number: 13B1
Signing time: Sun 19 Oct 2025 12:01:24 +0000
Manifest this update: Sun 19 Oct 2025 12:01:24 +0000
Manifest next update: Mon 20 Oct 2025 12:01:24 +0000
Files and hashes: 1: Qv3hVGEIw5Ck_5QiJYApdipPmqI.roa (hash: C4rOq98XQlQBOJoaFTi64wzA4+qXQilqH0FLuH6cokY=)
2: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl (hash: Em30c0FOcHgXtvNw7F6q7g0pgzyYwJcTFruPf2dAsYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:87:01:4a:fe:d2:3c:b4:93:59:ab:41:d5:dd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Validity
Not Before: Oct 19 12:01:24 2025 GMT
Not After : Oct 20 12:01:24 2025 GMT
Subject: CN=cbc9f4d2917b6f52f69b9a5add3f4839def13022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:e8:40:6a:d1:c9:60:4e:1b:c8:41:4f:a3:
10:c1:c6:26:d0:40:3b:8c:54:e0:80:67:df:83:50:
6d:71:65:d3:41:74:29:a0:5d:a1:83:1f:1b:14:a2:
16:d1:be:43:5c:de:e7:a8:74:a5:65:2f:6b:66:1d:
6b:b7:4e:89:fc:f5:c8:94:a7:41:ba:9e:ab:27:4e:
a1:dd:f7:3b:d6:01:af:fd:cc:7d:c7:dc:10:87:e6:
86:16:00:be:2f:ce:f4:81:7c:03:3d:ef:37:67:ce:
13:b7:0c:28:eb:24:aa:39:99:23:5f:99:f0:7d:9e:
ea:13:2a:06:ab:4e:4e:b6:fb:f4:6c:a8:5f:60:39:
f8:92:61:3e:0c:d2:b5:16:d2:61:26:50:0d:fd:25:
12:51:46:39:fb:ac:8b:6a:78:b6:91:70:03:66:e8:
be:01:5b:49:ed:aa:a4:9f:3c:87:1f:fc:0f:7b:df:
16:e2:0e:d8:86:d5:4d:3e:50:28:99:5b:74:8a:f7:
1d:34:91:2a:00:d3:80:10:a1:aa:c9:b1:d3:ce:79:
2d:52:b8:06:5b:8b:8e:db:1c:22:8c:49:f6:b3:f9:
dd:35:8a:7b:d6:ea:f6:b9:e1:c0:42:7a:23:f8:bc:
99:58:75:bf:30:0a:c7:f8:16:2c:82:1b:bf:e5:2a:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C9:F4:D2:91:7B:6F:52:F6:9B:9A:5A:DD:3F:48:39:DE:F1:30:22
X509v3 Authority Key Identifier:
keyid:77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:de:61:0f:c0:d3:cc:b8:8a:0f:9b:dd:f6:9b:4e:17:d0:d4:
be:9a:44:8b:94:48:8a:b2:e3:87:6d:75:bf:d1:f3:d4:24:c1:
d2:bc:d0:bc:4e:dd:c0:29:02:7c:c1:a9:ac:7d:6d:95:cf:3d:
bf:67:20:2f:90:06:aa:98:27:a5:8a:47:73:71:bf:29:83:58:
af:b6:08:17:d9:66:71:45:12:69:f9:96:98:5b:1b:08:78:eb:
45:25:a1:a7:56:89:29:59:81:e6:05:8c:fe:0a:9e:77:b5:11:
8f:ac:18:6a:45:45:6e:2f:ed:73:c9:71:2f:91:44:70:75:f5:
27:86:aa:10:69:69:a6:aa:51:02:ec:6f:cb:2a:62:0c:7c:dc:
b4:e4:56:61:00:9c:d6:d1:f3:52:c0:3d:79:25:43:b9:c8:3a:
ed:f8:87:24:a3:c7:7b:66:98:ca:93:c8:7e:36:db:96:ed:7b:
4d:3e:d3:01:52:d8:13:1e:4d:c0:fb:1a:03:90:50:fe:31:a7:
b8:58:7b:16:7a:3d:f5:9c:0d:17:0a:84:f2:0b:95:e1:79:f2:
b2:62:70:58:11:92:f8:08:f3:29:a3:41:ce:0e:df:f5:1d:6a:
0f:7d:08:4c:91:fb:55:8a:f0:c2:fa:8f:5f:6a:13:be:61:4b:
c7:5e:d6:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WIcBSv7SPLSTWatB1d3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzFiNjJiMGUxNTliYTZjY2Q4N2Y3MzI3NWE4NjhlYmNj
NDFhYjgwHhcNMjUxMDE5MTIwMTI0WhcNMjUxMDIwMTIwMTI0WjAzMTEwLwYDVQQD
EyhjYmM5ZjRkMjkxN2I2ZjUyZjY5YjlhNWFkZDNmNDgzOWRlZjEzMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5PoQGrRyWBOG8hBT6MQwcYm0EA7
jFTggGffg1BtcWXTQXQpoF2hgx8bFKIW0b5DXN7nqHSlZS9rZh1rt06J/PXIlKdB
up6rJ06h3fc71gGv/cx9x9wQh+aGFgC+L870gXwDPe83Z84Ttwwo6ySqOZkjX5nw
fZ7qEyoGq05Otvv0bKhfYDn4kmE+DNK1FtJhJlAN/SUSUUY5+6yLani2kXADZui+
AVtJ7aqknzyHH/wPe98W4g7YhtVNPlAomVt0ivcdNJEqANOAEKGqybHTznktUrgG
W4uO2xwijEn2s/ndNYp71ur2ueHAQnoj+LyZWHW/MArH+BYsghu/5SrX7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvJ9NKRe29S9puaWt0/SDne8TAiMB8GA1UdIwQY
MBaAFHcxtisOFZumzNh/cydaho68xBq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZWZjZTAtODJlZS00M2NlLThmMjgt
NmJmYzMzNTAxNDc5LzEvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZWZjZTAtODJlZS00M2NlLThmMjgtNmJmYzMzNTAxNDc5
LzEvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEt5hD8DT
zLiKD5vd9ptOF9DUvppEi5RIirLjh211v9Hz1CTB0rzQvE7dwCkCfMGprH1tlc89
v2cgL5AGqpgnpYpHc3G/KYNYr7YIF9lmcUUSafmWmFsbCHjrRSWhp1aJKVmB5gWM
/gqed7URj6wYakVFbi/tc8lxL5FEcHX1J4aqEGlppqpRAuxvyypiDHzctORWYQCc
1tHzUsA9eSVDucg67fiHJKPHe2aYypPIfjbblu17TT7TAVLYEx5NwPsaA5BQ/jGn
uFh7Fno99ZwNFwqE8guV4XnysmJwWBGS+AjzKaNBzg7f9R1qD30ITJH7VYrwwvqP
X2oTvmFLx17WlA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:32 2025 by rpki-client