Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: Skfoa70WwpR9xlWkWO28Xs+iKkl/N1Dz18iFazTWSeA=
Subject key identifier: 32:25:76:C9:9E:56:A1:61:20:1C:40:C1:E7:F3:27:8C:E6:E5:FD:39
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 0198D65FBD030D28BFFA8DC5C9E39AC6005C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 0324
Signing time: Sat 23 Aug 2025 10:00:55 +0000
Manifest this update: Sat 23 Aug 2025 10:00:55 +0000
Manifest next update: Sun 24 Aug 2025 10:00:55 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: TvKZbFHcFw3tpmr5eJqUAjaEI1Rs86SO0XgMTUHyzNU=)
2: rtEx3Op6iiS7UiDW09qCJKnWeDg.roa (hash: 2wI3hDpLjlRGiKeHXtROGiZLVSVg2X+p2EcwYyyykiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:bd:03:0d:28:bf:fa:8d:c5:c9:e3:9a:c6:00:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Aug 23 10:00:55 2025 GMT
Not After : Aug 24 10:00:55 2025 GMT
Subject: CN=322576c99e56a161201c40c1e7f3278ce6e5fd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:47:4e:9a:49:9f:57:af:0c:2d:cd:7b:57:58:
bb:b3:15:72:ab:28:03:32:5d:83:53:5b:c5:7d:a8:
07:13:eb:63:df:e6:78:b3:f3:84:91:1f:8d:71:6f:
79:f9:91:5a:bc:48:34:f7:28:8b:e5:f4:86:42:4e:
a6:be:c3:e3:61:c8:93:ef:2c:08:14:a4:b9:b7:51:
ad:81:bc:60:c5:e0:0f:9d:1f:50:f2:3f:1b:23:21:
3a:90:d8:ea:31:47:37:1a:f3:e5:72:66:12:9c:ff:
36:20:3b:a1:66:23:57:d8:6e:61:80:1c:04:b4:cc:
f3:35:7e:e5:75:d4:9a:6b:4f:49:a7:1d:8f:cd:20:
fd:78:00:82:f0:ec:20:3b:b3:45:f8:04:c9:11:4d:
12:4d:8a:4c:a4:0c:e1:5f:3a:77:01:72:77:ff:b4:
31:e2:5e:40:9b:27:b1:77:1c:d2:e4:1e:7e:34:b1:
5a:81:2d:36:d9:a6:7f:c5:7e:42:72:8a:e5:d6:a9:
34:b9:c1:e3:ca:9c:d9:1a:10:c8:ab:db:1c:4c:59:
64:33:2a:22:2c:1f:b3:19:e5:47:bc:34:16:f4:aa:
15:50:2c:20:2c:15:36:84:fb:8e:a3:58:e3:90:1c:
99:1f:b0:ef:ff:d2:eb:89:a5:43:08:1e:da:16:9b:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:25:76:C9:9E:56:A1:61:20:1C:40:C1:E7:F3:27:8C:E6:E5:FD:39
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d5:cb:df:65:3b:73:40:fe:6f:69:b5:f5:28:5a:d8:30:34:
72:52:b6:ca:8e:65:a1:97:f1:90:d5:07:b5:79:30:5d:d9:0b:
f3:75:bd:01:44:35:61:cb:e6:f0:54:0b:f5:8f:96:4a:00:97:
46:14:f9:49:ec:c9:31:fd:a2:e4:71:ff:b0:d8:66:ef:ce:d5:
80:51:25:32:f0:32:94:2e:3e:03:1b:a2:6c:d7:a4:50:f7:25:
54:4a:c6:30:d1:1e:ed:1b:c9:8d:3b:1c:13:bd:fa:15:b4:7e:
fc:71:31:88:95:7d:8f:4a:b8:81:b9:6b:ba:0f:35:c1:d7:00:
ff:14:13:37:a7:73:4a:7c:6d:17:e9:43:3f:a0:2b:1e:11:fb:
7c:3d:04:ed:85:98:55:7c:b3:68:0d:f1:e8:d0:19:62:ad:78:
c4:ac:32:17:c7:0e:f7:71:2c:e8:02:16:aa:82:4a:e5:fd:6a:
e1:11:25:da:58:a5:d6:b6:91:f4:f7:34:71:40:a3:60:94:8d:
34:0b:2e:a8:dd:70:ca:4e:a4:ea:8a:c4:52:ae:3a:6e:51:84:
7f:24:c5:53:96:49:a1:d3:6b:88:e3:dd:00:0e:d3:cb:87:c8:
78:10:c9:35:f1:51:10:75:a4:e8:e5:11:92:16:6e:d1:03:21:
69:5d:22:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX70DDSi/+o3FyeOaxgBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDAxOWVkMmNiNjIxOTdiMGNhOTZlMWU3MTYxYzk4NjQ5
MDg2YWYwHhcNMjUwODIzMTAwMDU1WhcNMjUwODI0MTAwMDU1WjAzMTEwLwYDVQQD
EygzMjI1NzZjOTllNTZhMTYxMjAxYzQwYzFlN2YzMjc4Y2U2ZTVmZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+UdOmkmfV68MLc17V1i7sxVyqygD
Ml2DU1vFfagHE+tj3+Z4s/OEkR+NcW95+ZFavEg09yiL5fSGQk6mvsPjYciT7ywI
FKS5t1GtgbxgxeAPnR9Q8j8bIyE6kNjqMUc3GvPlcmYSnP82IDuhZiNX2G5hgBwE
tMzzNX7lddSaa09Jpx2PzSD9eACC8OwgO7NF+ATJEU0STYpMpAzhXzp3AXJ3/7Qx
4l5AmyexdxzS5B5+NLFagS022aZ/xX5Ccorl1qk0ucHjypzZGhDIq9scTFlkMyoi
LB+zGeVHvDQW9KoVUCwgLBU2hPuOo1jjkByZH7Dv/9LriaVDCB7aFpuM6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIldsmeVqFhIBxAwefzJ4zm5f05MB8GA1UdIwQY
MBaAFA4AGe0stiGXsMqW4ecWHJhkkIavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEt
MDU5YjAwNmYzOWQ5LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEtMDU5YjAwNmYzOWQ5
LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtXL32U7
c0D+b2m19Sha2DA0clK2yo5loZfxkNUHtXkwXdkL83W9AUQ1Ycvm8FQL9Y+WSgCX
RhT5SezJMf2i5HH/sNhm787VgFElMvAylC4+AxuibNekUPclVErGMNEe7RvJjTsc
E736FbR+/HExiJV9j0q4gblrug81wdcA/xQTN6dzSnxtF+lDP6ArHhH7fD0E7YWY
VXyzaA3x6NAZYq14xKwyF8cO93Es6AIWqoJK5f1q4REl2lil1raR9Pc0cUCjYJSN
NAsuqN1wyk6k6orEUq46blGEfyTFU5ZJodNriOPdAA7Ty4fIeBDJNfFREHWk6OUR
khZu0QMhaV0iHw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:51 2025 by rpki-client