Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: o/WTlpCMvnBqwg7JyVErricdKPrRjzWv13ABPm5++sI=
Subject key identifier: CC:11:AF:9B:40:64:28:09:AA:1C:6F:08:5E:7E:A0:12:6A:0A:18:B2
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 0198D4724B697AA91607FD27EEEE4F461A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 1617
Signing time: Sat 23 Aug 2025 01:01:56 +0000
Manifest this update: Sat 23 Aug 2025 01:01:56 +0000
Manifest next update: Sun 24 Aug 2025 01:01:56 +0000
Files and hashes: 1: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: NSMDjitW4VTtJRrOSv2jX2K7UrFSOX51DvW8CmwR6HE=)
2: lKi6SoPHv8adD_f0H8JMR-0tkso.roa (hash: IDdp81FcSfbScsI5eFdQ3u0Q5w/9MnWkbMQFbCRI7Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:4b:69:7a:a9:16:07:fd:27:ee:ee:4f:46:1a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Aug 23 01:01:56 2025 GMT
Not After : Aug 24 01:01:56 2025 GMT
Subject: CN=cc11af9b40642809aa1c6f085e7ea0126a0a18b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:0c:05:81:19:e3:bc:b0:24:fb:3f:e0:06:
bc:ed:81:cf:6e:c1:83:ec:32:e4:15:1f:e2:0d:a0:
2c:7f:b7:62:d6:79:57:6d:12:17:e3:f3:55:63:a1:
9b:5f:08:7d:c0:5c:27:e6:9f:88:18:3c:25:ea:3a:
a5:0f:9e:d3:9f:fc:03:9f:4f:f0:29:4f:59:1f:1e:
f0:f3:fd:de:c9:3f:63:35:05:42:38:4c:87:95:89:
25:1d:34:0e:67:c5:9f:39:b1:3f:92:33:41:c7:43:
88:15:25:f9:d5:5a:0e:f9:97:ec:04:12:02:34:cd:
39:9d:87:37:23:14:d1:4b:db:0f:36:ed:42:07:bd:
28:57:8b:2b:fa:87:14:50:40:22:5c:f9:99:4d:14:
97:e8:3b:8a:66:ff:22:f9:9d:cf:a3:60:67:70:f8:
bb:03:25:99:42:b4:ab:a1:0f:e8:5f:e9:05:9c:88:
1f:8b:ed:eb:1f:ec:41:ec:6c:49:2b:6c:0b:b6:a4:
ae:00:75:b7:2c:5c:67:de:48:c2:27:76:5d:9b:f0:
3b:27:8e:e8:98:b7:5b:6e:27:82:2e:6c:fa:2a:43:
ea:bf:31:d6:5f:de:67:52:ea:b8:14:0e:5e:74:34:
55:9d:91:4d:3b:43:08:af:3b:ba:38:97:26:5d:70:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:11:AF:9B:40:64:28:09:AA:1C:6F:08:5E:7E:A0:12:6A:0A:18:B2
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:35:1e:fc:ed:26:10:2f:f7:c6:7a:a3:cd:ed:1b:a9:a7:03:
d0:eb:87:6c:0c:02:fd:ca:8b:b2:0a:80:93:be:98:a5:5e:d1:
9d:b8:86:52:24:44:a8:d8:c3:13:44:48:76:09:e5:bf:b8:8c:
7d:81:97:06:48:5a:a4:c9:fe:33:2c:fe:cb:f3:1f:18:8e:77:
91:ac:8b:64:d3:84:2d:e1:6b:27:1a:49:3b:a0:be:ac:28:1d:
fc:6e:bd:83:d5:9d:bd:ce:4b:5e:44:82:78:ac:10:37:c2:df:
cd:f4:06:3c:ff:b5:b5:9d:c9:2c:38:ae:91:7a:df:e6:ad:dc:
80:0a:49:de:61:3a:f2:e2:1f:8d:9b:ca:ea:da:b8:d6:9c:ee:
27:55:e6:90:fa:77:57:2d:2e:a7:d8:53:e0:e7:92:13:19:8d:
30:69:21:f8:17:8d:a7:71:46:83:eb:70:85:de:49:b7:11:98:
16:74:be:1e:26:7b:58:36:91:5f:c6:68:7b:ad:4b:cf:fc:59:
e0:5d:9e:2e:94:42:4a:b4:23:6f:07:c7:5a:96:58:b9:b3:2c:
83:fb:e2:01:e1:54:fd:6f:e0:ed:d8:2c:4d:6e:76:80:16:91:
b2:a5:41:ca:77:2a:f0:c0:d8:b4:45:65:99:28:23:55:94:7e:
99:7e:20:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcktpeqkWB/0n7u5PRhoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzExMGE0MzcwNGQ5NTQ5ZGY3MTU2ZTNhNzg5ZTYyMjg1
YjE2OTMwHhcNMjUwODIzMDEwMTU2WhcNMjUwODI0MDEwMTU2WjAzMTEwLwYDVQQD
EyhjYzExYWY5YjQwNjQyODA5YWExYzZmMDg1ZTdlYTAxMjZhMGExOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bwMBYEZ47ywJPs/4Aa87YHPbsGD
7DLkFR/iDaAsf7di1nlXbRIX4/NVY6GbXwh9wFwn5p+IGDwl6jqlD57Tn/wDn0/w
KU9ZHx7w8/3eyT9jNQVCOEyHlYklHTQOZ8WfObE/kjNBx0OIFSX51VoO+ZfsBBIC
NM05nYc3IxTRS9sPNu1CB70oV4sr+ocUUEAiXPmZTRSX6DuKZv8i+Z3Po2BncPi7
AyWZQrSroQ/oX+kFnIgfi+3rH+xB7GxJK2wLtqSuAHW3LFxn3kjCJ3Zdm/A7J47o
mLdbbieCLmz6KkPqvzHWX95nUuq4FA5edDRVnZFNO0MIrzu6OJcmXXChfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwRr5tAZCgJqhxvCF5+oBJqChiyMB8GA1UdIwQY
MBaAFHcxEKQ3BNlUnfcVbjp4nmIoWxaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAt
OWEzODE1OWI3OTRlLzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAtOWEzODE1OWI3OTRl
LzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzUe/O0m
EC/3xnqjze0bqacD0OuHbAwC/cqLsgqAk76YpV7RnbiGUiREqNjDE0RIdgnlv7iM
fYGXBkhapMn+Myz+y/MfGI53kayLZNOELeFrJxpJO6C+rCgd/G69g9Wdvc5LXkSC
eKwQN8LfzfQGPP+1tZ3JLDiukXrf5q3cgApJ3mE68uIfjZvK6tq41pzuJ1XmkPp3
Vy0up9hT4OeSExmNMGkh+BeNp3FGg+twhd5JtxGYFnS+HiZ7WDaRX8Zoe61Lz/xZ
4F2eLpRCSrQjbwfHWpZYubMsg/viAeFU/W/g7dgsTW52gBaRsqVByncq8MDYtEVl
mSgjVZR+mX4g6w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:10 2025 by rpki-client