Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: CpAcVynPXGvkjVyQiWV5TduDCZFfakj3Bkwrqdc18+M=
Subject key identifier: 7E:F4:2A:A7:6B:32:BE:34:84:D5:E3:8E:0B:83:FB:2B:F9:70:6B:56
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 0197CA5DF8CB8DAFE63C7623783BA3A52067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 09:00:45 +0000
Manifest this update: Wed 02 Jul 2025 09:00:45 +0000
Manifest next update: Thu 03 Jul 2025 09:00:45 +0000
Files and hashes: 1: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: 9BehIl635OIjaJ6zQt8T48zmswwArOQaghxfpMrhdBw=)
2: rMYX2ngJRfk9a7fGX1cc8xAfsos.roa (hash: zZBPIZevys4Y238DbVgB+9WvN4FdGE3xhipQLPtn3sg=)
3: z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa (hash: 0P2kU02ZAocYSBgE7zWtiaNGeOEg/Gg5PfdYqLhXNf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5d:f8:cb:8d:af:e6:3c:76:23:78:3b:a3:a5:20:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Jul 2 09:00:45 2025 GMT
Not After : Jul 3 09:00:45 2025 GMT
Subject: CN=7ef42aa76b32be3484d5e38e0b83fb2bf9706b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:4a:71:d4:df:8d:80:ef:59:37:08:57:91:
96:98:3f:fd:06:0d:ab:65:b9:e6:8c:bb:15:f3:8f:
0c:37:76:04:d4:c7:20:e9:f5:cd:f8:9c:c5:a0:ec:
23:74:80:0c:b0:84:61:5a:e2:e6:6d:6e:3a:6d:43:
88:4f:10:f6:fd:2c:74:91:e6:1f:e5:6e:d9:3c:35:
bd:f2:7e:39:e7:fd:7f:0a:b7:07:90:1a:5c:6d:c2:
47:03:e4:21:38:29:d5:a0:16:cb:5c:8b:9e:5c:2a:
53:a1:a7:64:03:0f:01:07:51:ee:be:4a:01:e2:67:
8c:b8:3e:27:fa:96:41:ab:ba:1a:89:86:f3:81:8a:
ce:c0:78:f4:88:95:b0:9b:3d:3e:3b:75:a9:e8:3d:
48:e4:92:b5:db:8c:df:70:a4:86:a3:84:b3:a1:4e:
14:d4:5b:9e:ea:4b:b5:e2:85:17:10:1f:01:7b:73:
24:d3:b9:12:72:4f:bf:10:1e:9b:d6:b4:bd:10:bd:
05:ab:f1:b1:6b:5c:8c:20:61:97:b3:c3:20:12:7b:
c9:01:f5:5f:63:5c:7f:5e:44:18:f6:26:89:97:25:
6f:8b:96:4f:9f:92:d0:6e:f6:07:a3:69:2c:b3:37:
ba:7a:32:38:4f:13:82:77:22:56:ee:82:77:80:f6:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F4:2A:A7:6B:32:BE:34:84:D5:E3:8E:0B:83:FB:2B:F9:70:6B:56
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0f:62:39:f5:c4:f6:1f:0c:03:74:87:c6:18:90:7b:a6:d6:
83:e2:11:11:1a:d5:45:a6:e1:cc:83:eb:a9:8a:14:7b:b0:c5:
78:23:c5:a8:58:fa:57:d5:9c:38:d0:7c:f1:cb:b3:9b:21:c0:
4e:5c:34:5e:7b:46:40:0d:00:4e:bf:13:e9:89:58:cf:cf:c2:
f4:90:fa:49:60:de:14:8d:00:26:f4:6a:8b:92:52:8f:d3:0c:
20:e5:0f:80:55:e5:05:0a:60:cb:81:04:a3:ed:ac:9d:a7:a2:
fe:ff:2b:a4:de:71:50:98:b4:18:e6:78:f6:7f:b3:4e:2e:99:
ac:2d:ba:60:83:0d:cf:e6:91:4b:9c:bf:42:fb:81:4e:7f:ee:
bd:94:2a:df:7f:64:9a:04:1f:b7:ca:05:d8:33:df:09:56:98:
4f:67:43:0d:1e:81:51:69:45:32:7c:97:fb:ee:6b:46:88:4f:
30:c2:43:24:8c:18:b7:b2:76:09:50:46:93:1b:39:c8:7d:a2:
88:da:86:6d:1b:73:e2:ea:5b:72:14:2b:f2:02:84:af:26:a3:
e0:d3:49:61:87:27:f5:17:83:03:01:10:9e:21:64:b0:e3:89:
b8:b0:15:53:1e:ad:82:54:9d:ba:a7:b4:2f:41:78:8a:de:d4:
d1:39:d9:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKXfjLja/mPHYjeDujpSBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2UzMjc4YmFhMjQ5YzE0ZGU2MDVkYzk2NGIyYzI3NTVk
ZmVjZmEwHhcNMjUwNzAyMDkwMDQ1WhcNMjUwNzAzMDkwMDQ1WjAzMTEwLwYDVQQD
Eyg3ZWY0MmFhNzZiMzJiZTM0ODRkNWUzOGUwYjgzZmIyYmY5NzA2YjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVlKcdTfjYDvWTcIV5GWmD/9Bg2r
ZbnmjLsV848MN3YE1Mcg6fXN+JzFoOwjdIAMsIRhWuLmbW46bUOITxD2/Sx0keYf
5W7ZPDW98n455/1/CrcHkBpcbcJHA+QhOCnVoBbLXIueXCpToadkAw8BB1HuvkoB
4meMuD4n+pZBq7oaiYbzgYrOwHj0iJWwmz0+O3Wp6D1I5JK124zfcKSGo4SzoU4U
1Fue6ku14oUXEB8Be3Mk07kSck+/EB6b1rS9EL0Fq/Gxa1yMIGGXs8MgEnvJAfVf
Y1x/XkQY9iaJlyVvi5ZPn5LQbvYHo2kssze6ejI4TxOCdyJW7oJ3gPZPLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH70KqdrMr40hNXjjguD+yv5cGtWMB8GA1UdIwQY
MBaAFHc+Mni6oknBTeYF3JZLLCdV3+z6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0Nzgt
MWYxNGVjODA1MzkwLzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0NzgtMWYxNGVjODA1Mzkw
LzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnw9iOfXE
9h8MA3SHxhiQe6bWg+IRERrVRabhzIPrqYoUe7DFeCPFqFj6V9WcONB88cuzmyHA
Tlw0XntGQA0ATr8T6YlYz8/C9JD6SWDeFI0AJvRqi5JSj9MMIOUPgFXlBQpgy4EE
o+2snaei/v8rpN5xUJi0GOZ49n+zTi6ZrC26YIMNz+aRS5y/QvuBTn/uvZQq339k
mgQft8oF2DPfCVaYT2dDDR6BUWlFMnyX++5rRohPMMJDJIwYt7J2CVBGkxs5yH2i
iNqGbRtz4upbchQr8gKEryaj4NNJYYcn9ReDAwEQniFksOOJuLAVUx6tglSduqe0
L0F4it7U0TnZXg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:05:40 2025 by rpki-client