Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
File: DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json)
Hash identifier: GJo2uoBqLSr+5kXDG1sfIm2LnIHmro93lFuMbMSFzC0=
Subject key identifier: E9:5B:03:25:51:AA:BB:D8:25:E3:2C:8C:E8:C9:02:46:7D:24:4C:BC
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Certificate issuer: /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial: 0199FD344A1775A4A1373ECC34FE9C8CD068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:26 +0000
Manifest this update: Sun 19 Oct 2025 16:01:26 +0000
Manifest next update: Mon 20 Oct 2025 16:01:26 +0000
Files and hashes: 1: 1-sk04SJKaJ6g1Y9khEpsLFas3Kk.roa (hash: XxZhRBWthERVmL3LKPQQh5B0868NCMjhs1tFs+3eMxM=)
2: 4QpvM3CE_nzBSqatuahpsYYH1qM.roa (hash: Qrg/EHEt9L0x/2vBVqdC/NUou31du+BoDTLXvsaFSGk=)
3: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: OuScUErw2W3JYoLMj80mxoYEf8Qlbn6+jkvWp+/+pcY=)
4: OKvzKSdRprY6KmoCf5oHQIz_91A.roa (hash: c7CmyJe2kYuAmiLCH0rQuuU8EyGxHjQvlpZniPCLw0U=)
5: mHALm7hBq5s0140ybe8Xc1F8234.roa (hash: imdhLSNxS5EA5IBXEn3VpwdKjS6o+zDqUc/wlGF8Pzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4a:17:75:a4:a1:37:3e:cc:34:fe:9c:8c:d0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Validity
Not Before: Oct 19 16:01:26 2025 GMT
Not After : Oct 20 16:01:26 2025 GMT
Subject: CN=e95b032551aabbd825e32c8ce8c902467d244cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:4e:91:48:f7:00:35:fb:8b:cd:68:04:89:
de:d5:92:7c:d9:44:cb:48:bd:2f:6b:dd:36:68:80:
68:c5:67:dd:a6:48:ff:47:be:e5:db:ad:d7:21:22:
8a:09:85:56:5f:f1:35:98:dc:a8:ac:0a:02:7e:dd:
52:c1:e1:ec:bb:76:8c:ca:7c:87:1d:82:2d:ff:d4:
01:6a:aa:be:6c:13:25:76:f6:74:0b:d8:a0:03:b6:
6a:32:5a:3a:db:01:ed:47:eb:fa:a4:76:16:64:27:
91:67:29:67:ae:68:3c:bd:5d:7a:85:a9:c3:a2:67:
e6:c8:94:fb:7c:28:f0:13:e2:70:96:16:47:0a:60:
25:ff:3b:0a:0e:cb:7a:c4:c8:17:7a:fe:b5:7d:9d:
a2:8f:e9:28:11:e8:4a:34:1b:ae:4f:cb:9b:22:f6:
ba:9c:3f:51:50:68:73:9b:ee:b9:02:e5:66:d4:3e:
18:08:8e:09:93:ba:98:6a:53:71:d9:a6:8e:da:5d:
76:fb:68:53:92:bb:e6:42:01:dd:a0:28:3b:23:3c:
61:ad:ae:36:30:04:1c:76:4c:15:2f:5b:e8:21:e0:
b7:f7:b5:2d:f4:b9:9c:7b:13:04:15:24:82:d7:2d:
f4:e3:64:f1:a3:aa:40:99:34:d7:3e:f0:db:e0:c2:
83:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5B:03:25:51:AA:BB:D8:25:E3:2C:8C:E8:C9:02:46:7D:24:4C:BC
X509v3 Authority Key Identifier:
keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1d:aa:14:af:67:b4:ab:77:f9:8f:de:d7:41:4b:ba:5b:45:
fa:ab:28:fe:aa:14:20:2d:64:c5:c4:dd:1b:5b:e2:93:89:df:
8d:99:f1:af:0a:94:10:31:37:70:1e:67:83:da:05:22:74:8e:
39:ce:ba:52:10:fa:79:f8:de:68:03:36:29:95:e3:03:2b:a7:
a7:c6:7d:2b:f2:0f:32:f3:9b:bb:e8:66:2e:61:0a:4b:a1:4f:
eb:34:f5:6a:84:bd:51:ff:bc:58:0f:b8:bf:41:82:d4:fe:79:
d1:74:4d:25:71:26:3e:e2:f3:d3:6d:a3:c3:e4:57:1d:e8:6e:
9d:cd:a6:34:f4:d4:87:63:52:7e:d5:cc:76:39:71:e3:f8:5f:
85:a6:72:79:b2:9c:61:55:30:af:44:b9:5c:34:2b:5e:97:0d:
2e:9e:89:4d:71:10:50:29:48:02:10:84:0e:35:43:6c:30:a5:
3d:17:5e:43:90:01:a3:d3:1a:95:ae:ce:58:2b:c5:c9:2d:7f:
84:e1:29:b4:f3:b2:ab:69:1c:ed:69:88:64:93:c9:4d:70:b9:
e8:7e:2c:75:c2:9c:e0:a0:07:8b:e9:a2:92:86:96:d1:5a:c2:
87:ad:60:6b:3a:9c:cb:30:f1:d5:58:d7:dd:70:b5:ec:e4:3d:
22:5d:e2:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NEoXdaShNz7MNP6cjNBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTMwMmQ1NDZlMDY4YzJmZDc2NzdkOWQ1MjAwYWRkMzZj
OGJjZDUwHhcNMjUxMDE5MTYwMTI2WhcNMjUxMDIwMTYwMTI2WjAzMTEwLwYDVQQD
EyhlOTViMDMyNTUxYWFiYmQ4MjVlMzJjOGNlOGM5MDI0NjdkMjQ0Y2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplxOkUj3ADX7i81oBIne1ZJ82UTL
SL0va902aIBoxWfdpkj/R77l263XISKKCYVWX/E1mNyorAoCft1SweHsu3aMynyH
HYIt/9QBaqq+bBMldvZ0C9igA7ZqMlo62wHtR+v6pHYWZCeRZylnrmg8vV16hanD
omfmyJT7fCjwE+JwlhZHCmAl/zsKDst6xMgXev61fZ2ij+koEehKNBuuT8ubIva6
nD9RUGhzm+65AuVm1D4YCI4Jk7qYalNx2aaO2l12+2hTkrvmQgHdoCg7Izxhra42
MAQcdkwVL1voIeC397Ut9LmcexMEFSSC1y3042Txo6pAmTTXPvDb4MKDQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlbAyVRqrvYJeMsjOjJAkZ9JEy8MB8GA1UdIwQY
MBaAFA2TAtVG4GjC/XZ32dUgCt02yLzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUt
NGJlZjQzZDNmYjE3LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUtNGJlZjQzZDNmYjE3
LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOh2qFK9n
tKt3+Y/e10FLultF+qso/qoUIC1kxcTdG1vik4nfjZnxrwqUEDE3cB5ng9oFInSO
Oc66UhD6efjeaAM2KZXjAyunp8Z9K/IPMvObu+hmLmEKS6FP6zT1aoS9Uf+8WA+4
v0GC1P550XRNJXEmPuLz022jw+RXHehunc2mNPTUh2NSftXMdjlx4/hfhaZyebKc
YVUwr0S5XDQrXpcNLp6JTXEQUClIAhCEDjVDbDClPRdeQ5ABo9Mala7OWCvFyS1/
hOEptPOyq2kc7WmIZJPJTXC56H4sdcKc4KAHi+mikoaW0VrCh61gazqcyzDx1VjX
3XC17OQ9Il3i0Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:50 2025 by rpki-client