Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
File: dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json)
Hash identifier: Z9pTb99L771XBnaWFw4N5I/zQkDktQ6u+enpUiJ1IAk=
Subject key identifier: 30:78:CD:C6:BE:D9:F4:B0:15:E1:C0:4A:0F:02:34:00:36:B0:FF:72
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial: 0198D54EB7EDD4D2EBD4FAF40B98DFF73043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 05:02:42 +0000
Manifest this update: Sat 23 Aug 2025 05:02:42 +0000
Manifest next update: Sun 24 Aug 2025 05:02:42 +0000
Files and hashes: 1: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: nv21YibEvir1FAL4hkFWZ9ANkolhLe0mk8bR7oLgTF0=)
2: lX0LK1nSiHuzV_SMOweQSMztoO8.roa (hash: FSFbPLbWej0Nx3zMGDu+OsUG2lUiqW2+msdd/cNwwCI=)
3: m-mEC3MQWEKPGGG-lSkfc_YkjKY.roa (hash: mn8IMLUm7FiquI9qNoEzKGH7Q8r7mj6TH3z7eAZCOtY=)
4: pOouLLrM_fPZOnQs6zwFn5Phg1A.roa (hash: /KoAmA+1k0JwlfyqAV8ggH0wccERUauLpX2rgBT+8fk=)
5: zgslkGsdDbo-83qCCgJ7ueeD908.roa (hash: oQmBgVS3Wh0yqMQW3hPh1qFWDPXgZCrq5bbnQf1I4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b7:ed:d4:d2:eb:d4:fa:f4:0b:98:df:f7:30:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Validity
Not Before: Aug 23 05:02:42 2025 GMT
Not After : Aug 24 05:02:42 2025 GMT
Subject: CN=3078cdc6bed9f4b015e1c04a0f02340036b0ff72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:25:44:09:b2:2b:dd:2a:b5:08:9c:d2:91:
90:80:4f:68:39:86:49:f9:41:af:b1:17:b4:ac:49:
e5:fe:5c:9d:b8:9b:c6:9a:f1:21:89:5f:ab:9d:0c:
d7:e3:f2:2d:bb:a7:a4:ca:13:cd:cf:09:c2:52:3c:
23:2e:04:2b:66:b1:7f:d8:a3:d0:d6:1a:d1:2a:2a:
19:45:ba:19:20:42:47:ea:a6:dc:85:c2:27:fe:f6:
72:9e:44:76:a9:41:82:c9:f5:a5:d3:b8:19:75:62:
9a:ee:cd:ac:1b:ca:40:b8:81:75:62:8c:21:0f:28:
89:16:9e:04:8b:37:10:e8:14:c6:ee:6b:82:a5:09:
3e:ef:a4:45:3e:e8:f8:5b:50:a9:bf:51:dd:0d:aa:
46:63:4e:28:da:ec:2b:f5:6f:88:42:18:70:c2:67:
0e:17:af:d6:f5:b9:11:a2:c7:d5:2b:e6:39:91:4a:
36:fb:52:6d:1a:95:9d:6c:6d:c9:bd:aa:c6:a8:70:
6f:10:8d:17:24:5f:e9:4e:34:93:4f:68:06:c3:93:
20:42:91:72:3a:4f:81:3b:30:ee:c2:99:4e:b3:0b:
4a:be:2b:81:e9:66:32:b3:16:38:85:96:33:73:ac:
06:78:23:03:b0:a6:9c:cd:d4:f8:37:16:a7:40:3e:
bb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:78:CD:C6:BE:D9:F4:B0:15:E1:C0:4A:0F:02:34:00:36:B0:FF:72
X509v3 Authority Key Identifier:
keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a6:25:c8:0e:9e:c0:04:09:49:75:65:da:a9:eb:23:31:04:
b1:57:cc:7f:bd:96:91:38:dc:e7:4b:3c:26:64:85:60:ff:3b:
59:6c:9f:78:49:85:ec:1d:63:f5:96:df:eb:4a:ee:cd:b0:53:
31:06:69:4f:61:b6:a6:a2:7b:1f:3b:f8:0c:7c:49:68:be:ac:
6c:13:f8:de:a8:fd:45:62:d4:f3:55:04:ab:7d:2a:3e:3b:e2:
25:0c:ca:8e:66:27:74:4c:6c:53:2a:d2:12:e1:0a:58:ca:6b:
05:f8:c8:52:ac:38:68:f3:e1:76:c3:d3:63:22:0a:9a:05:cb:
ad:81:93:59:d1:d2:21:b7:c8:81:ea:39:9b:35:39:83:88:c7:
a6:e1:23:04:88:15:0a:0c:52:21:b4:1e:b7:87:5a:a4:72:d1:
72:04:20:f6:6e:ca:89:4f:e5:c5:c5:f8:cd:67:8b:57:d4:e2:
5e:18:eb:dd:8d:2c:a9:79:d4:06:1f:c1:dd:55:aa:e6:b7:d0:
2e:9d:96:2a:62:88:06:a8:2f:33:19:86:a2:cd:84:c2:b0:40:
48:0b:40:76:ac:d1:65:5d:d6:f8:9c:2c:ce:16:e2:8a:8f:c2:
48:bf:44:df:95:db:4d:0f:2d:34:d8:47:2a:0c:cd:b1:80:5d:
fd:ce:28:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTrft1NLr1Pr0C5jf9zBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzZhNWM4NWEwOGQ4MDc0OTA0MWNiOWNmYTUxN2ZiN2Q1
ODliYTgwHhcNMjUwODIzMDUwMjQyWhcNMjUwODI0MDUwMjQyWjAzMTEwLwYDVQQD
EygzMDc4Y2RjNmJlZDlmNGIwMTVlMWMwNGEwZjAyMzQwMDM2YjBmZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaElRAmyK90qtQic0pGQgE9oOYZJ
+UGvsRe0rEnl/lyduJvGmvEhiV+rnQzX4/Itu6ekyhPNzwnCUjwjLgQrZrF/2KPQ
1hrRKioZRboZIEJH6qbchcIn/vZynkR2qUGCyfWl07gZdWKa7s2sG8pAuIF1Yowh
DyiJFp4EizcQ6BTG7muCpQk+76RFPuj4W1Cpv1HdDapGY04o2uwr9W+IQhhwwmcO
F6/W9bkRosfVK+Y5kUo2+1JtGpWdbG3JvarGqHBvEI0XJF/pTjSTT2gGw5MgQpFy
Ok+BOzDuwplOswtKviuB6WYysxY4hZYzc6wGeCMDsKaczdT4NxanQD67dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDB4zca+2fSwFeHASg8CNAA2sP9yMB8GA1UdIwQY
MBaAFHc2pchaCNgHSQQcuc+lF/t9WJuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTkt
Y2YxZjRjN2M5MjIyLzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTktY2YxZjRjN2M5MjIy
LzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaYlyA6e
wAQJSXVl2qnrIzEEsVfMf72WkTjc50s8JmSFYP87WWyfeEmF7B1j9Zbf60ruzbBT
MQZpT2G2pqJ7Hzv4DHxJaL6sbBP43qj9RWLU81UEq30qPjviJQzKjmYndExsUyrS
EuEKWMprBfjIUqw4aPPhdsPTYyIKmgXLrYGTWdHSIbfIgeo5mzU5g4jHpuEjBIgV
CgxSIbQet4dapHLRcgQg9m7KiU/lxcX4zWeLV9TiXhjr3Y0sqXnUBh/B3VWq5rfQ
Lp2WKmKIBqgvMxmGos2EwrBASAtAdqzRZV3W+Jwszhbiio/CSL9E35XbTQ8tNNhH
KgzNsYBd/c4oXw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:54 2025 by rpki-client