Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: F4x7xHsfwbta7USUV/ucBfHvbTP+a/o2Cor2aOWoeHc=
Subject key identifier: 96:DF:63:53:DC:EE:11:5C:0B:C2:A6:C5:AC:7D:16:20:5D:CF:86:32
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 0199FBEC0C10E032AEF7DB7C975CC36E7F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 165F
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: WHHdKNu5JgLyy4oPxnQrmazePDcj/53tjxVyFOoh8aY=)
3: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (hash: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0c:10:e0:32:ae:f7:db:7c:97:5c:c3:6e:7f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=96df6353dcee115c0bc2a6c5ac7d16205dcf8632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:53:eb:6a:ff:cf:12:95:0d:23:3d:0b:b2:
07:78:67:5c:41:dc:99:4b:cd:7f:c8:a3:e8:9d:b0:
3c:a7:f6:54:fb:36:dc:f5:84:13:64:11:2e:78:9a:
2c:7e:4e:99:ca:f4:df:27:2d:f9:b4:4f:38:78:a9:
da:13:7d:ae:10:a0:d0:d9:73:1d:35:18:55:d0:58:
b8:08:f8:03:ce:7e:ed:74:08:f8:c2:aa:df:8b:13:
79:78:1c:14:00:64:36:c2:8f:b2:e0:b4:52:01:28:
0a:0e:b9:d7:5f:34:82:18:78:0d:9d:20:2a:a7:e4:
d5:5e:98:01:b6:5a:f0:11:ad:49:c8:c9:61:ba:8c:
cd:87:5d:e7:22:98:ff:ce:92:2d:d9:2f:4d:54:77:
18:89:e7:a2:ae:93:7d:0a:b9:ec:f9:5c:34:51:b8:
64:4d:f5:2e:c9:72:98:cd:9e:f4:26:db:41:84:bd:
86:e2:ee:b8:c0:c6:8d:16:c8:32:51:c2:4f:2c:c3:
5f:42:af:96:42:7f:e9:dd:67:da:b6:47:72:91:92:
b4:7d:0e:77:65:35:71:a5:93:f3:28:bf:c8:10:03:
42:b8:79:a5:00:62:ab:0c:6b:57:fd:1f:7e:c1:40:
ae:5f:88:62:c6:8d:6a:f0:e6:d0:e2:71:21:44:39:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DF:63:53:DC:EE:11:5C:0B:C2:A6:C5:AC:7D:16:20:5D:CF:86:32
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c7:cb:8a:09:b5:46:c4:58:b7:75:17:38:02:3d:eb:d8:cc:
0f:13:bc:9c:4f:10:a9:23:75:98:fa:e0:11:57:41:dc:9d:db:
af:fb:ce:7c:88:5c:22:63:79:24:52:0a:cc:31:28:1a:1b:df:
f4:7e:a6:10:33:9a:48:51:32:4e:6f:3b:52:b8:5e:1c:5d:71:
4e:69:b2:15:5d:21:1b:e0:9e:1b:13:04:35:22:e3:9f:8e:6c:
04:7c:04:67:9f:4a:e9:bc:a1:77:a6:98:03:a6:03:84:a0:44:
2d:0e:04:63:51:44:54:fa:a5:82:cc:9a:b5:8d:f7:20:64:fd:
d5:5f:da:cf:f3:44:70:c5:e3:06:f9:88:d0:10:de:c5:85:3b:
78:bb:ef:c7:f8:ca:bb:dd:92:83:95:33:05:16:03:82:61:d0:
48:d4:17:00:55:90:79:0a:29:eb:82:93:8e:c1:10:cd:56:29:
ff:5c:4a:0f:44:9f:f1:15:00:1f:1e:57:21:bf:1c:65:c5:63:
bc:61:f7:80:4e:f4:93:2c:9a:78:f9:ad:c8:72:c2:13:ed:ca:
a6:bf:da:53:13:0e:d5:0f:7b:ff:13:45:2b:c9:98:6e:fd:71:
d2:8f:74:ba:70:4f:6d:9b:7d:17:44:aa:88:23:73:24:ec:56:
0c:33:07:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77AwQ4DKu99t8l1zDbn9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2FlNjYzYWQwYTFhMzA3MmRiZDg2Nzk5MmI3ZDhkZjI1
YTQ0OWEwHhcNMjUxMDE5MTAwMjU0WhcNMjUxMDIwMTAwMjU0WjAzMTEwLwYDVQQD
Eyg5NmRmNjM1M2RjZWUxMTVjMGJjMmE2YzVhYzdkMTYyMDVkY2Y4NjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lRT62r/zxKVDSM9C7IHeGdcQdyZ
S81/yKPonbA8p/ZU+zbc9YQTZBEueJosfk6ZyvTfJy35tE84eKnaE32uEKDQ2XMd
NRhV0Fi4CPgDzn7tdAj4wqrfixN5eBwUAGQ2wo+y4LRSASgKDrnXXzSCGHgNnSAq
p+TVXpgBtlrwEa1JyMlhuozNh13nIpj/zpIt2S9NVHcYieeirpN9Crns+Vw0Ubhk
TfUuyXKYzZ70JttBhL2G4u64wMaNFsgyUcJPLMNfQq+WQn/p3WfatkdykZK0fQ53
ZTVxpZPzKL/IEANCuHmlAGKrDGtX/R9+wUCuX4hixo1q8ObQ4nEhRDkw0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbfY1Pc7hFcC8Kmxax9FiBdz4YyMB8GA1UdIwQY
MBaAFHc65mOtChowctvYZ5krfY3yWkSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTJmZGMtYzMwMC00MWE1LTkwMTUt
NjYyZWM4MThkMjNkLzEvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wOTJmZGMtYzMwMC00MWE1LTkwMTUtNjYyZWM4MThkMjNk
LzEvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMfLigm1
RsRYt3UXOAI969jMDxO8nE8QqSN1mPrgEVdB3J3br/vOfIhcImN5JFIKzDEoGhvf
9H6mEDOaSFEyTm87UrheHF1xTmmyFV0hG+CeGxMENSLjn45sBHwEZ59K6byhd6aY
A6YDhKBELQ4EY1FEVPqlgsyatY33IGT91V/az/NEcMXjBvmI0BDexYU7eLvvx/jK
u92Sg5UzBRYDgmHQSNQXAFWQeQop64KTjsEQzVYp/1xKD0Sf8RUAHx5XIb8cZcVj
vGH3gE70kyyaePmtyHLCE+3Kpr/aUxMO1Q97/xNFK8mYbv1x0o90unBPbZt9F0Sq
iCNzJOxWDDMHuQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:42 2025 by rpki-client