Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: WaRCpO2tunNcBBZYF54Os0KCaH2FOITBfrqZERg1cRA=
Subject key identifier: DA:B0:32:9A:A5:88:F6:6E:6C:4B:14:F4:19:67:B2:35:9B:24:8F:AE
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 0198D660A31616646067F0669E82F9451850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 070B
Signing time: Sat 23 Aug 2025 10:01:53 +0000
Manifest this update: Sat 23 Aug 2025 10:01:53 +0000
Manifest next update: Sun 24 Aug 2025 10:01:53 +0000
Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: cXaxNunt3BbFJ1RSz5yBCZX7KEcUwcgSKd9YvWenRB4=)
2: mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa (hash: qn4MOETPNEkOlTCM8W+7rEv5tZsC1gxAMBahRUzoOCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a3:16:16:64:60:67:f0:66:9e:82:f9:45:18:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Aug 23 10:01:53 2025 GMT
Not After : Aug 24 10:01:53 2025 GMT
Subject: CN=dab0329aa588f66e6c4b14f41967b2359b248fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:be:e6:13:4a:c8:bb:ac:77:6c:64:d2:ac:
c8:c7:22:9e:d1:a3:ff:cb:6d:af:f2:59:33:bc:44:
7f:7b:4c:dc:2a:a3:79:c0:cd:37:50:ba:a2:c6:78:
1a:8a:64:4e:95:7b:c3:ca:1c:d9:80:da:cf:0d:ff:
6f:c3:b2:fe:85:75:81:ca:4c:15:e3:55:33:e1:fe:
86:8e:9b:6f:e2:64:97:a3:e7:ed:e1:7b:02:87:a8:
5b:82:70:f5:7c:dd:c4:ee:86:17:ee:76:fb:f4:a4:
15:da:d9:13:89:f0:85:54:3d:d9:6b:75:a7:a0:d3:
1b:fd:b0:69:b1:c3:10:bd:fc:08:6e:a7:e8:c9:5b:
1c:88:4d:da:60:0a:3d:33:7d:4f:22:1a:93:6b:db:
6f:15:c3:d5:01:8d:2f:00:f2:c3:ca:c4:e6:6f:bc:
26:9c:a5:f3:da:36:de:37:2e:98:12:96:59:55:72:
f9:25:77:a4:b2:99:27:9e:0e:ba:db:9c:ac:32:4d:
ca:0f:49:4f:2d:1e:9a:53:f0:27:1a:dd:35:0d:70:
9e:f2:85:10:00:14:30:cc:9d:ae:05:34:ba:54:e1:
2a:59:8f:05:06:f3:d9:0b:ee:e0:e3:bf:9b:68:8d:
2b:e4:a1:9e:bc:73:b8:10:df:49:a7:3b:43:36:4e:
c7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B0:32:9A:A5:88:F6:6E:6C:4B:14:F4:19:67:B2:35:9B:24:8F:AE
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a2:dc:30:6d:39:5b:1f:d4:90:38:01:b3:cd:8a:e4:f7:62:
9e:19:32:1a:08:65:6f:b2:be:ed:1a:fb:10:c1:e7:36:3d:67:
04:f9:7d:06:bd:42:26:53:39:6a:97:76:5a:6e:86:22:34:63:
88:8e:ba:83:ca:19:ee:7e:58:18:41:d1:ea:f5:ef:69:cc:92:
2c:bd:0f:64:40:0d:e8:b4:5b:06:0b:78:af:b5:1f:77:9e:c0:
8c:5c:5d:57:c4:55:8e:c2:4a:d0:38:d1:57:c3:86:cb:da:95:
02:4e:1f:ea:9e:8f:b0:40:6e:68:1d:07:80:92:e3:ee:73:93:
04:bb:1a:58:76:da:02:8c:ef:dd:36:3a:17:69:02:de:7e:1b:
bf:37:00:8d:88:c9:53:32:5f:90:8b:e2:e1:9b:27:c0:17:13:
61:88:67:fc:62:07:ab:30:d0:65:91:3a:ad:57:c1:98:d1:48:
5b:4f:a6:f4:0c:18:f7:33:ac:15:d2:d3:c1:61:77:19:2f:c9:
ad:c7:ce:67:c8:0c:80:61:c1:b8:dd:6d:ff:62:64:16:22:35:
60:46:83:ed:f9:52:d2:4e:a7:fc:00:63:0a:41:95:82:12:75:
1a:8d:19:77:15:16:95:0b:ce:da:ef:ab:30:37:03:16:00:ed:
41:92:a9:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYKMWFmRgZ/BmnoL5RRhQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OWQyN2NlMDcyY2EzMzZkM2FmYWFiODg3OWY5NGVjNjM0
NTU2NjkwHhcNMjUwODIzMTAwMTUzWhcNMjUwODI0MTAwMTUzWjAzMTEwLwYDVQQD
EyhkYWIwMzI5YWE1ODhmNjZlNmM0YjE0ZjQxOTY3YjIzNTliMjQ4ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0W+5hNKyLusd2xk0qzIxyKe0aP/
y22v8lkzvER/e0zcKqN5wM03ULqixngaimROlXvDyhzZgNrPDf9vw7L+hXWBykwV
41Uz4f6Gjptv4mSXo+ft4XsCh6hbgnD1fN3E7oYX7nb79KQV2tkTifCFVD3Za3Wn
oNMb/bBpscMQvfwIbqfoyVsciE3aYAo9M31PIhqTa9tvFcPVAY0vAPLDysTmb7wm
nKXz2jbeNy6YEpZZVXL5JXekspknng6625ysMk3KD0lPLR6aU/AnGt01DXCe8oUQ
ABQwzJ2uBTS6VOEqWY8FBvPZC+7g47+baI0r5KGevHO4EN9JpztDNk7HjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqwMpqliPZubEsU9BlnsjWbJI+uMB8GA1UdIwQY
MBaAFHWdJ84HLKM206+quIeflOxjRVZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mMTdhMjctNDU5OS00NWI1LWE2NmUt
NzAxMjNmNDk1MTEwLzEvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mMTdhMjctNDU5OS00NWI1LWE2NmUtNzAxMjNmNDk1MTEw
LzEvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKLcMG05
Wx/UkDgBs82K5PdinhkyGghlb7K+7Rr7EMHnNj1nBPl9Br1CJlM5apd2Wm6GIjRj
iI66g8oZ7n5YGEHR6vXvacySLL0PZEAN6LRbBgt4r7Ufd57AjFxdV8RVjsJK0DjR
V8OGy9qVAk4f6p6PsEBuaB0HgJLj7nOTBLsaWHbaAozv3TY6F2kC3n4bvzcAjYjJ
UzJfkIvi4ZsnwBcTYYhn/GIHqzDQZZE6rVfBmNFIW0+m9AwY9zOsFdLTwWF3GS/J
rcfOZ8gMgGHBuN1t/2JkFiI1YEaD7flS0k6n/ABjCkGVghJ1Go0ZdxUWlQvO2u+r
MDcDFgDtQZKpyw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:23 2025 by rpki-client