Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: JuKxbmIZQWP6zh7C0KuCdsmuvQrY5rM/VInzylXpxCE=
Subject key identifier: 1C:D2:EB:41:FE:61:82:F3:90:04:E9:E3:50:6E:37:D7:5E:C7:03:4D
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 0199FB0EEE3533319BA6C08A49F1A6E2CDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 06:01:23 +0000
Manifest this update: Sun 19 Oct 2025 06:01:23 +0000
Manifest next update: Mon 20 Oct 2025 06:01:23 +0000
Files and hashes: 1: _ImNSv6eqpMmc8LhLdIjg50bCa8.roa (hash: 5CDnviEmi+ap5BPLLzbSLbS6bZVBFFpeZ3xoO+CFdbk=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: JPJOeIlMvA+88LlO9wewjZLzY6dAMsBTtg0Foyy//5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:ee:35:33:31:9b:a6:c0:8a:49:f1:a6:e2:cd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Oct 19 06:01:23 2025 GMT
Not After : Oct 20 06:01:23 2025 GMT
Subject: CN=1cd2eb41fe6182f39004e9e3506e37d75ec7034d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:f7:ec:c9:33:f7:65:ad:38:77:8d:37:32:
f1:65:ca:c2:d8:81:14:27:1f:65:5b:51:5e:53:7e:
fd:81:f4:fc:e8:7d:87:c2:1a:57:54:37:3d:b4:1f:
96:8a:3d:67:3d:27:ec:aa:a0:42:34:71:dd:ae:98:
20:29:d8:7b:ba:59:5b:6b:c7:f1:2e:1d:8f:0d:47:
fe:c2:b4:29:08:6d:c3:4c:dd:be:2b:6e:76:b7:a4:
88:69:12:c9:cc:7e:09:22:47:df:73:47:ae:e4:b3:
4b:07:39:f7:d6:09:de:b6:2b:47:98:a4:ba:0e:04:
18:4c:58:ff:62:00:4b:7f:49:0d:28:36:4a:c1:47:
f9:40:e9:f4:e6:c5:e4:43:05:0f:61:a7:76:28:9e:
80:d4:91:f4:fe:9c:cb:f1:5a:11:64:4c:50:08:56:
d5:21:c5:01:69:16:c5:73:71:61:e6:53:80:76:fa:
a3:41:b0:6e:e7:2a:3a:0e:f7:c5:44:43:4a:5b:5c:
0f:8a:bf:8e:21:08:7f:5e:a2:8b:7b:27:1d:38:38:
27:59:00:ac:7b:ca:3c:d4:3b:8e:c1:04:7d:1f:2d:
65:df:1d:4a:95:ca:78:60:7a:0d:21:f5:b2:89:c1:
ae:a1:e9:aa:4a:53:da:ee:51:d1:56:40:8b:64:37:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D2:EB:41:FE:61:82:F3:90:04:E9:E3:50:6E:37:D7:5E:C7:03:4D
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ec:d9:02:21:bb:df:a0:b5:93:17:4a:89:2f:6d:b6:d2:52:
f1:b4:ab:53:f9:a0:1c:ef:ce:c6:57:de:45:c8:81:6f:91:56:
2d:72:35:00:16:35:f8:2f:2c:da:3e:12:ae:1a:9e:ec:39:7d:
9a:d7:eb:cb:55:8f:f1:c4:81:3b:d0:15:c1:f1:29:c7:ad:42:
a6:95:17:8d:20:37:64:8e:8c:eb:2a:2a:ce:74:3b:8e:46:21:
0a:81:68:88:3e:15:51:93:ce:b2:ca:54:3d:01:1c:52:d0:d4:
96:42:0a:e6:e6:64:82:0c:88:5c:ce:d0:f9:86:e1:6d:f4:bd:
1d:6e:79:9a:b6:79:67:20:9b:dc:ac:aa:eb:18:ae:65:c6:77:
fe:a9:7e:64:6f:ea:11:53:7a:39:3f:5a:d3:37:a6:5b:2c:20:
29:a4:70:1c:ae:80:c5:30:ed:9b:08:17:ac:18:9c:fe:6e:c3:
0e:63:95:d2:49:9c:e6:4a:41:27:34:5b:72:79:00:c1:82:b3:
82:9c:a8:c1:07:be:4f:46:40:bf:76:37:60:f7:7b:b3:29:4c:
34:76:f3:b6:05:03:3a:34:3b:93:33:93:ff:5f:b0:8a:bf:5d:
3b:74:27:ff:91:15:42:f0:32:01:55:92:fd:56:a1:b1:e5:68:
19:53:7e:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Du41MzGbpsCKSfGm4s2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2JlN2NmMzI1MmE2ODk3NWQ1ZTIyNDU4OThjMDNjNGZi
NjBkZGEwHhcNMjUxMDE5MDYwMTIzWhcNMjUxMDIwMDYwMTIzWjAzMTEwLwYDVQQD
EygxY2QyZWI0MWZlNjE4MmYzOTAwNGU5ZTM1MDZlMzdkNzVlYzcwMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDX37Mkz92WtOHeNNzLxZcrC2IEU
Jx9lW1FeU379gfT86H2HwhpXVDc9tB+Wij1nPSfsqqBCNHHdrpggKdh7ullba8fx
Lh2PDUf+wrQpCG3DTN2+K252t6SIaRLJzH4JIkffc0eu5LNLBzn31gnetitHmKS6
DgQYTFj/YgBLf0kNKDZKwUf5QOn05sXkQwUPYad2KJ6A1JH0/pzL8VoRZExQCFbV
IcUBaRbFc3Fh5lOAdvqjQbBu5yo6DvfFRENKW1wPir+OIQh/XqKLeycdODgnWQCs
e8o81DuOwQR9Hy1l3x1Klcp4YHoNIfWyicGuoemqSlPa7lHRVkCLZDdxJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzS60H+YYLzkATp41BuN9dexwNNMB8GA1UdIwQY
MBaAFHc7588yUqaJddXiJFiYwDxPtg3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUt
YmVkMDU2N2VmYTZiLzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUtYmVkMDU2N2VmYTZi
LzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOzZAiG7
36C1kxdKiS9tttJS8bSrU/mgHO/OxlfeRciBb5FWLXI1ABY1+C8s2j4Srhqe7Dl9
mtfry1WP8cSBO9AVwfEpx61CppUXjSA3ZI6M6yoqznQ7jkYhCoFoiD4VUZPOsspU
PQEcUtDUlkIK5uZkggyIXM7Q+YbhbfS9HW55mrZ5ZyCb3Kyq6xiuZcZ3/ql+ZG/q
EVN6OT9a0zemWywgKaRwHK6AxTDtmwgXrBic/m7DDmOV0kmc5kpBJzRbcnkAwYKz
gpyowQe+T0ZAv3Y3YPd7sylMNHbztgUDOjQ7kzOT/1+wir9dO3Qn/5EVQvAyAVWS
/VahseVoGVN+Ig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:50 2025 by rpki-client