Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: aoTWMnS98oDYjJxh14OZWgLjcgfTNGsXRtsGPwkpRVM=
Subject key identifier: AA:21:74:00:60:25:48:CF:0F:27:97:87:9D:E3:14:66:CC:3D:43:24
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 0197B6A139A33BBA7147B8F9E37E4E5E0157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 06ED
Signing time: Sat 28 Jun 2025 13:01:48 +0000
Manifest this update: Sat 28 Jun 2025 13:01:48 +0000
Manifest next update: Sun 29 Jun 2025 13:01:48 +0000
Files and hashes: 1: Dtmeeo2Ahqu20IUfCd65FxwTl2k.roa (hash: I+vjjlJcdrLb3KMRUhvwUitmKXx1JxbgC5EfsL3L6hI=)
2: MA5FazDAuWizu2sArINAiZDNSkk.roa (hash: RRjoWKPkJksBjTPCtL+V2nNMKG6oIx2+O6vH374Aw7I=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: 8hCgW/Wp97CYOghG8JnL5t3QghIdHF3OU5Ry+RMm7nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:39:a3:3b:ba:71:47:b8:f9:e3:7e:4e:5e:01:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Jun 28 13:01:48 2025 GMT
Not After : Jun 29 13:01:48 2025 GMT
Subject: CN=aa217400602548cf0f2797879de31466cc3d4324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:87:66:1b:98:7b:3b:5d:b5:05:07:05:9b:06:
3e:c5:4a:6e:09:80:0d:5c:f0:96:6a:26:79:20:64:
39:44:14:c9:bc:7c:43:15:0e:11:3a:97:39:e8:83:
38:76:53:0f:52:a7:c6:e9:a1:e0:c2:80:06:da:01:
02:d7:e4:99:13:5d:0f:4b:1f:1a:33:44:cf:60:25:
58:5d:38:f7:13:43:7e:af:f1:16:90:9c:95:04:fd:
4a:f2:15:28:41:d7:a4:1d:3f:11:cd:eb:ae:04:bc:
c9:09:b5:ae:40:47:03:25:1c:6a:48:00:92:ad:b5:
d1:17:44:a2:6b:a2:dd:c5:bb:c1:de:dc:9e:69:dc:
b2:fa:47:0c:6b:4b:0d:3b:f2:ac:e9:78:2f:3e:f4:
0b:93:ae:91:57:69:7b:ee:ba:63:d3:eb:1b:c6:d4:
71:42:51:77:21:70:c6:f2:07:63:d4:36:f3:a2:41:
45:b7:89:7c:c8:af:d1:38:64:61:bb:00:96:a9:f7:
33:cc:d8:b2:e4:98:ab:b3:e5:03:11:9a:e5:99:49:
6d:a8:32:86:95:41:a9:9a:e2:52:e3:b7:cf:a6:79:
3e:80:48:39:07:7e:03:c0:ee:49:37:43:c1:b7:c0:
8e:60:35:27:c9:86:98:ce:66:5c:ca:6a:94:78:6e:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:21:74:00:60:25:48:CF:0F:27:97:87:9D:E3:14:66:CC:3D:43:24
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b9:99:a6:41:a4:14:ee:dc:e9:be:5f:4b:31:8b:e0:f4:86:
21:20:85:5e:8f:df:ac:26:4d:6f:86:0f:88:ad:1a:88:ee:9e:
c8:7f:2b:f8:4f:64:55:7f:42:dd:6d:16:fa:b1:b4:ec:db:c2:
c9:4b:06:81:54:f5:2f:24:56:99:b7:46:d6:aa:41:c7:e4:26:
aa:43:3e:a7:30:62:1a:82:2f:f5:6d:e5:a1:2c:ff:2a:04:a9:
12:df:5c:2e:8b:49:30:3c:39:70:08:f3:c9:4f:3d:66:37:f2:
b4:b3:42:a6:92:01:ff:28:e7:35:e9:b8:3b:ee:58:59:0d:b0:
67:27:24:72:a2:a3:aa:94:65:ab:13:16:b7:b4:20:fd:13:22:
c0:7a:be:17:43:23:3c:c2:a9:8e:46:94:27:b5:66:f4:ef:de:
c4:33:6e:ab:ad:04:dd:a2:82:11:d1:e1:12:0f:c7:30:f8:16:
73:d1:3d:b3:b4:83:cf:a4:fb:e6:ad:ae:f3:5b:9a:d8:3e:f9:
37:ec:1b:40:b8:14:7c:af:80:9b:10:d9:55:ae:b1:36:c7:b0:
3e:75:3d:cd:7e:97:74:36:1b:5e:4e:7b:02:67:1e:96:cb:ae:
94:03:4a:6f:ee:12:bb:36:8d:56:d3:3e:5c:61:a8:bd:55:44:
3a:38:87:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oTmjO7pxR7j5435OXgFXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzQ3ZTE2OGQ2OTY1ODU0NTM3NGU2YTBiNjhkMjRiOTdm
Y2QwMDYwHhcNMjUwNjI4MTMwMTQ4WhcNMjUwNjI5MTMwMTQ4WjAzMTEwLwYDVQQD
EyhhYTIxNzQwMDYwMjU0OGNmMGYyNzk3ODc5ZGUzMTQ2NmNjM2Q0MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA94dmG5h7O121BQcFmwY+xUpuCYAN
XPCWaiZ5IGQ5RBTJvHxDFQ4ROpc56IM4dlMPUqfG6aHgwoAG2gEC1+SZE10PSx8a
M0TPYCVYXTj3E0N+r/EWkJyVBP1K8hUoQdekHT8RzeuuBLzJCbWuQEcDJRxqSACS
rbXRF0Sia6LdxbvB3tyeadyy+kcMa0sNO/Ks6XgvPvQLk66RV2l77rpj0+sbxtRx
QlF3IXDG8gdj1DbzokFFt4l8yK/ROGRhuwCWqfczzNiy5Jirs+UDEZrlmUltqDKG
lUGpmuJS47fPpnk+gEg5B34DwO5JN0PBt8COYDUnyYaYzmZcymqUeG4uOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKohdABgJUjPDyeXh53jFGbMPUMkMB8GA1UdIwQY
MBaAFHc0fhaNaWWFRTdOagto0kuX/NAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2Qt
NjdlYmJjOGM2ODYyLzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2QtNjdlYmJjOGM2ODYy
LzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7mZpkGk
FO7c6b5fSzGL4PSGISCFXo/frCZNb4YPiK0aiO6eyH8r+E9kVX9C3W0W+rG07NvC
yUsGgVT1LyRWmbdG1qpBx+QmqkM+pzBiGoIv9W3loSz/KgSpEt9cLotJMDw5cAjz
yU89ZjfytLNCppIB/yjnNem4O+5YWQ2wZyckcqKjqpRlqxMWt7Qg/RMiwHq+F0Mj
PMKpjkaUJ7Vm9O/exDNuq60E3aKCEdHhEg/HMPgWc9E9s7SDz6T75q2u81ua2D75
N+wbQLgUfK+AmxDZVa6xNsewPnU9zX6XdDYbXk57AmcelsuulANKb+4SuzaNVtM+
XGGovVVEOjiH3w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:26 2025 by rpki-client