Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json)
Hash identifier: YEgc9XyJ9YK7cfp9Id4fyFDN7bJU48/btC/J5qgcwwo=
Subject key identifier: 82:92:23:BA:16:5A:4C:0F:D7:ED:A3:52:7F:53:A6:9E:2C:74:3F:F2
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 0198D5BC2E47CEC44C84841766F2FAEA6E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
Manifest number: 1115
Signing time: Sat 23 Aug 2025 07:02:16 +0000
Manifest this update: Sat 23 Aug 2025 07:02:16 +0000
Manifest next update: Sun 24 Aug 2025 07:02:16 +0000
Files and hashes: 1: IqOWD9aJ14QW67iQSHAr_IsG4xE.roa (hash: w3ZVvZLPlnQKzQOQmLMJRlyI3uHeVIilgUta/ectFxM=)
2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: YbLKmZ84sLyXM2GpVWfXABNVerLneTJoGGqv5IS60Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2e:47:ce:c4:4c:84:84:17:66:f2:fa:ea:6e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Aug 23 07:02:16 2025 GMT
Not After : Aug 24 07:02:16 2025 GMT
Subject: CN=829223ba165a4c0fd7eda3527f53a69e2c743ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bc:f7:e0:7e:b9:52:84:52:7b:fb:7e:5d:8f:
dc:d3:6d:ef:b4:e2:57:37:08:99:1d:03:e3:b6:8d:
81:b9:d3:bb:b6:d5:1f:29:49:b6:05:9d:78:2e:69:
4f:7d:85:c3:5c:f0:4e:f8:e0:9d:08:00:98:90:4c:
a1:d2:ca:d2:bf:b1:f4:9f:ad:86:b9:67:f1:9a:05:
16:ea:c3:3f:44:95:b8:38:5f:f1:82:f7:2e:bd:f0:
fb:a6:da:a2:a9:66:65:d7:05:f5:4c:2a:27:9d:7a:
5c:93:27:88:db:9f:98:16:27:39:16:3b:14:65:e3:
8d:14:7a:e2:77:f8:d3:ac:c5:68:74:8c:bc:5a:31:
72:8b:b1:37:0a:e0:ad:76:14:3c:27:36:37:6c:b8:
41:3d:4a:b4:5f:15:ea:83:3e:b6:38:e5:0f:26:99:
26:36:d1:98:8f:bd:99:b7:a1:4f:b1:7e:28:27:04:
12:63:40:3b:b3:54:ac:4d:d3:ae:a8:0a:52:5a:07:
cf:fc:2c:06:92:6c:b9:06:f7:2e:16:60:b6:96:97:
9c:2d:47:1c:88:3c:b8:63:a8:83:a5:ca:dd:03:a0:
1b:b2:bc:a3:7d:ed:aa:d7:72:14:87:c5:6d:c7:76:
25:fe:99:ec:89:b2:8c:e4:43:c1:63:9c:e4:63:02:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:92:23:BA:16:5A:4C:0F:D7:ED:A3:52:7F:53:A6:9E:2C:74:3F:F2
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:82:fc:99:d7:d7:7d:bc:15:3a:84:3d:50:a2:c7:bc:2b:eb:
da:2e:80:74:45:47:33:1a:9c:81:42:9e:16:8e:b1:41:18:92:
49:43:23:84:bb:38:ee:22:32:7f:7d:d8:e4:e2:53:e8:2f:ea:
f6:77:c7:0c:60:5f:07:22:7c:a7:04:ff:33:aa:1a:6a:9c:56:
89:c1:0e:b4:85:1c:13:65:64:2a:0d:ca:6f:ba:d4:02:68:91:
5c:01:ac:78:dd:a1:b9:41:6c:f7:55:81:87:5a:83:5b:ca:1f:
c9:f9:3f:e2:05:51:74:d2:45:10:9c:c2:24:4c:00:30:7e:f8:
cd:79:b8:64:47:24:a9:ee:24:75:47:c6:fd:c3:b4:c7:99:8a:
57:9a:b9:a3:7d:af:57:1b:d3:97:71:f2:00:b5:62:40:fe:67:
48:62:12:42:bb:8a:57:40:79:4f:66:98:28:e8:02:5b:7f:be:
ad:19:bd:c3:c3:d7:bd:2f:78:24:17:4d:ab:f1:99:0a:31:38:
ab:92:74:8f:31:90:d5:40:47:70:9b:ec:12:82:56:d9:c8:a5:
5c:19:7d:ac:59:65:f4:ee:24:df:7b:18:3a:7c:9c:20:43:c9:
4d:c1:c7:97:31:7d:65:5e:6f:21:4c:be:a8:28:72:cf:2e:74:
40:2a:15:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvC5HzsRMhIQXZvL66m4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzI4ZjMyMTNlYTI2MTQ0ZWNjYmE5MGNkNWQ4MzQ0ODIx
ZmFmM2IwHhcNMjUwODIzMDcwMjE2WhcNMjUwODI0MDcwMjE2WjAzMTEwLwYDVQQD
Eyg4MjkyMjNiYTE2NWE0YzBmZDdlZGEzNTI3ZjUzYTY5ZTJjNzQzZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLz34H65UoRSe/t+XY/c023vtOJX
NwiZHQPjto2BudO7ttUfKUm2BZ14LmlPfYXDXPBO+OCdCACYkEyh0srSv7H0n62G
uWfxmgUW6sM/RJW4OF/xgvcuvfD7ptqiqWZl1wX1TConnXpckyeI25+YFic5FjsU
ZeONFHrid/jTrMVodIy8WjFyi7E3CuCtdhQ8JzY3bLhBPUq0XxXqgz62OOUPJpkm
NtGYj72Zt6FPsX4oJwQSY0A7s1SsTdOuqApSWgfP/CwGkmy5BvcuFmC2lpecLUcc
iDy4Y6iDpcrdA6Absryjfe2q13IUh8Vtx3Yl/pnsibKM5EPBY5zkYwJouQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKSI7oWWkwP1+2jUn9Tpp4sdD/yMB8GA1UdIwQY
MBaAFHcyjzIT6iYUTsy6kM1dg0SCH687MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpLUE1oUHFKaFJPekxxUXpWMkRSSUlmcnpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85MjYyNjktY2IxNy00Y2MyLTg2NTYt
ODc4MjdlNTcxMzIzLzEvZHpLUE1oUHFKaFJPekxxUXpWMkRSSUlmcnpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85MjYyNjktY2IxNy00Y2MyLTg2NTYtODc4MjdlNTcxMzIz
LzEvZHpLUE1oUHFKaFJPekxxUXpWMkRSSUlmcnpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYL8mdfX
fbwVOoQ9UKLHvCvr2i6AdEVHMxqcgUKeFo6xQRiSSUMjhLs47iIyf33Y5OJT6C/q
9nfHDGBfByJ8pwT/M6oaapxWicEOtIUcE2VkKg3Kb7rUAmiRXAGseN2huUFs91WB
h1qDW8ofyfk/4gVRdNJFEJzCJEwAMH74zXm4ZEckqe4kdUfG/cO0x5mKV5q5o32v
VxvTl3HyALViQP5nSGISQruKV0B5T2aYKOgCW3++rRm9w8PXvS94JBdNq/GZCjE4
q5J0jzGQ1UBHcJvsEoJW2cilXBl9rFll9O4k33sYOnycIEPJTcHHlzF9ZV5vIUy+
qChyzy50QCoV7g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:08:00 2025 by rpki-client