
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File: d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier: Zng15fzHsZ4QApm02AobwpLBIP4pQXZW2+SgdvOD8U8=
Subject key identifier: B4:5C:D1:E3:43:7B:DD:91:E1:41:A6:B7:DF:17:9B:AE:91:1D:A2:E4
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer: /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial: 01984A0A137C68466AF6BDDF26A5F0EF7FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number: 1525
Signing time: Sun 27 Jul 2025 04:00:30 +0000
Manifest this update: Sun 27 Jul 2025 04:00:30 +0000
Manifest next update: Mon 28 Jul 2025 04:00:30 +0000
Files and hashes: 1: 1-jRnyFGmEx1CVoLDNNDO26bccvY.roa (hash: 23QvIcsUor9KhcMI2prwonWuUHDRgDZgiqunE4RPe6c=)
2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: aoUSGIRMz9KHs89jppQ8RAZTp5HWeZOd9KVJ/yTIisA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:13:7c:68:46:6a:f6:bd:df:26:a5:f0:ef:7f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Validity
Not Before: Jul 27 04:00:30 2025 GMT
Not After : Jul 28 04:00:30 2025 GMT
Subject: CN=b45cd1e3437bdd91e141a6b7df179bae911da2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b0:2c:3c:f8:75:e7:4f:0e:5e:ee:cb:10:ae:
7d:21:e6:08:bd:5e:f3:4d:48:ea:92:da:af:4c:00:
b8:fc:5a:6f:0d:56:b2:a1:39:a2:85:ea:26:29:29:
81:23:24:a7:2d:71:05:53:c4:12:c1:68:11:30:1f:
f7:1d:f0:7e:6a:79:ed:8e:f9:d8:ef:85:ca:d1:6f:
d9:50:dc:43:77:5f:21:10:a8:22:40:02:4e:fb:4b:
d1:44:df:0e:5c:6a:db:15:55:9b:b9:73:d2:f3:ca:
67:7a:b1:66:3e:8b:17:06:7c:e9:7f:84:1c:cb:ff:
f0:4b:5e:22:79:1b:6f:fa:84:31:67:8c:c7:29:8c:
24:70:e3:5e:4b:02:b3:a2:50:51:dc:7e:7b:ad:ba:
40:b2:bc:a4:15:74:2a:e3:19:0d:09:01:56:4f:02:
34:5c:a2:92:27:1d:61:70:2e:9a:6c:ef:72:5a:8a:
72:35:f3:f9:fb:1b:d2:35:9c:c5:74:e3:c4:07:bd:
6b:ae:2f:d9:c4:b7:e3:f6:d9:6f:49:23:92:51:f0:
f8:3b:4b:f7:7b:c8:39:42:7c:f4:2d:8f:a7:80:8b:
58:0f:df:02:d1:d6:52:da:82:e8:87:29:01:41:35:
e0:48:ff:74:f4:73:cf:14:54:29:2d:74:ef:45:5c:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5C:D1:E3:43:7B:DD:91:E1:41:A6:B7:DF:17:9B:AE:91:1D:A2:E4
X509v3 Authority Key Identifier:
keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:28:d9:db:b1:99:fb:f2:bf:6f:d0:67:1e:f0:ec:03:bb:3e:
d9:27:77:27:ec:49:91:91:e2:f0:f7:83:76:66:bf:dd:43:e5:
f4:b5:b0:54:70:1e:69:1e:3b:8e:57:96:fc:7c:1b:0a:d7:05:
2f:8f:01:43:f1:a3:be:20:84:1d:68:bd:b8:82:f7:b2:0d:bb:
97:cf:a4:e3:b5:f5:fb:c3:a5:41:1d:5c:eb:15:43:e4:8f:f3:
78:4f:81:3e:d5:ac:2b:ba:36:6f:25:b1:27:79:14:40:f0:d0:
24:26:d2:82:6f:65:51:82:54:99:16:fa:ca:86:82:d5:7d:3a:
10:50:75:39:d6:f8:98:af:64:c3:50:4f:95:28:be:30:d8:56:
53:78:68:12:d6:5f:ae:89:ec:2e:1c:7b:f2:79:1d:91:ce:fc:
d0:f8:34:e7:d4:52:33:ab:d0:8f:cf:75:da:80:8a:9a:6c:04:
a1:a1:53:26:bb:0d:7b:07:d5:f4:fa:27:4f:54:26:68:da:01:
09:3a:3a:91:79:0b:b9:cc:f9:b8:94:1f:ba:c7:9c:a6:1e:cb:
c9:e5:9f:78:1a:7f:42:23:d9:28:e1:a2:09:c1:03:bf:be:cb:
09:fb:81:fb:b0:16:45:49:9b:4c:c1:42:81:08:03:49:ac:93:
b8:65:73:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKChN8aEZq9r3fJqXw73/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NWIzMzZjM2U0ODk3YTUyYjM5YzNhZGFhZWNjZWM2YmY3
MGNlN2QwHhcNMjUwNzI3MDQwMDMwWhcNMjUwNzI4MDQwMDMwWjAzMTEwLwYDVQQD
EyhiNDVjZDFlMzQzN2JkZDkxZTE0MWE2YjdkZjE3OWJhZTkxMWRhMmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7AsPPh1508OXu7LEK59IeYIvV7z
TUjqktqvTAC4/FpvDVayoTmiheomKSmBIySnLXEFU8QSwWgRMB/3HfB+anntjvnY
74XK0W/ZUNxDd18hEKgiQAJO+0vRRN8OXGrbFVWbuXPS88pnerFmPosXBnzpf4Qc
y//wS14ieRtv+oQxZ4zHKYwkcONeSwKzolBR3H57rbpAsrykFXQq4xkNCQFWTwI0
XKKSJx1hcC6abO9yWopyNfP5+xvSNZzFdOPEB71rri/ZxLfj9tlvSSOSUfD4O0v3
e8g5Qnz0LY+ngItYD98C0dZS2oLohykBQTXgSP909HPPFFQpLXTvRVxCYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRc0eNDe92R4UGmt98Xm66RHaLkMB8GA1UdIwQY
MBaAFHdbM2w+SJelKznDrarszsa/cM59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMDQ3NmEtOGFjNy00NTZjLWI5M2Qt
M2RjMTQxNzBkNjJhLzEvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMDQ3NmEtOGFjNy00NTZjLWI5M2QtM2RjMTQxNzBkNjJh
LzEvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCjZ27GZ
+/K/b9BnHvDsA7s+2Sd3J+xJkZHi8PeDdma/3UPl9LWwVHAeaR47jleW/HwbCtcF
L48BQ/GjviCEHWi9uIL3sg27l8+k47X1+8OlQR1c6xVD5I/zeE+BPtWsK7o2byWx
J3kUQPDQJCbSgm9lUYJUmRb6yoaC1X06EFB1Odb4mK9kw1BPlSi+MNhWU3hoEtZf
ronsLhx78nkdkc780Pg059RSM6vQj8912oCKmmwEoaFTJrsNewfV9PonT1QmaNoB
CTo6kXkLucz5uJQfusecph7LyeWfeBp/QiPZKOGiCcEDv77LCfuB+7AWRUmbTMFC
gQgDSayTuGVzPA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:17:35 2025 by rpki-client