Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
File: DZ40sUlHfVXvC1lipeXgDN-1hIk.mft (raw, json)
Hash identifier: hysgrxKlnn8IvIiMyEpLb9grTsJKPz73bnR9LWNjizw=
Subject key identifier: 6F:B9:02:05:6A:99:9F:A4:AC:99:95:DA:DC:AF:59:BE:2C:CE:5D:51
Authority key identifier: 0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
Certificate issuer: /CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Certificate serial: 01984776B497E2C3017AC11776C03EBFC878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
Manifest number: 133C
Signing time: Sat 26 Jul 2025 16:00:18 +0000
Manifest this update: Sat 26 Jul 2025 16:00:18 +0000
Manifest next update: Sun 27 Jul 2025 16:00:18 +0000
Files and hashes: 1: DZ40sUlHfVXvC1lipeXgDN-1hIk.crl (hash: ShrVHvEakCfo+usBixFp+Y/z+xjh2LRZZRdl+NhEy5Q=)
2: WGiFR-bGPm6J5ZNuq_i5kJB6Nzw.roa (hash: 74v2TFsnggZrqZFnVMwJ7ZEDqgCLlK+dkXL3Ua1EXV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:b4:97:e2:c3:01:7a:c1:17:76:c0:3e:bf:c8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Validity
Not Before: Jul 26 16:00:18 2025 GMT
Not After : Jul 27 16:00:18 2025 GMT
Subject: CN=6fb902056a999fa4ac9995dadcaf59be2cce5d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:8b:17:4b:a3:2a:b9:82:63:74:08:31:47:
f1:0a:1d:c1:cd:8f:81:f6:f4:d5:84:b6:a9:86:4e:
8c:37:da:fd:0f:7f:55:cc:05:8d:89:27:77:79:f9:
d1:b8:f4:de:b8:88:65:bd:6b:d7:78:9e:09:d0:95:
90:a7:87:2d:99:04:38:13:1b:39:61:b9:9c:17:b4:
d8:78:6c:29:a1:97:97:6c:63:23:de:8e:4d:f0:c5:
4a:dd:c3:db:2a:ef:ba:3b:02:dc:8f:26:ee:e7:2a:
8e:4d:66:08:1f:a8:39:00:b0:ba:74:dc:5c:61:c6:
51:67:cf:7c:ac:7f:53:cf:04:f0:af:48:ab:42:79:
70:fc:b5:b2:76:a5:34:ea:86:d3:70:c9:93:2d:25:
71:24:c9:c9:25:62:7d:e9:05:cc:83:8c:55:62:97:
63:f9:b9:f7:f0:3d:8f:13:7d:30:63:17:cd:93:a4:
c3:71:39:14:91:ab:d1:75:59:a0:cd:30:db:1a:d0:
12:de:b9:60:b8:d7:00:63:f1:ab:d5:44:e6:cf:49:
2c:b0:96:46:35:d1:fa:f4:15:72:63:bc:e5:e9:1c:
fe:92:58:fd:b4:67:bf:52:52:14:7a:a7:62:92:1b:
ac:52:48:ad:90:b5:8e:71:50:bd:8a:69:3b:66:38:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B9:02:05:6A:99:9F:A4:AC:99:95:DA:DC:AF:59:BE:2C:CE:5D:51
X509v3 Authority Key Identifier:
keyid:0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1f:af:a9:50:d1:d4:d4:3d:31:82:02:54:9b:22:0e:f1:d3:
ad:b5:57:ff:c4:ca:d7:4f:94:c0:f9:c1:90:c5:89:ac:12:69:
a2:e2:e3:ca:36:c9:2a:1b:a4:f2:60:91:e1:77:f4:f8:d9:0f:
3d:f2:27:c8:a8:fa:f1:72:59:06:bb:79:e1:8d:0b:09:53:12:
79:54:95:07:f9:b6:0d:d2:8f:ae:9e:35:98:0d:14:d8:22:5c:
f6:f6:63:e2:df:b2:cb:a0:30:2c:74:3a:82:17:19:78:86:cc:
df:f6:52:cb:13:e0:de:8e:d9:dc:d5:54:63:c8:13:24:a7:0e:
fc:7f:cd:43:9d:6e:7d:02:5b:b9:3f:b5:7a:b2:6d:48:f4:9a:
4e:51:6f:70:48:44:21:ee:37:93:e4:a9:fe:a7:1e:af:f9:2e:
dd:81:41:f3:d6:7d:de:a8:7e:d8:b2:56:3b:c6:17:a8:f2:9d:
6b:bf:3a:64:9f:99:4b:a6:e4:11:c0:37:c1:c2:52:4e:bd:5e:
1c:69:9c:0c:b9:47:a3:e6:dc:1c:b1:31:a6:59:34:86:ce:2c:
ea:08:a1:5e:33:3b:0e:15:ed:87:31:cc:4f:46:c3:7c:76:80:
fa:39:b4:32:aa:1e:9c:4a:7d:05:22:2c:a2:53:17:d0:12:1e:
eb:e9:b5:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdrSX4sMBesEXdsA+v8h4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOWUzNGIxNDk0NzdkNTVlZjBiNTk2MmE1ZTVlMDBjZGZi
NTg0ODkwHhcNMjUwNzI2MTYwMDE4WhcNMjUwNzI3MTYwMDE4WjAzMTEwLwYDVQQD
Eyg2ZmI5MDIwNTZhOTk5ZmE0YWM5OTk1ZGFkY2FmNTliZTJjY2U1ZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBWLF0ujKrmCY3QIMUfxCh3BzY+B
9vTVhLaphk6MN9r9D39VzAWNiSd3efnRuPTeuIhlvWvXeJ4J0JWQp4ctmQQ4Exs5
YbmcF7TYeGwpoZeXbGMj3o5N8MVK3cPbKu+6OwLcjybu5yqOTWYIH6g5ALC6dNxc
YcZRZ898rH9TzwTwr0irQnlw/LWydqU06obTcMmTLSVxJMnJJWJ96QXMg4xVYpdj
+bn38D2PE30wYxfNk6TDcTkUkavRdVmgzTDbGtAS3rlguNcAY/Gr1UTmz0kssJZG
NdH69BVyY7zl6Rz+klj9tGe/UlIUeqdikhusUkitkLWOcVC9imk7ZjgYiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+5AgVqmZ+krJmV2tyvWb4szl1RMB8GA1UdIwQY
MBaAFA2eNLFJR31V7wtZYqXl4AzftYSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFo0MHNVbEhmVlh2QzFsaXBlWGdETi0xaElrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zNTMyODItNTNlMi00NmEyLThmYzQt
NDFkNDlhOGZmYzgxLzEvRFo0MHNVbEhmVlh2QzFsaXBlWGdETi0xaElrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zNTMyODItNTNlMi00NmEyLThmYzQtNDFkNDlhOGZmYzgx
LzEvRFo0MHNVbEhmVlh2QzFsaXBlWGdETi0xaElrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGh+vqVDR
1NQ9MYICVJsiDvHTrbVX/8TK10+UwPnBkMWJrBJpouLjyjbJKhuk8mCR4Xf0+NkP
PfInyKj68XJZBrt54Y0LCVMSeVSVB/m2DdKPrp41mA0U2CJc9vZj4t+yy6AwLHQ6
ghcZeIbM3/ZSyxPg3o7Z3NVUY8gTJKcO/H/NQ51ufQJbuT+1erJtSPSaTlFvcEhE
Ie43k+Sp/qcer/ku3YFB89Z93qh+2LJWO8YXqPKda786ZJ+ZS6bkEcA3wcJSTr1e
HGmcDLlHo+bcHLExplk0hs4s6gihXjM7DhXthzHMT0bDfHaA+jm0MqoenEp9BSIs
olMX0BIe6+m1jA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:17:56 2025 by rpki-client