Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json)
Hash identifier: P9jZ6ii9VzAZNtsnDiNcFwYIZyg0/vZBGWo+qu6yLLs=
Subject key identifier: 1D:09:43:D5:C3:97:41:E3:FD:00:94:A3:71:FF:2E:2D:99:B0:05:2D
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial: 01985268C4F96008BB8C0A505C9979DC6663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
Manifest number: 1608
Signing time: Mon 28 Jul 2025 19:00:54 +0000
Manifest this update: Mon 28 Jul 2025 19:00:54 +0000
Manifest next update: Tue 29 Jul 2025 19:00:54 +0000
Files and hashes: 1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: zZyoqZ9DHFQdveY+XkqetLdhtX4LSFdRwCFj563JAEA=)
2: oiZHTdtEDz6aP8WgUPcMGh6h5wQ.roa (hash: ewlicz9ndLYefeC/+lwNbWi0WIXINkEHOt0Ubc6GHQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:c4:f9:60:08:bb:8c:0a:50:5c:99:79:dc:66:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Validity
Not Before: Jul 28 19:00:54 2025 GMT
Not After : Jul 29 19:00:54 2025 GMT
Subject: CN=1d0943d5c39741e3fd0094a371ff2e2d99b0052d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:49:6b:9b:e3:c1:4e:c1:09:9c:e4:fe:34:
10:0e:74:7e:a2:01:68:73:00:e5:84:a9:1b:df:7b:
25:a4:4a:12:72:82:6a:be:cc:70:df:9d:f2:71:08:
eb:84:8c:ad:ff:65:66:cb:e8:46:32:56:d3:f6:a5:
73:f5:31:59:76:74:20:06:e9:32:54:1c:82:3a:b8:
9d:cd:b1:94:dc:1d:bb:92:2b:40:66:8e:4f:a9:1f:
7e:a3:a0:9d:43:ba:07:cb:db:8c:25:fa:78:b6:db:
50:a5:f2:76:47:da:af:88:56:ba:bd:24:4d:4c:5d:
bb:b2:72:35:15:65:01:fc:96:0b:e1:25:e1:a5:04:
27:90:47:a9:d4:b2:f0:f2:81:92:3b:57:15:26:37:
73:ba:1d:ff:80:d1:32:db:a7:00:c5:80:d4:55:c5:
d7:0d:1d:0a:8f:f7:fd:ca:52:b1:2a:75:fa:99:8b:
63:aa:80:bc:66:99:44:fa:fb:7e:58:71:02:28:ac:
09:73:b0:c7:2f:46:a8:8a:b7:26:35:eb:ac:39:39:
fa:5d:2c:70:e6:a9:35:29:fa:08:20:5f:7f:55:b7:
d0:09:64:16:37:ee:4f:22:38:e0:0b:fe:49:3f:b6:
eb:92:46:a5:0c:7e:12:70:cb:b2:fd:97:61:96:7d:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:09:43:D5:C3:97:41:E3:FD:00:94:A3:71:FF:2E:2D:99:B0:05:2D
X509v3 Authority Key Identifier:
keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4d:41:0a:b8:43:4c:ae:51:c7:7d:ac:86:5a:16:59:c1:c8:
42:51:11:7f:00:06:08:48:5e:61:38:9a:6d:ec:a9:b0:24:63:
c9:20:f3:d7:06:4d:62:0b:a5:69:e1:cd:e1:37:f6:9b:99:9c:
b0:fe:e1:17:b6:2b:9c:50:3d:3c:c6:24:01:53:7d:98:66:ac:
1c:69:2c:0c:cc:7b:64:9e:78:c8:24:ef:6f:83:2e:8f:f0:39:
42:95:43:c2:3b:2e:f1:bc:82:1d:1e:ef:be:e0:a9:00:a9:c5:
f3:f5:06:3b:44:11:7e:3c:4b:a8:99:87:b3:f3:93:41:0c:6b:
2b:7e:a3:c5:7b:9c:28:8b:b2:3c:69:fc:31:ef:76:c7:02:8d:
94:e3:23:24:c7:61:99:02:25:8d:4f:14:0b:da:27:a2:79:68:
81:6e:82:8d:5d:6f:21:76:c5:b1:55:bb:31:bf:13:6d:7a:09:
4d:c7:1d:89:5e:89:cf:bb:d6:42:7d:82:21:fa:5a:8e:52:d1:
b6:dd:b8:ca:f2:16:a5:12:df:58:80:b0:38:2d:c1:d2:2a:1b:
53:51:7d:97:52:df:4a:88:df:19:61:16:c1:9f:41:4e:b2:4e:
eb:ef:26:81:69:7e:42:3c:33:78:f7:b4:e3:69:02:dc:c1:e8:
f3:22:17:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSaMT5YAi7jApQXJl53GZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMzQ0NzdhYTBmMDEyMzEzOGMwNDcyZjViMzUyOGU0ZDIx
OTNlNjgwHhcNMjUwNzI4MTkwMDU0WhcNMjUwNzI5MTkwMDU0WjAzMTEwLwYDVQQD
EygxZDA5NDNkNWMzOTc0MWUzZmQwMDk0YTM3MWZmMmUyZDk5YjAwNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QtJa5vjwU7BCZzk/jQQDnR+ogFo
cwDlhKkb33slpEoScoJqvsxw353ycQjrhIyt/2Vmy+hGMlbT9qVz9TFZdnQgBuky
VByCOridzbGU3B27kitAZo5PqR9+o6CdQ7oHy9uMJfp4tttQpfJ2R9qviFa6vSRN
TF27snI1FWUB/JYL4SXhpQQnkEep1LLw8oGSO1cVJjdzuh3/gNEy26cAxYDUVcXX
DR0Kj/f9ylKxKnX6mYtjqoC8ZplE+vt+WHECKKwJc7DHL0aoircmNeusOTn6XSxw
5qk1KfoIIF9/VbfQCWQWN+5PIjjgC/5JP7brkkalDH4ScMuy/Zdhln1FGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0JQ9XDl0Hj/QCUo3H/Li2ZsAUtMB8GA1UdIwQY
MBaAFA80R3qg8BIxOMBHL1s1KOTSGT5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAt
ZTA5YmM0ZWFlMTg5LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAtZTA5YmM0ZWFlMTg5
LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe01BCrhD
TK5Rx32shloWWcHIQlERfwAGCEheYTiabeypsCRjySDz1wZNYgulaeHN4Tf2m5mc
sP7hF7YrnFA9PMYkAVN9mGasHGksDMx7ZJ54yCTvb4Muj/A5QpVDwjsu8byCHR7v
vuCpAKnF8/UGO0QRfjxLqJmHs/OTQQxrK36jxXucKIuyPGn8Me92xwKNlOMjJMdh
mQIljU8UC9ononlogW6CjV1vIXbFsVW7Mb8TbXoJTccdiV6Jz7vWQn2CIfpajlLR
tt24yvIWpRLfWICwOC3B0iobU1F9l1LfSojfGWEWwZ9BTrJO6+8mgWl+QjwzePe0
42kC3MHo8yIXTA==
-----END CERTIFICATE-----
Generated at Mon Jul 28 23:02:26 2025 by rpki-client