Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: Pu1/5tCza5EnUG4e49ynRto9Mo4O0O3zqqrQFrQY73Y=
Subject key identifier: E2:A8:3C:B9:8C:70:22:5A:3B:90:7E:D5:C5:7F:C5:AC:53:AC:AC:94
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 019A71B7FBE1407F959D30A8459281417C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 16ED
Signing time: Tue 11 Nov 2025 07:01:14 +0000
Manifest this update: Tue 11 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: TWwBU5GTxc1xweErt1IPz0kIJz400WtW/luMZ2xRFY0=)
2: lKi6SoPHv8adD_f0H8JMR-0tkso.roa (hash: IDdp81FcSfbScsI5eFdQ3u0Q5w/9MnWkbMQFbCRI7Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fb:e1:40:7f:95:9d:30:a8:45:92:81:41:7c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Nov 11 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=e2a83cb98c70225a3b907ed5c57fc5ac53acac94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:be:ce:18:36:80:02:d0:81:b1:0d:8e:78:
b9:7c:80:ac:b1:ea:0c:19:88:9c:d0:f0:36:b1:ac:
24:ba:42:fb:80:a8:a8:e9:b4:2e:c9:ef:5a:1c:6f:
06:7a:f2:13:91:28:65:4b:41:3c:78:a7:cb:e6:d3:
f4:58:7f:7c:6b:56:79:e7:6d:b2:58:29:bb:7d:e3:
24:34:5f:b5:b9:2c:73:88:bf:76:7f:0c:31:28:55:
53:2d:64:7f:2e:c1:ef:2d:49:00:e7:25:74:b5:b9:
9d:ca:b5:85:52:15:29:9f:6a:38:10:01:e7:e0:9f:
76:29:7d:7b:9a:f0:59:8c:bc:47:00:fe:d4:50:78:
fd:1a:50:16:c9:06:60:79:31:c7:51:33:83:03:af:
93:4c:1f:c0:ff:10:89:b3:99:9d:7e:f8:5a:dc:2e:
35:bf:0f:44:90:e3:63:44:b1:44:44:f1:d5:09:b4:
db:e2:60:25:83:68:ea:32:79:5b:f4:ab:ce:6c:7c:
92:de:a4:84:61:de:b5:95:81:96:fa:dc:ac:08:67:
38:34:6b:e7:53:bd:59:c9:cf:c6:36:7d:be:ad:55:
af:f0:10:b3:1f:12:60:e5:c9:7f:58:fa:85:32:3b:
06:67:74:3d:30:9d:b6:f6:be:13:4e:28:3e:ca:b8:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A8:3C:B9:8C:70:22:5A:3B:90:7E:D5:C5:7F:C5:AC:53:AC:AC:94
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:23:e6:16:e5:ea:60:62:a9:23:64:7a:53:6e:60:00:81:89:
a7:e5:cc:00:d2:e8:87:6a:c8:fb:aa:39:e7:78:b5:7d:5d:f2:
6f:89:dc:84:bb:93:f1:56:9d:df:56:26:c4:74:a3:7f:dc:b3:
6b:16:77:d8:b0:8d:c9:8f:ff:d5:84:06:a0:33:75:71:da:1d:
89:6d:f1:e8:5d:9a:e6:ae:10:c3:0f:e4:1c:c1:65:04:a7:63:
89:3c:a6:1b:b0:e3:c4:70:ed:4c:36:e1:ee:f2:fb:9b:50:ab:
60:f9:f3:7f:f7:36:c1:1d:bb:6f:69:33:34:52:2e:f2:17:72:
e0:d5:c4:fa:db:dc:b9:5b:52:c8:35:c5:39:63:b4:d7:f2:6e:
f4:68:90:f5:61:46:a9:0a:78:08:7b:44:65:3d:47:c8:ef:bf:
4f:c4:ef:71:7c:9a:6b:53:3f:ac:71:92:3e:bd:00:60:89:b5:
04:55:cd:ae:75:37:17:d2:a1:dd:72:9f:bf:59:49:07:da:62:
18:d9:81:cb:a2:44:f8:dd:21:af:d0:6d:89:d2:26:44:eb:77:
31:0b:43:83:7e:17:31:a8:dc:fa:85:bc:62:4a:6a:1c:c4:67:
f6:9b:77:32:6e:05:8a:0e:73:b2:e4:84:52:16:21:67:78:cf:
dc:e4:9f:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt/vhQH+VnTCoRZKBQXxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzExMGE0MzcwNGQ5NTQ5ZGY3MTU2ZTNhNzg5ZTYyMjg1
YjE2OTMwHhcNMjUxMTExMDcwMTE0WhcNMjUxMTEyMDcwMTE0WjAzMTEwLwYDVQQD
EyhlMmE4M2NiOThjNzAyMjVhM2I5MDdlZDVjNTdmYzVhYzUzYWNhYzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmW+zhg2gALQgbENjni5fICsseoM
GYic0PA2sawkukL7gKio6bQuye9aHG8GevITkShlS0E8eKfL5tP0WH98a1Z5522y
WCm7feMkNF+1uSxziL92fwwxKFVTLWR/LsHvLUkA5yV0tbmdyrWFUhUpn2o4EAHn
4J92KX17mvBZjLxHAP7UUHj9GlAWyQZgeTHHUTODA6+TTB/A/xCJs5mdfvha3C41
vw9EkONjRLFERPHVCbTb4mAlg2jqMnlb9KvObHyS3qSEYd61lYGW+tysCGc4NGvn
U71Zyc/GNn2+rVWv8BCzHxJg5cl/WPqFMjsGZ3Q9MJ229r4TTig+yrgcnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKoPLmMcCJaO5B+1cV/xaxTrKyUMB8GA1UdIwQY
MBaAFHcxEKQ3BNlUnfcVbjp4nmIoWxaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAt
OWEzODE1OWI3OTRlLzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAtOWEzODE1OWI3OTRl
LzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSPmFuXq
YGKpI2R6U25gAIGJp+XMANLoh2rI+6o553i1fV3yb4nchLuT8Vad31YmxHSjf9yz
axZ32LCNyY//1YQGoDN1cdodiW3x6F2a5q4Qww/kHMFlBKdjiTymG7DjxHDtTDbh
7vL7m1CrYPnzf/c2wR27b2kzNFIu8hdy4NXE+tvcuVtSyDXFOWO01/Ju9GiQ9WFG
qQp4CHtEZT1HyO+/T8TvcXyaa1M/rHGSPr0AYIm1BFXNrnU3F9Kh3XKfv1lJB9pi
GNmBy6JE+N0hr9BtidImROt3MQtDg34XMajc+oW8YkpqHMRn9pt3Mm4Fig5zsuSE
UhYhZ3jP3OSfIQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:08 2025 by rpki-client