Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
File: d-Sz2VlinaKIrNim3gA-zgyTTbE.mft (raw, json)
Hash identifier: jjKkQsungg1QHGa2+YCdOdsF5FquqL3Hhota8TpsgVY=
Subject key identifier: D2:74:65:A2:DC:17:15:B4:8E:19:BC:77:66:A5:0E:DC:C2:D0:32:34
Authority key identifier: 77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1
Certificate issuer: /CN=77e4b3d959629da288acd8a6de003ece0c934db1
Certificate serial: 019A7149ABDF847FAF4F1AE46AAB3B2EE5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
Manifest number: 05BA
Signing time: Tue 11 Nov 2025 05:00:44 +0000
Manifest this update: Tue 11 Nov 2025 05:00:44 +0000
Manifest next update: Wed 12 Nov 2025 05:00:44 +0000
Files and hashes: 1: d-Sz2VlinaKIrNim3gA-zgyTTbE.crl (hash: vQjLp7EQ+93FZnHODcZuMhtqP0SjUBTphmFFi5CMG/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ab:df:84:7f:af:4f:1a:e4:6a:ab:3b:2e:e5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e4b3d959629da288acd8a6de003ece0c934db1
Validity
Not Before: Nov 11 05:00:44 2025 GMT
Not After : Nov 12 05:00:44 2025 GMT
Subject: CN=d27465a2dc1715b48e19bc7766a50edcc2d03234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:d8:fc:07:64:56:67:70:d2:a2:15:bb:4d:
3c:dc:31:55:74:26:4f:18:aa:af:79:70:ec:17:6b:
47:f0:4d:43:33:ff:f4:12:64:f7:5d:60:4a:81:9b:
67:66:3a:70:aa:d3:15:12:37:d3:8f:88:b3:6e:dd:
92:19:5b:1a:cd:ca:e8:ee:a5:5a:6f:c3:7a:2a:53:
5e:97:cc:d7:e6:e3:87:94:f5:21:43:8a:43:b1:0c:
e6:26:ae:92:75:7c:e7:de:31:4c:17:16:88:e1:86:
4e:99:c7:aa:0f:2e:d1:1a:fe:1b:7e:c5:ae:02:bd:
c4:b0:47:60:65:dd:38:a9:12:1b:5c:78:61:4e:38:
6e:73:85:8e:77:de:30:e3:82:e4:2c:d1:d0:d9:49:
f5:d8:59:ee:be:81:8e:52:4c:13:96:cc:de:00:8f:
a3:fd:25:94:62:a4:c1:1d:3f:0a:91:62:e0:e9:05:
b4:ec:b3:ae:a9:1d:80:c0:76:1e:ad:1f:c3:ed:00:
1e:32:c0:5f:7c:34:41:9e:95:18:b3:94:8f:4b:a7:
04:a5:5a:e3:33:e4:21:25:a5:eb:a5:63:b2:08:b6:
2a:d0:9b:8a:64:94:21:3e:c2:e7:74:6c:b6:55:4b:
5f:e2:ac:14:d0:c8:1c:0d:35:1c:69:0a:f2:6a:dc:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:74:65:A2:DC:17:15:B4:8E:19:BC:77:66:A5:0E:DC:C2:D0:32:34
X509v3 Authority Key Identifier:
keyid:77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3b:0b:91:b4:d6:e2:5b:5a:63:a7:74:ea:9d:23:00:a4:8f:
9a:3e:bd:0b:72:32:f4:b1:48:4a:ce:f4:83:8d:f2:49:7f:db:
07:e4:ff:a2:cb:af:4c:4f:cb:c6:a9:9d:a3:22:b0:aa:ee:2a:
c1:c6:c0:e0:94:f0:16:c8:29:be:bd:78:60:86:2a:d8:09:65:
93:5b:39:e8:ac:b7:9b:ad:d8:8d:68:fb:c9:01:ab:1b:52:79:
83:a9:f6:72:69:f1:bf:90:32:98:f9:89:7c:53:2a:2c:4d:83:
bb:9e:81:f6:90:22:3b:c3:fe:27:95:ae:bd:2b:d8:a6:5b:47:
96:7a:7d:3f:34:63:1b:2e:96:87:c9:d1:a1:09:ca:5b:38:46:
3e:f9:f9:6c:5d:43:26:34:c6:cf:fa:07:18:98:80:5e:bd:06:
ac:28:53:34:f3:d5:30:a0:e4:e9:f9:44:a7:ab:fe:ba:2b:02:
e4:69:85:bb:0d:1a:9f:5d:99:39:d4:da:01:d2:42:a1:2a:3d:
39:aa:a9:aa:fb:61:f1:ad:e6:60:81:05:3c:38:54:bb:d3:85:
c4:56:b3:d5:29:e9:c7:64:9a:13:bc:53:e3:67:8c:e2:3d:07:
bf:79:55:76:8c:e1:6e:10:cd:d0:98:42:90:84:e0:fc:46:e7:
29:b6:ac:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSavfhH+vTxrkaqs7LuXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZTRiM2Q5NTk2MjlkYTI4OGFjZDhhNmRlMDAzZWNlMGM5
MzRkYjEwHhcNMjUxMTExMDUwMDQ0WhcNMjUxMTEyMDUwMDQ0WjAzMTEwLwYDVQQD
EyhkMjc0NjVhMmRjMTcxNWI0OGUxOWJjNzc2NmE1MGVkY2MyZDAzMjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ/Y/AdkVmdw0qIVu0083DFVdCZP
GKqveXDsF2tH8E1DM//0EmT3XWBKgZtnZjpwqtMVEjfTj4izbt2SGVsazcro7qVa
b8N6KlNel8zX5uOHlPUhQ4pDsQzmJq6SdXzn3jFMFxaI4YZOmceqDy7RGv4bfsWu
Ar3EsEdgZd04qRIbXHhhTjhuc4WOd94w44LkLNHQ2Un12FnuvoGOUkwTlszeAI+j
/SWUYqTBHT8KkWLg6QW07LOuqR2AwHYerR/D7QAeMsBffDRBnpUYs5SPS6cEpVrj
M+QhJaXrpWOyCLYq0JuKZJQhPsLndGy2VUtf4qwU0MgcDTUcaQryatwy3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJ0ZaLcFxW0jhm8d2alDtzC0DI0MB8GA1UdIwQY
MBaAFHfks9lZYp2iiKzYpt4APs4Mk02xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1TejJWbGluYUtJck5pbTNnQS16Z3lUVGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mOGZhNWQtOWY5My00ZjNhLWI1ZTMt
ODc1ZmU0OTBhODc0LzEvZC1TejJWbGluYUtJck5pbTNnQS16Z3lUVGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mOGZhNWQtOWY5My00ZjNhLWI1ZTMtODc1ZmU0OTBhODc0
LzEvZC1TejJWbGluYUtJck5pbTNnQS16Z3lUVGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTsLkbTW
4ltaY6d06p0jAKSPmj69C3Iy9LFISs70g43ySX/bB+T/osuvTE/LxqmdoyKwqu4q
wcbA4JTwFsgpvr14YIYq2Allk1s56Ky3m63YjWj7yQGrG1J5g6n2cmnxv5AymPmJ
fFMqLE2Du56B9pAiO8P+J5WuvSvYpltHlnp9PzRjGy6Wh8nRoQnKWzhGPvn5bF1D
JjTGz/oHGJiAXr0GrChTNPPVMKDk6flEp6v+uisC5GmFuw0an12ZOdTaAdJCoSo9
Oaqpqvth8a3mYIEFPDhUu9OFxFaz1Snpx2SaE7xT42eM4j0Hv3lVdozhbhDN0JhC
kITg/EbnKbasAA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:25 2025 by rpki-client