Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: oeAA359FFmeIFEs2anpK3k3M69jSIBsXaftparTgx2k=
Subject key identifier: 55:7B:8D:95:70:AC:4C:20:AF:F8:3D:BE:0C:E0:50:B9:F5:4D:59:E6
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 01992255A807D0BA913C860C1BAAB9F389C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 1605
Signing time: Sun 07 Sep 2025 04:01:02 +0000
Manifest this update: Sun 07 Sep 2025 04:01:02 +0000
Manifest next update: Mon 08 Sep 2025 04:01:02 +0000
Files and hashes: 1: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: zLYZJXqgIfquRMBIH581JAr1M2cR9IPmg/u7BmPVx4A=)
2: OKYG51ny4JzR_NLTt0NMC5jjs5w.roa (hash: q7wWYvvmDZVEwvT4mSRrL9j7EyJqRlFav3ZfehvFtAs=)
3: ZQQ0gAGZL_jGDDuR_dzAPHQgjqs.roa (hash: 1IkjnF/CrXtM+w2XOvbsVxbee7zsKOEnEqn8FcXAMF8=)
4: qLpskkGdWMp75uesslOqcJ0MWnE.roa (hash: X4MuNwdwba0DvT/WVM9tY1i1XGTLnQOuEconDao1Nw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:a8:07:d0:ba:91:3c:86:0c:1b:aa:b9:f3:89:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Sep 7 04:01:02 2025 GMT
Not After : Sep 8 04:01:02 2025 GMT
Subject: CN=557b8d9570ac4c20aff83dbe0ce050b9f54d59e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:9f:c5:c6:9c:d3:f8:db:45:64:9b:e4:d2:
20:3e:c1:af:0c:b4:42:ea:ce:84:3f:7a:3e:7c:02:
79:ff:76:ed:d9:8e:3c:4e:69:7a:84:7b:2b:e0:2c:
0e:80:82:09:b3:2d:59:24:35:19:2d:4c:72:35:6a:
84:ea:fd:0e:54:9b:38:4d:0c:4d:5d:a6:95:e5:fd:
9f:21:19:1c:d5:b6:0c:3f:8e:bf:cc:f9:92:9e:a1:
8d:e3:6f:be:46:5d:f9:36:cb:1f:76:1d:cd:71:0a:
80:b0:16:48:18:f7:be:d3:3f:f5:20:cf:29:8e:c3:
70:f7:2d:55:fa:5d:79:71:ec:e5:bf:4d:34:76:1b:
67:37:ae:f0:71:78:ee:87:ca:06:60:21:df:25:7e:
7e:d5:2d:fb:d6:17:a2:97:9e:09:5c:44:a5:33:74:
9d:d5:57:99:66:ec:c7:6b:c6:43:57:db:5e:a1:93:
7c:56:38:d6:dc:9d:b4:0e:0b:79:c8:6f:dc:c2:28:
c5:ac:71:66:1d:04:fa:c4:7d:d5:ee:11:f9:35:b4:
48:d4:68:d8:af:1e:ad:c2:b3:a0:31:7d:76:1a:1c:
3a:f8:e0:1b:5b:62:56:60:49:4c:00:4f:ae:77:22:
7a:48:65:5f:b4:6e:e6:5e:3d:52:1a:9f:4a:3a:4c:
b2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7B:8D:95:70:AC:4C:20:AF:F8:3D:BE:0C:E0:50:B9:F5:4D:59:E6
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5e:2b:15:ad:20:68:dd:d6:da:74:4c:28:0e:7b:52:d4:5f:
57:9a:04:4e:25:b5:d8:be:48:4f:1b:67:9c:f0:0d:63:26:58:
d0:ac:07:73:92:79:e6:81:f0:ad:ba:82:db:8e:dc:06:3f:db:
9e:f2:60:ba:d4:0c:29:6e:81:a8:4c:b9:25:5f:23:c0:4d:de:
65:8c:6b:73:91:2f:1a:77:e9:03:a9:da:d9:34:a8:ce:87:47:
97:a9:4a:40:53:22:06:68:04:d4:99:6f:88:d9:0b:2f:4f:c7:
b1:71:01:a6:28:76:80:16:e2:06:d4:72:57:92:b6:2c:60:a0:
29:b1:f8:81:22:7e:ea:23:2c:d0:f8:de:da:51:5b:fa:d8:fc:
9f:24:64:50:c7:06:a7:a7:0a:90:46:92:e1:68:15:c7:b4:4d:
d4:8e:fd:a9:60:7a:21:58:40:f3:b5:f7:ad:60:b8:dd:cc:e2:
18:a4:18:34:65:53:74:91:83:10:a1:36:3e:66:da:a5:48:24:
ea:1e:16:00:e3:f5:c3:03:fd:19:3e:62:d2:fd:52:d6:51:e3:
15:f1:60:5f:b2:30:13:a1:64:3c:db:1c:9b:ef:3e:19:12:48:
49:93:5a:34:83:0d:01:3e:e4:5b:1c:af:da:15:39:3d:a3:a9:
6d:e1:7c:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVagH0LqRPIYMG6q584nFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjODY2NjJiNzUyYzhhM2JlNzJlODU0NDM5NGZmOTI2ZjY4
ZmJmN2UwHhcNMjUwOTA3MDQwMTAyWhcNMjUwOTA4MDQwMTAyWjAzMTEwLwYDVQQD
Eyg1NTdiOGQ5NTcwYWM0YzIwYWZmODNkYmUwY2UwNTBiOWY1NGQ1OWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP6fxcac0/jbRWSb5NIgPsGvDLRC
6s6EP3o+fAJ5/3bt2Y48Tml6hHsr4CwOgIIJsy1ZJDUZLUxyNWqE6v0OVJs4TQxN
XaaV5f2fIRkc1bYMP46/zPmSnqGN42++Rl35Nssfdh3NcQqAsBZIGPe+0z/1IM8p
jsNw9y1V+l15cezlv000dhtnN67wcXjuh8oGYCHfJX5+1S371heil54JXESlM3Sd
1VeZZuzHa8ZDV9teoZN8VjjW3J20Dgt5yG/cwijFrHFmHQT6xH3V7hH5NbRI1GjY
rx6twrOgMX12Ghw6+OAbW2JWYElMAE+udyJ6SGVftG7mXj1SGp9KOkyyDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFV7jZVwrEwgr/g9vgzgULn1TVnmMB8GA1UdIwQY
MBaAFAyGZit1LIo75y6FRDlP+Sb2j79+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5Yjgt
MWNjYzljMjk1ZThlLzEvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5YjgtMWNjYzljMjk1ZThl
LzEvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcV4rFa0g
aN3W2nRMKA57UtRfV5oETiW12L5ITxtnnPANYyZY0KwHc5J55oHwrbqC247cBj/b
nvJgutQMKW6BqEy5JV8jwE3eZYxrc5EvGnfpA6na2TSozodHl6lKQFMiBmgE1Jlv
iNkLL0/HsXEBpih2gBbiBtRyV5K2LGCgKbH4gSJ+6iMs0Pje2lFb+tj8nyRkUMcG
p6cKkEaS4WgVx7RN1I79qWB6IVhA87X3rWC43cziGKQYNGVTdJGDEKE2PmbapUgk
6h4WAOP1wwP9GT5i0v1S1lHjFfFgX7IwE6FkPNscm+8+GRJISZNaNIMNAT7kWxyv
2hU5PaOpbeF8yg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:48 2025 by rpki-client