Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: Otr2nHncEUyod8dabIJykalnpeZpHJy7/m1fVH9JapI=
Subject key identifier: 99:16:9D:19:32:E5:88:11:07:9E:94:6B:A6:AB:00:62:53:E2:36:BB
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 019936EF3665D164C8B2BCC6551416518007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 07B4
Signing time: Thu 11 Sep 2025 04:01:10 +0000
Manifest this update: Thu 11 Sep 2025 04:01:10 +0000
Manifest next update: Fri 12 Sep 2025 04:01:10 +0000
Files and hashes: 1: Dtmeeo2Ahqu20IUfCd65FxwTl2k.roa (hash: I+vjjlJcdrLb3KMRUhvwUitmKXx1JxbgC5EfsL3L6hI=)
2: MA5FazDAuWizu2sArINAiZDNSkk.roa (hash: RRjoWKPkJksBjTPCtL+V2nNMKG6oIx2+O6vH374Aw7I=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: Z8fhB8ZliHYl4PwkwU4JiYQ+BkYBeykD9rVuJCj8sn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:36:65:d1:64:c8:b2:bc:c6:55:14:16:51:80:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Sep 11 04:01:10 2025 GMT
Not After : Sep 12 04:01:10 2025 GMT
Subject: CN=99169d1932e58811079e946ba6ab006253e236bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5a:51:d7:b0:2f:da:ac:dc:9b:f6:35:20:dd:
73:ea:b3:6b:c5:32:55:c9:fe:ab:0c:d5:45:fe:27:
b4:30:90:82:cd:33:12:99:72:b9:6a:ef:22:ec:26:
ae:b8:0b:4f:6e:66:c8:03:4d:f3:9d:0a:fe:95:7e:
f4:85:2b:2b:6a:64:f5:1b:b6:e1:a5:b4:21:14:9f:
37:3f:14:c3:4c:78:57:1a:82:70:fc:ad:20:6e:99:
22:38:1a:91:bc:29:0f:94:13:27:42:69:d2:0a:a5:
60:c8:18:92:b3:5e:2f:ec:d3:f7:93:06:b3:0f:9c:
d0:1a:89:a1:2a:42:5d:cd:56:e7:3c:a1:0b:68:d5:
5e:fe:ff:48:67:d9:54:d1:72:85:95:5f:1e:6e:ff:
b2:37:ac:70:36:95:7e:44:78:65:48:4a:81:52:32:
c3:eb:63:27:da:a8:9f:be:97:5c:87:96:a7:ab:1f:
54:ea:84:e6:6a:37:f3:b8:75:6e:54:36:04:8e:39:
28:52:f6:44:2b:05:72:4b:e0:5d:a7:b3:dc:ec:76:
74:2d:02:05:03:c2:60:ef:c7:f9:cd:e5:6e:e6:9d:
b2:c9:d1:c9:51:9a:5c:57:18:dd:00:fb:bf:35:62:
13:be:c0:33:6e:18:c7:2a:8d:b2:cf:3c:c6:14:74:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:16:9D:19:32:E5:88:11:07:9E:94:6B:A6:AB:00:62:53:E2:36:BB
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c3:5b:9f:fc:a6:07:7a:95:38:54:47:29:60:da:43:bb:57:
9f:5e:33:55:79:db:73:c2:a8:79:0f:3c:3b:22:96:86:6d:48:
7f:b3:d2:2f:80:0c:e4:eb:4a:94:20:5b:d9:b2:dd:d6:f1:6a:
d9:e8:0b:09:93:16:f0:c7:17:83:35:a1:bc:ea:b0:05:e5:9f:
e2:54:a7:b9:a4:3e:a2:b5:ac:24:f8:13:ac:50:52:51:2f:ba:
b2:17:94:df:79:c8:ba:af:bc:c1:9d:b0:bb:3f:c9:37:aa:75:
d6:f7:39:53:46:b6:ab:33:0e:39:7b:79:8e:e9:ed:55:fc:ef:
46:78:f6:9b:76:23:0d:a6:cf:0f:8f:08:12:7b:8c:27:b9:6e:
fa:af:f7:ed:f5:84:3b:f0:4b:f4:57:38:e1:bc:c5:6e:85:7d:
07:e7:64:d7:fe:21:e8:bd:2f:43:84:a5:61:15:f8:20:c7:00:
03:07:ad:95:cc:21:1f:e1:f6:0c:89:f3:29:9d:48:b1:0d:9b:
54:e0:33:26:da:d5:ef:9f:d4:6c:0a:d5:a4:42:bb:5f:ca:02:
7a:ec:69:87:cc:c0:d2:3d:80:d7:40:45:a0:e6:18:66:6f:c9:
0f:b4:9b:9d:96:cf:e3:aa:f6:fa:48:de:9a:02:1a:43:1b:28:
33:74:23:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk27zZl0WTIsrzGVRQWUYAHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzQ3ZTE2OGQ2OTY1ODU0NTM3NGU2YTBiNjhkMjRiOTdm
Y2QwMDYwHhcNMjUwOTExMDQwMTEwWhcNMjUwOTEyMDQwMTEwWjAzMTEwLwYDVQQD
Eyg5OTE2OWQxOTMyZTU4ODExMDc5ZTk0NmJhNmFiMDA2MjUzZTIzNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91pR17Av2qzcm/Y1IN1z6rNrxTJV
yf6rDNVF/ie0MJCCzTMSmXK5au8i7CauuAtPbmbIA03znQr+lX70hSsramT1G7bh
pbQhFJ83PxTDTHhXGoJw/K0gbpkiOBqRvCkPlBMnQmnSCqVgyBiSs14v7NP3kwaz
D5zQGomhKkJdzVbnPKELaNVe/v9IZ9lU0XKFlV8ebv+yN6xwNpV+RHhlSEqBUjLD
62Mn2qifvpdch5anqx9U6oTmajfzuHVuVDYEjjkoUvZEKwVyS+Bdp7Pc7HZ0LQIF
A8Jg78f5zeVu5p2yydHJUZpcVxjdAPu/NWITvsAzbhjHKo2yzzzGFHQOIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkWnRky5YgRB56Ua6arAGJT4ja7MB8GA1UdIwQY
MBaAFHc0fhaNaWWFRTdOagto0kuX/NAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2Qt
NjdlYmJjOGM2ODYyLzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2QtNjdlYmJjOGM2ODYy
LzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8Nbn/ym
B3qVOFRHKWDaQ7tXn14zVXnbc8KoeQ88OyKWhm1If7PSL4AM5OtKlCBb2bLd1vFq
2egLCZMW8McXgzWhvOqwBeWf4lSnuaQ+orWsJPgTrFBSUS+6sheU33nIuq+8wZ2w
uz/JN6p11vc5U0a2qzMOOXt5juntVfzvRnj2m3YjDabPD48IEnuMJ7lu+q/37fWE
O/BL9Fc44bzFboV9B+dk1/4h6L0vQ4SlYRX4IMcAAwetlcwhH+H2DInzKZ1IsQ2b
VOAzJtrV75/UbArVpEK7X8oCeuxph8zA0j2A10BFoOYYZm/JD7SbnZbP46r2+kje
mgIaQxsoM3QjKg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 12:00:15 2025 by rpki-client