Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: ANSLpF+UIdbh8egZVzr4IEAZGVgSQtiJ9sU4+mYRxfg=
Subject key identifier: D5:51:DE:01:66:FD:48:15:E4:F4:87:43:2A:E6:7C:7D:51:A1:18:FE
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 019A26679450B2D6EC8AAF94228183E494A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 0830
Signing time: Mon 27 Oct 2025 16:01:53 +0000
Manifest this update: Mon 27 Oct 2025 16:01:53 +0000
Manifest next update: Tue 28 Oct 2025 16:01:53 +0000
Files and hashes: 1: Dtmeeo2Ahqu20IUfCd65FxwTl2k.roa (hash: I+vjjlJcdrLb3KMRUhvwUitmKXx1JxbgC5EfsL3L6hI=)
2: MA5FazDAuWizu2sArINAiZDNSkk.roa (hash: RRjoWKPkJksBjTPCtL+V2nNMKG6oIx2+O6vH374Aw7I=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: jcKUd8pZnbwygVXJ16HK/Sq43zKVEkGDEXmGCXMORSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:94:50:b2:d6:ec:8a:af:94:22:81:83:e4:94:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Oct 27 16:01:53 2025 GMT
Not After : Oct 28 16:01:53 2025 GMT
Subject: CN=d551de0166fd4815e4f487432ae67c7d51a118fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:fe:3e:35:eb:a4:a3:0e:af:a2:14:5b:97:
70:8c:26:7f:53:f0:07:04:99:fd:73:28:6a:6a:a5:
a9:7e:01:07:45:0a:7e:18:14:ef:e5:00:f3:3f:1e:
ec:9e:31:17:c7:64:fc:20:c6:66:dc:a8:3f:9a:e0:
6b:cc:e6:3c:3d:1b:90:a1:a7:6f:fd:6b:a7:9e:b5:
fe:11:1e:ea:a7:ad:01:0b:25:5a:6a:6f:81:fe:a4:
8e:61:89:d1:c1:95:03:fd:95:56:ec:1a:d7:6c:86:
8a:9b:8a:b5:fc:f5:bb:a4:a9:0e:0d:3a:89:90:ae:
65:5f:eb:d3:0b:b1:a3:cb:2a:14:a2:79:19:cb:2b:
05:ec:00:6d:74:f8:cd:4c:cf:e5:71:6a:a3:ca:7b:
2c:41:93:46:4e:b9:ab:7f:ab:68:11:85:82:82:77:
42:e8:e7:b9:a8:94:00:95:10:19:8e:53:79:a5:19:
53:b1:e5:fe:08:35:99:5d:3c:fe:a8:8e:eb:8a:dc:
c5:1b:4d:ef:9e:13:7b:4f:8f:a1:32:d6:f5:7b:81:
72:14:c4:40:83:61:7b:8e:de:61:fb:03:2c:b4:e8:
e6:71:0c:8f:52:1a:df:3d:71:9e:da:e8:98:a1:9e:
67:15:62:a3:0e:97:1e:b8:de:99:73:cf:22:92:e4:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:51:DE:01:66:FD:48:15:E4:F4:87:43:2A:E6:7C:7D:51:A1:18:FE
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ad:4f:23:6d:9b:77:01:82:ae:fd:14:1c:3b:15:a5:a8:54:
9e:7d:90:0f:10:0f:10:e0:15:b0:57:6c:c6:06:1d:25:37:16:
59:fb:51:ba:32:80:3e:a9:fa:a4:e3:16:fd:12:45:ca:19:87:
7e:91:46:db:ec:d4:3a:87:7e:5a:49:6b:a4:a7:99:2b:7d:72:
5f:fd:03:90:e7:11:4d:4c:73:ec:ba:e1:01:d1:3e:13:fa:89:
2a:c7:11:0c:bf:98:5d:55:a9:26:37:6f:6f:70:a1:1b:bc:03:
86:d7:4c:82:ad:cd:d5:36:40:d7:46:86:6d:1a:61:c8:91:29:
3c:e3:6d:5f:44:9c:7b:d5:32:94:ed:30:a4:dd:d9:f2:e7:11:
6d:71:46:3a:13:75:d6:d5:68:86:7c:0a:62:54:09:f2:b3:16:
d0:f6:c1:10:d2:e9:66:0f:4a:18:1b:3b:cb:21:68:bb:37:76:
76:f3:78:dd:b6:d5:c5:f3:87:1d:3d:a6:b5:52:da:f2:b5:ac:
5a:67:5f:42:85:59:8e:43:6c:8f:35:96:6d:2b:72:03:d4:f0:
6a:7b:17:a3:a9:54:37:f5:36:49:12:b2:9b:38:53:21:d4:5c:
a8:b1:7f:fb:13:82:eb:4a:ba:82:4d:bd:42:64:0b:96:ee:ac:
33:04:8c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:36:04 2025 by rpki-client