Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
File: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft (raw, json)
Hash identifier: E3iIcthA7Nev8ji444wADfQiDOHF7ce4fXya0Ne+u4U=
Subject key identifier: 76:F2:38:9E:03:A6:40:5C:AD:B8:D9:65:65:11:2F:46:BE:7D:E1:08
Authority key identifier: 77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
Certificate issuer: /CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Certificate serial: 019A51507ADDC9FBD08DD03E10979CB257C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
Manifest number: 13DD
Signing time: Wed 05 Nov 2025 00:00:20 +0000
Manifest this update: Wed 05 Nov 2025 00:00:20 +0000
Manifest next update: Thu 06 Nov 2025 00:00:20 +0000
Files and hashes: 1: Qv3hVGEIw5Ck_5QiJYApdipPmqI.roa (hash: C4rOq98XQlQBOJoaFTi64wzA4+qXQilqH0FLuH6cokY=)
2: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl (hash: IahSqg+zjtQY8wmWJFGlYdoVJ5ldLqHi1c9ZEX7JobA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:7a:dd:c9:fb:d0:8d:d0:3e:10:97:9c:b2:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Validity
Not Before: Nov 5 00:00:20 2025 GMT
Not After : Nov 6 00:00:20 2025 GMT
Subject: CN=76f2389e03a6405cadb8d96565112f46be7de108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:35:cb:2d:2e:fa:e9:79:2a:b7:01:6b:cf:
25:b1:6f:9e:d4:32:ab:2d:af:53:1b:2d:44:35:a5:
68:ff:08:75:64:c5:62:c9:00:ce:62:e1:a6:19:90:
9a:a9:09:8d:78:e5:54:ff:84:e2:3d:8d:91:ab:ad:
38:ff:d0:26:ec:47:bf:c9:dc:13:70:d5:9f:e4:4f:
1c:79:80:f0:c0:52:1d:04:03:40:a3:db:dc:7a:13:
44:4e:f5:2a:20:16:e4:8d:c4:52:1d:98:3b:07:39:
a7:f0:2b:55:d2:63:c4:8b:14:ce:f1:c9:3c:68:3c:
8a:37:55:c0:61:cf:07:b0:29:94:09:d8:8b:6b:8c:
37:db:ed:5f:34:91:97:06:51:0d:23:d6:7f:1e:1a:
fe:bd:43:99:2b:6d:c9:76:e9:78:83:47:5e:43:a8:
1d:9e:6a:97:6c:39:3e:e1:aa:fd:6a:99:3f:b1:bc:
97:2d:46:8a:dd:ea:a4:ce:92:51:e2:cd:1c:5c:79:
d6:21:95:9b:2b:a7:04:37:5f:d5:35:33:7c:07:98:
30:0a:0d:6a:79:f7:ef:90:28:24:ac:0f:94:90:b5:
4b:c5:da:39:9f:77:0b:fe:20:9a:8d:86:3e:b7:dc:
9f:66:f4:4d:f0:f5:03:69:89:13:e1:f6:5a:b1:42:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F2:38:9E:03:A6:40:5C:AD:B8:D9:65:65:11:2F:46:BE:7D:E1:08
X509v3 Authority Key Identifier:
keyid:77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c8:27:ff:85:30:f1:b6:c6:94:5c:1a:36:dc:d5:11:60:1a:
a8:d9:c0:f9:a4:ab:3a:be:da:9b:1d:13:8a:0c:29:e4:fb:8b:
4c:14:3c:e3:fe:08:8f:83:89:67:2c:ae:20:b9:0a:a5:12:e3:
be:85:b4:f0:9b:64:db:5d:c8:a1:87:ef:4a:9a:da:f9:32:94:
b0:76:31:df:31:42:eb:5d:33:60:bb:09:b6:7e:e9:cc:c0:93:
a9:0c:45:0a:3b:76:2b:90:e3:93:67:76:24:5e:b2:d3:cb:ad:
c5:33:b5:44:b1:03:b0:a5:da:12:fd:c8:f9:d3:74:c4:7e:50:
ba:d4:28:3b:e4:d4:ba:e0:10:97:fb:f4:e2:39:f4:e9:60:39:
5c:09:3c:78:16:64:28:dd:83:26:56:50:d6:9b:e7:18:2b:27:
01:f4:07:5d:f3:13:98:2a:9b:3a:5c:c5:02:b7:5c:84:0f:40:
99:0c:f6:d7:cf:74:ff:b8:55:ef:67:a7:78:f7:7a:12:8f:f6:
f0:da:d6:7c:f8:9d:a2:df:5d:77:a4:85:55:c0:42:69:b9:5a:
2f:97:39:a7:af:5c:35:a4:92:37:3b:62:bc:b2:bd:55:56:cf:
c3:04:ce:db:d9:6f:44:3f:07:3f:2f:eb:40:e0:2b:fd:6a:aa:
6c:00:5f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:23 2025 by rpki-client