Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: cZ/yLZ+TW61S72wks0Nl38/vtz3HAz6+Q9P+x48z5Lo=
Subject key identifier: 71:5A:34:96:4E:E7:79:0D:E6:B7:7B:33:EE:57:FE:44:25:E7:C2:CD
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 01988B0F14F15CFF052D566BD7963D2F4BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 15F1
Signing time: Fri 08 Aug 2025 19:01:18 +0000
Manifest this update: Fri 08 Aug 2025 19:01:18 +0000
Manifest next update: Sat 09 Aug 2025 19:01:18 +0000
Files and hashes: 1: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: yRyjAimIVV8kbDne73ivsZGrYX/iblCXJwMy1NrxdqI=)
2: lKi6SoPHv8adD_f0H8JMR-0tkso.roa (hash: IDdp81FcSfbScsI5eFdQ3u0Q5w/9MnWkbMQFbCRI7Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:14:f1:5c:ff:05:2d:56:6b:d7:96:3d:2f:4b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Aug 8 19:01:18 2025 GMT
Not After : Aug 9 19:01:18 2025 GMT
Subject: CN=715a34964ee7790de6b77b33ee57fe4425e7c2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:5a:a1:ba:24:04:07:30:25:b1:30:75:0b:
38:c4:5c:51:af:fb:26:4a:c7:db:86:3d:83:71:cb:
51:e9:5b:a4:af:29:cb:6f:26:a0:48:ad:ba:99:72:
2b:a9:7c:ca:30:4a:b7:95:ab:3e:d8:69:fb:a6:53:
d9:32:e9:1f:8e:08:1a:5f:77:e8:a9:68:01:ff:99:
5f:18:b6:c8:50:08:88:57:fb:83:bf:8d:b5:6f:8c:
8b:89:75:73:22:8b:3d:b5:e4:47:9e:94:96:a0:1c:
7d:0e:0b:e2:78:5f:f8:df:3a:65:c0:de:70:24:f7:
93:03:0c:77:cb:84:bc:5d:82:d4:5f:6f:50:be:4f:
68:24:55:77:fa:f7:4e:0d:e0:ca:39:e0:ec:e1:4d:
c7:81:48:4c:f9:08:ec:2a:46:f5:a4:a1:a5:1c:91:
79:7a:af:3c:9c:3f:59:e0:f7:a4:29:f9:7b:4e:40:
f3:92:12:47:02:74:5b:0e:be:82:d9:2c:bc:8d:4a:
61:95:20:96:97:c5:a6:31:01:92:d6:62:73:ea:f3:
6c:74:85:55:86:ec:09:aa:1f:06:db:3f:48:ec:9a:
0c:3e:4f:06:07:61:29:26:01:29:9b:fc:b0:e3:6d:
cf:d2:4f:fb:dd:9e:ae:b3:59:f4:48:81:7b:c7:d2:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5A:34:96:4E:E7:79:0D:E6:B7:7B:33:EE:57:FE:44:25:E7:C2:CD
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ee:98:14:bf:6e:ef:03:f0:89:a1:0f:ca:9a:06:29:45:1e:
be:bb:b5:a6:19:9a:1f:8c:91:02:44:82:64:24:33:a6:6a:f4:
4e:08:05:6e:f5:75:0c:05:63:09:72:18:f1:18:dc:9b:d2:03:
bd:bd:01:e4:f4:eb:7c:c6:5c:4c:07:3b:46:f2:a2:85:7c:a8:
2a:3a:2e:c4:a0:75:21:c1:e6:ce:78:a3:44:ac:f1:cd:42:84:
2b:b4:82:37:58:44:1a:e9:08:d1:87:61:d0:97:cf:97:92:05:
51:ec:3c:30:86:6a:33:6a:51:fe:01:db:78:35:31:ea:aa:d1:
3f:d7:82:5b:91:99:59:d2:2a:0d:c2:3b:ba:c3:40:2b:0e:2a:
a1:84:00:63:56:2e:e2:35:53:7a:2a:6f:cd:ad:0c:ed:ef:b1:
10:81:b0:a8:91:2f:ce:d2:ac:bf:88:95:fe:9d:43:8a:a7:b4:
4c:d1:4a:0b:22:bf:b9:02:82:81:77:5a:99:0a:06:40:cf:5b:
f2:b8:f3:f8:bd:92:4c:20:95:a7:84:83:cc:8b:4e:f4:d8:29:
f0:9a:38:1d:ce:5a:b4:95:44:e2:f0:ea:fa:01:7e:2c:ec:46:
03:08:d5:02:81:de:48:8c:b0:a5:29:66:aa:68:38:0d:68:fd:
d6:d1:45:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLDxTxXP8FLVZr15Y9L0vDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzExMGE0MzcwNGQ5NTQ5ZGY3MTU2ZTNhNzg5ZTYyMjg1
YjE2OTMwHhcNMjUwODA4MTkwMTE4WhcNMjUwODA5MTkwMTE4WjAzMTEwLwYDVQQD
Eyg3MTVhMzQ5NjRlZTc3OTBkZTZiNzdiMzNlZTU3ZmU0NDI1ZTdjMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVtaobokBAcwJbEwdQs4xFxRr/sm
Ssfbhj2DcctR6VukrynLbyagSK26mXIrqXzKMEq3las+2Gn7plPZMukfjggaX3fo
qWgB/5lfGLbIUAiIV/uDv421b4yLiXVzIos9teRHnpSWoBx9DgvieF/43zplwN5w
JPeTAwx3y4S8XYLUX29Qvk9oJFV3+vdODeDKOeDs4U3HgUhM+QjsKkb1pKGlHJF5
eq88nD9Z4PekKfl7TkDzkhJHAnRbDr6C2Sy8jUphlSCWl8WmMQGS1mJz6vNsdIVV
huwJqh8G2z9I7JoMPk8GB2EpJgEpm/yw423P0k/73Z6us1n0SIF7x9KqbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFaNJZO53kN5rd7M+5X/kQl58LNMB8GA1UdIwQY
MBaAFHcxEKQ3BNlUnfcVbjp4nmIoWxaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAt
OWEzODE1OWI3OTRlLzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAtOWEzODE1OWI3OTRl
LzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADe6YFL9u
7wPwiaEPypoGKUUevru1phmaH4yRAkSCZCQzpmr0TggFbvV1DAVjCXIY8Rjcm9ID
vb0B5PTrfMZcTAc7RvKihXyoKjouxKB1IcHmznijRKzxzUKEK7SCN1hEGukI0Ydh
0JfPl5IFUew8MIZqM2pR/gHbeDUx6qrRP9eCW5GZWdIqDcI7usNAKw4qoYQAY1Yu
4jVTeipvza0M7e+xEIGwqJEvztKsv4iV/p1Diqe0TNFKCyK/uQKCgXdamQoGQM9b
8rjz+L2STCCVp4SDzItO9Ngp8Jo4Hc5atJVE4vDq+gF+LOxGAwjVAoHeSIywpSlm
qmg4DWj91tFFHg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:20 2025 by rpki-client