Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: WRDxKAZK4TuPA+SaRjWKF4860xTSs+d/W21Xc1yGN6Y=
Subject key identifier: 9C:EE:CC:DA:F6:24:20:1C:D2:CF:83:31:7D:F0:57:F4:A0:AF:1F:71
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 01989712772E4F5681BE5C14E96CEE380ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 03:00:26 +0000
Manifest this update: Mon 11 Aug 2025 03:00:26 +0000
Manifest next update: Tue 12 Aug 2025 03:00:26 +0000
Files and hashes: 1: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: EOUoNUNBffJnrfj2o22durbDeueku9DTvjf+7gEBvyU=)
2: rMYX2ngJRfk9a7fGX1cc8xAfsos.roa (hash: zZBPIZevys4Y238DbVgB+9WvN4FdGE3xhipQLPtn3sg=)
3: z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa (hash: 0P2kU02ZAocYSBgE7zWtiaNGeOEg/Gg5PfdYqLhXNf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:77:2e:4f:56:81:be:5c:14:e9:6c:ee:38:0e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Aug 11 03:00:26 2025 GMT
Not After : Aug 12 03:00:26 2025 GMT
Subject: CN=9ceeccdaf624201cd2cf83317df057f4a0af1f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:ce:1b:c2:4c:1e:b9:e2:1a:1d:42:3e:d3:
96:1b:7a:66:f7:37:93:fe:ff:50:d6:a6:a3:e2:de:
74:c6:80:50:62:89:b9:7c:7c:fb:f5:59:b7:b1:1a:
6b:0b:8d:d5:e1:63:0b:ae:39:20:14:25:9c:3f:8e:
5c:c4:9d:5f:4e:ab:72:b0:39:01:46:8e:39:8b:f6:
7a:fb:53:8f:e3:c0:28:c8:1e:1e:33:58:2e:90:52:
61:89:f4:ba:e7:74:d4:ab:e2:6c:8d:cd:6b:f6:6e:
a2:a7:26:81:4c:08:90:16:70:00:48:d9:df:c3:ff:
2a:b2:d1:b1:c7:d0:2c:ac:44:7e:b4:6f:e1:99:8b:
00:bb:ef:b7:c3:32:a0:e7:af:c8:5f:2a:34:ef:0b:
a3:cf:16:a3:65:ea:f1:7d:52:8b:7d:50:3e:bb:18:
aa:f9:88:37:67:b2:fb:84:a5:9d:aa:33:c7:d0:55:
b7:dd:f4:76:43:0e:5d:47:b0:3f:5a:db:f2:8c:8a:
4f:29:34:ea:d0:84:3b:89:4e:c7:04:43:89:df:3c:
59:9d:30:5c:38:40:c6:3e:b1:70:b2:07:b9:e8:ca:
be:90:ce:dd:df:b0:b1:88:d8:e2:39:1d:20:78:80:
43:4b:1c:a2:87:e7:61:14:c3:9a:58:6f:bc:2c:ab:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EE:CC:DA:F6:24:20:1C:D2:CF:83:31:7D:F0:57:F4:A0:AF:1F:71
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:27:55:e5:bf:8e:4f:8c:c0:b9:58:ba:14:02:46:a2:51:0e:
16:22:07:f8:fc:08:15:de:3b:fc:bd:e7:5e:58:e2:b8:a6:99:
21:a1:04:26:82:1a:2d:e8:7b:2e:0f:fc:30:6b:9c:81:58:df:
be:1c:52:ae:e9:37:d8:d8:f6:00:ae:6b:d3:d1:17:12:db:ac:
70:0e:99:d3:e5:d7:dd:68:02:1f:e0:7b:5a:96:a8:bc:e7:77:
9d:c3:88:b6:aa:57:95:9d:c3:d3:91:24:4d:b3:92:39:87:bb:
64:3d:ea:c0:ab:9d:cc:4a:a4:45:a4:58:7b:40:15:a9:81:2f:
3c:37:c4:d6:32:7e:bb:02:37:cc:2e:3b:55:b8:f6:d5:15:56:
da:4c:42:59:ab:56:83:df:f9:43:d2:b9:81:d6:86:0e:33:95:
3b:3c:9a:42:ab:07:67:fa:31:ea:5d:00:d6:00:a7:69:74:3b:
f6:ec:07:10:c8:2e:40:25:5f:ba:38:f9:81:f9:54:83:0c:bc:
6c:df:f6:08:65:33:8f:23:f6:94:44:2f:10:3d:87:36:2c:19:
9b:c3:7b:16:d2:fb:56:cb:07:70:c1:07:d4:8a:e7:fe:49:4b:
34:c3:74:02:81:1e:c6:be:ca:34:26:1b:30:6a:76:1c:92:9f:
f4:43:b5:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXEncuT1aBvlwU6WzuOA7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2UzMjc4YmFhMjQ5YzE0ZGU2MDVkYzk2NGIyYzI3NTVk
ZmVjZmEwHhcNMjUwODExMDMwMDI2WhcNMjUwODEyMDMwMDI2WjAzMTEwLwYDVQQD
Eyg5Y2VlY2NkYWY2MjQyMDFjZDJjZjgzMzE3ZGYwNTdmNGEwYWYxZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVDOG8JMHrniGh1CPtOWG3pm9zeT
/v9Q1qaj4t50xoBQYom5fHz79Vm3sRprC43V4WMLrjkgFCWcP45cxJ1fTqtysDkB
Ro45i/Z6+1OP48AoyB4eM1gukFJhifS653TUq+Jsjc1r9m6ipyaBTAiQFnAASNnf
w/8qstGxx9AsrER+tG/hmYsAu++3wzKg56/IXyo07wujzxajZerxfVKLfVA+uxiq
+Yg3Z7L7hKWdqjPH0FW33fR2Qw5dR7A/WtvyjIpPKTTq0IQ7iU7HBEOJ3zxZnTBc
OEDGPrFwsge56Mq+kM7d37CxiNjiOR0geIBDSxyih+dhFMOaWG+8LKuv1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzuzNr2JCAc0s+DMX3wV/Sgrx9xMB8GA1UdIwQY
MBaAFHc+Mni6oknBTeYF3JZLLCdV3+z6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0Nzgt
MWYxNGVjODA1MzkwLzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0NzgtMWYxNGVjODA1Mzkw
LzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmydV5b+O
T4zAuVi6FAJGolEOFiIH+PwIFd47/L3nXljiuKaZIaEEJoIaLeh7Lg/8MGucgVjf
vhxSruk32Nj2AK5r09EXEtuscA6Z0+XX3WgCH+B7WpaovOd3ncOItqpXlZ3D05Ek
TbOSOYe7ZD3qwKudzEqkRaRYe0AVqYEvPDfE1jJ+uwI3zC47Vbj21RVW2kxCWatW
g9/5Q9K5gdaGDjOVOzyaQqsHZ/ox6l0A1gCnaXQ79uwHEMguQCVfujj5gflUgwy8
bN/2CGUzjyP2lEQvED2HNiwZm8N7FtL7VssHcMEH1Irn/klLNMN0AoEexr7KNCYb
MGp2HJKf9EO1Rg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:09:23 2025 by rpki-client