Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
File: pZDvI7RWydsg0wdCkysBf8VyTlY.mft (raw, json)
Hash identifier: h8gCFcOPwxS6Cd53nYMxpy2zanCqMgERFNU0ChwDxno=
Subject key identifier: 02:36:17:D6:B9:90:F2:95:03:1A:6A:84:DD:8C:21:E5:2B:EB:49:FF
Authority key identifier: A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
Certificate issuer: /CN=a590ef23b456c9db20d30742932b017fc5724e56
Certificate serial: 0198819E103CC5CEED3CB0C006F469784F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
Manifest number: 0DD3
Signing time: Wed 06 Aug 2025 23:01:16 +0000
Manifest this update: Wed 06 Aug 2025 23:01:16 +0000
Manifest next update: Thu 07 Aug 2025 23:01:16 +0000
Files and hashes: 1: pZDvI7RWydsg0wdCkysBf8VyTlY.crl (hash: r8Hyb/CQNCBensL9qtxhlIkLNHID3IQ0lOwhxllCpZA=)
2: qkuFYPmd6yVSJeAUkr6iVxoW6uI.roa (hash: 6R5f5Psj0EmX1v5BkourUurygRB3rOnwEBUagdishKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:10:3c:c5:ce:ed:3c:b0:c0:06:f4:69:78:4f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590ef23b456c9db20d30742932b017fc5724e56
Validity
Not Before: Aug 6 23:01:16 2025 GMT
Not After : Aug 7 23:01:16 2025 GMT
Subject: CN=023617d6b990f295031a6a84dd8c21e52beb49ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:ce:55:9d:42:81:74:90:7d:0d:18:2f:ed:
e4:6e:bb:60:a0:eb:ca:1b:f1:d5:3f:d6:5e:75:2e:
ae:ab:5b:87:b2:05:90:fb:30:e9:ee:64:dd:39:d8:
64:f3:f2:48:f0:c5:f7:62:a8:38:bc:78:00:86:c0:
ae:0c:ef:52:62:5d:9b:41:68:72:fd:c5:7c:06:bf:
03:02:a1:84:7e:63:9d:df:dd:75:77:28:a2:bb:18:
cc:54:42:d7:1d:7e:f7:8d:a6:e1:cd:df:90:50:d2:
ee:fc:4b:e5:0f:c7:cf:a6:03:cd:13:11:1c:dc:fd:
ca:98:98:f0:21:e3:e3:68:b8:c2:c0:3a:4b:95:47:
66:f7:de:00:96:20:9c:03:2f:89:42:43:d3:2a:35:
20:76:99:ca:86:1b:1f:8e:8b:ad:93:07:88:58:1d:
08:9b:ba:4e:99:39:f8:73:4f:89:4c:e6:81:ce:a6:
03:7d:5d:9d:d9:58:e1:9c:b4:a2:a9:fb:1c:c4:b2:
73:92:c3:8b:4e:6b:bf:b2:91:d7:02:94:51:d1:12:
e1:0f:39:b4:fe:59:77:3c:be:53:45:51:56:0a:5a:
0a:f9:c1:39:c1:2d:ff:fb:16:a8:f2:fe:5e:6d:e6:
9f:11:b6:dd:57:eb:36:67:5c:62:b1:fe:47:d7:81:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:36:17:D6:B9:90:F2:95:03:1A:6A:84:DD:8C:21:E5:2B:EB:49:FF
X509v3 Authority Key Identifier:
keyid:A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:93:f6:8e:36:30:ee:34:8d:03:2e:5e:a2:20:63:ab:ee:ce:
c9:c3:a5:c0:fd:28:06:98:34:dd:c9:77:2e:86:e9:4b:c2:b4:
6c:16:a0:a5:68:d5:cd:4f:1f:ba:68:4d:8d:05:aa:42:d8:cd:
91:aa:a2:2f:c6:02:d9:7f:97:e2:8d:a1:45:b1:a0:8c:bb:97:
53:8b:65:62:d8:62:3e:57:1b:4c:09:6d:be:92:4f:b6:70:1e:
93:d2:7a:f3:5d:16:03:12:28:ba:0f:e2:ff:01:66:06:8f:62:
cf:a9:0d:e5:ff:00:81:83:a4:74:27:45:3d:1b:41:08:51:bc:
0c:a5:7a:48:63:35:d5:db:1e:61:f2:cc:43:d7:64:81:b0:66:
1f:92:28:65:95:c2:c7:e1:5b:70:1f:a3:10:d5:64:4b:f4:37:
1e:8b:af:71:e1:2a:aa:19:93:01:29:97:69:69:3e:a2:bf:7b:
dc:98:13:36:ad:ba:20:45:80:89:72:ac:eb:dd:d4:d6:89:ba:
75:13:07:a1:ed:ce:8a:7f:2c:92:33:f1:cf:2c:bf:bd:46:ec:
f3:96:7a:a8:5f:9d:07:55:34:4d:7b:63:fa:22:ee:55:4c:7e:
fd:60:0d:5c:91:76:f0:c8:27:27:1d:65:b5:d3:d6:59:db:44:
0d:e5:86:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBnhA8xc7tPLDABvRpeE+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OTBlZjIzYjQ1NmM5ZGIyMGQzMDc0MjkzMmIwMTdmYzU3
MjRlNTYwHhcNMjUwODA2MjMwMTE2WhcNMjUwODA3MjMwMTE2WjAzMTEwLwYDVQQD
EygwMjM2MTdkNmI5OTBmMjk1MDMxYTZhODRkZDhjMjFlNTJiZWI0OWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSTOVZ1CgXSQfQ0YL+3kbrtgoOvK
G/HVP9ZedS6uq1uHsgWQ+zDp7mTdOdhk8/JI8MX3Yqg4vHgAhsCuDO9SYl2bQWhy
/cV8Br8DAqGEfmOd3911dyiiuxjMVELXHX73jabhzd+QUNLu/EvlD8fPpgPNExEc
3P3KmJjwIePjaLjCwDpLlUdm994AliCcAy+JQkPTKjUgdpnKhhsfjoutkweIWB0I
m7pOmTn4c0+JTOaBzqYDfV2d2VjhnLSiqfscxLJzksOLTmu/spHXApRR0RLhDzm0
/ll3PL5TRVFWCloK+cE5wS3/+xao8v5ebeafEbbdV+s2Z1xisf5H14FS6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAI2F9a5kPKVAxpqhN2MIeUr60n/MB8GA1UdIwQY
MBaAFKWQ7yO0VsnbINMHQpMrAX/Fck5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpEdkk3Uld5ZHNnMHdkQ2t5c0JmOFZ5VGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zMTg1YzQtZDcyNC00MzVkLTgyNzct
MTUyZDIwNGViZmEzLzEvcFpEdkk3Uld5ZHNnMHdkQ2t5c0JmOFZ5VGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zMTg1YzQtZDcyNC00MzVkLTgyNzctMTUyZDIwNGViZmEz
LzEvcFpEdkk3Uld5ZHNnMHdkQ2t5c0JmOFZ5VGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5P2jjYw
7jSNAy5eoiBjq+7OycOlwP0oBpg03cl3LobpS8K0bBagpWjVzU8fumhNjQWqQtjN
kaqiL8YC2X+X4o2hRbGgjLuXU4tlYthiPlcbTAltvpJPtnAek9J6810WAxIoug/i
/wFmBo9iz6kN5f8AgYOkdCdFPRtBCFG8DKV6SGM11dseYfLMQ9dkgbBmH5IoZZXC
x+FbcB+jENVkS/Q3HouvceEqqhmTASmXaWk+or973JgTNq26IEWAiXKs693U1om6
dRMHoe3Oin8skjPxzyy/vUbs85Z6qF+dB1U0TXtj+iLuVUx+/WANXJF28MgnJx1l
tdPWWdtEDeWGUQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:37:06 2025 by rpki-client