Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
File: DycDq41ZdUqyeopRaFRZG_sPLbc.mft (raw, json)
Hash identifier: 5wOliR0aMX1vljCA0bRxtVaaA2at2MHesPSSP5L6VFg=
Subject key identifier: ED:02:F6:C1:62:2E:F9:38:93:30:3C:30:42:C5:6C:9F:BD:87:A1:90
Authority key identifier: 0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7
Certificate issuer: /CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
Certificate serial: 01987C09FB91FF20D7AD2273A0DD53CD0A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
Manifest number: 2B
Signing time: Tue 05 Aug 2025 21:01:25 +0000
Manifest this update: Tue 05 Aug 2025 21:01:25 +0000
Manifest next update: Wed 06 Aug 2025 21:01:25 +0000
Files and hashes: 1: DycDq41ZdUqyeopRaFRZG_sPLbc.crl (hash: G5+b0eX6UhYxqNEZ+eni34ZkOtUpwcqjX7rWudTV9cQ=)
2: EvvE5cYylw_MjstUmUy-jk4YLrA.roa (hash: gBE8rDGiUuVhCkWL45jKVIjPxTgyeFG4wEdX18IeEVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:fb:91:ff:20:d7:ad:22:73:a0:dd:53:cd:0a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
Validity
Not Before: Aug 5 21:01:25 2025 GMT
Not After : Aug 6 21:01:25 2025 GMT
Subject: CN=ed02f6c1622ef93893303c3042c56c9fbd87a190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:53:7f:b9:7a:11:6e:f4:25:ea:46:ba:17:
62:32:c4:df:6d:4e:fd:6c:72:2e:8b:7d:14:e7:ae:
0b:d4:39:3c:b2:3a:79:b9:92:b3:38:b7:eb:21:d0:
fd:66:a8:68:b5:1e:47:0c:af:11:76:5b:62:48:70:
02:32:1c:2e:fe:cd:62:9b:00:ee:4e:31:0e:5b:2e:
40:f1:53:45:5f:9d:29:45:a5:5f:dd:7c:af:c8:3f:
38:c0:e4:ee:9c:43:e2:90:19:77:a3:9a:73:eb:ce:
09:9f:61:9c:6f:99:46:82:17:43:a3:7f:52:3b:0b:
6e:16:c5:e8:60:90:0d:75:3b:6d:f7:2f:1e:d1:25:
f5:c6:b0:fd:da:23:db:c2:5c:07:25:ac:e9:b2:03:
fa:69:29:ef:84:03:b9:10:54:9a:58:1c:35:a3:1f:
4f:d3:e5:56:b5:d9:03:1b:00:82:21:35:1f:39:a6:
f2:11:f7:0c:fe:bf:ce:6b:e7:62:85:75:a5:5d:23:
92:a9:f4:53:49:10:95:62:a8:d2:f0:cf:76:2f:1b:
b1:ee:08:19:84:5b:88:85:f1:8a:8b:29:84:32:ac:
53:a7:3c:3a:98:f6:72:29:fa:33:f4:b0:dd:2e:17:
a4:f6:8d:89:28:68:aa:5c:03:4b:70:61:e7:90:dd:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:02:F6:C1:62:2E:F9:38:93:30:3C:30:42:C5:6C:9F:BD:87:A1:90
X509v3 Authority Key Identifier:
keyid:0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:03:7c:87:d6:88:4a:85:67:65:cd:15:dd:8a:27:79:8b:5f:
7c:82:1b:66:f1:5d:8b:1c:15:ef:65:4f:cb:8f:3e:5f:96:c7:
f8:ed:28:b3:8d:1e:b8:09:71:7f:c7:93:f6:2c:6c:04:75:11:
02:62:13:b1:3a:74:7f:c7:c7:9a:b6:e1:84:41:9d:83:0c:68:
e5:1c:93:b9:3b:5c:c2:87:b7:24:9a:87:fc:19:1e:bb:f3:16:
43:5c:cc:04:ec:cf:1a:b8:52:03:31:6b:b3:54:f4:af:16:d3:
41:0e:86:99:bf:9d:c4:ba:da:c2:8c:f4:c5:aa:35:bb:12:0e:
64:34:c0:d1:cc:4f:25:5b:24:f2:93:ca:8a:c5:7a:f1:b8:ec:
ed:79:4e:78:89:17:85:b0:81:0f:1c:7c:5f:2e:f8:92:6d:fe:
2a:7b:cd:b1:d4:ff:f9:21:28:c7:02:f1:dd:2e:28:a6:ad:71:
66:9c:da:6b:4c:23:db:9a:5e:90:6e:85:91:27:ea:35:f8:20:
4b:d2:00:7a:df:db:3f:87:8a:37:d6:0c:e2:f2:f2:b0:a8:57:
b1:07:29:fb:21:a5:c6:72:91:64:d3:dd:57:ca:97:ea:83:62:
35:e8:19:cf:97:99:e3:4f:38:a6:51:64:e7:b4:c1:9a:fc:bf:
24:9b:9c:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8CfuR/yDXrSJzoN1TzQqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjcwM2FiOGQ1OTc1NGFiMjdhOGE1MTY4NTQ1OTFiZmIw
ZjJkYjcwHhcNMjUwODA1MjEwMTI1WhcNMjUwODA2MjEwMTI1WjAzMTEwLwYDVQQD
EyhlZDAyZjZjMTYyMmVmOTM4OTMzMDNjMzA0MmM1NmM5ZmJkODdhMTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvBTf7l6EW70JepGuhdiMsTfbU79
bHIui30U564L1Dk8sjp5uZKzOLfrIdD9ZqhotR5HDK8RdltiSHACMhwu/s1imwDu
TjEOWy5A8VNFX50pRaVf3XyvyD84wOTunEPikBl3o5pz684Jn2Gcb5lGghdDo39S
OwtuFsXoYJANdTtt9y8e0SX1xrD92iPbwlwHJazpsgP6aSnvhAO5EFSaWBw1ox9P
0+VWtdkDGwCCITUfOabyEfcM/r/Oa+dihXWlXSOSqfRTSRCVYqjS8M92Lxux7ggZ
hFuIhfGKiymEMqxTpzw6mPZyKfoz9LDdLhek9o2JKGiqXANLcGHnkN2yxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0C9sFiLvk4kzA8MELFbJ+9h6GQMB8GA1UdIwQY
MBaAFA8nA6uNWXVKsnqKUWhUWRv7Dy23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHljRHE0MVpkVXF5ZW9wUmFGUlpHX3NQTGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83ODM3NGYtOGMwMi00YTc0LWJlOTYt
OWY0N2Y5YzViOTIzLzEvRHljRHE0MVpkVXF5ZW9wUmFGUlpHX3NQTGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83ODM3NGYtOGMwMi00YTc0LWJlOTYtOWY0N2Y5YzViOTIz
LzEvRHljRHE0MVpkVXF5ZW9wUmFGUlpHX3NQTGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAN8h9aI
SoVnZc0V3YoneYtffIIbZvFdixwV72VPy48+X5bH+O0os40euAlxf8eT9ixsBHUR
AmITsTp0f8fHmrbhhEGdgwxo5RyTuTtcwoe3JJqH/Bkeu/MWQ1zMBOzPGrhSAzFr
s1T0rxbTQQ6Gmb+dxLrawoz0xao1uxIOZDTA0cxPJVsk8pPKisV68bjs7XlOeIkX
hbCBDxx8Xy74km3+KnvNsdT/+SEoxwLx3S4opq1xZpzaa0wj25pekG6FkSfqNfgg
S9IAet/bP4eKN9YM4vLysKhXsQcp+yGlxnKRZNPdV8qX6oNiNegZz5eZ4084plFk
57TBmvy/JJucYg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:52:45 2025 by rpki-client