Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
File: dZBZSelj01d74HYybKC5H_MvloQ.mft (raw, json)
Hash identifier: Jd+xXpKWVSXXUaelsTOQyzhm1J07iRkFGxN/w9FrI5c=
Subject key identifier: D5:A7:1B:19:AE:C8:D9:82:24:A2:78:67:06:81:37:DC:F2:F6:04:F2
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial: 01987E2E821292920A67C80CD3FAC85581DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
Manifest number: 0741
Signing time: Wed 06 Aug 2025 07:00:33 +0000
Manifest this update: Wed 06 Aug 2025 07:00:33 +0000
Manifest next update: Thu 07 Aug 2025 07:00:33 +0000
Files and hashes: 1: 6DM2EcyU67ptxBh9GKlJrzks2YY.roa (hash: dGsT7/dH6GvyheXKVe0ZbgWrcxrzH7zYFhEqctDv4NQ=)
2: GsWSBNzv988JIATL2hLeFJWT77g.roa (hash: Ly0cVrt55lxuS7TrsXNQWpKEZ4VseFVE3p+bnlbkQgs=)
3: dZBZSelj01d74HYybKC5H_MvloQ.crl (hash: 6JdyuavuxGihkLpH5k1qDe1zB6KgXbRol7c9TyLgkyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:82:12:92:92:0a:67:c8:0c:d3:fa:c8:55:81:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
Validity
Not Before: Aug 6 07:00:33 2025 GMT
Not After : Aug 7 07:00:33 2025 GMT
Subject: CN=d5a71b19aec8d98224a27867068137dcf2f604f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:11:2e:80:b1:01:1a:c8:a8:d2:e5:9f:df:
d5:24:21:09:9e:7e:9b:67:ff:ef:ed:f6:3b:a6:53:
09:f0:5f:50:64:36:39:6e:ee:97:71:8a:cd:69:92:
ac:86:8d:ab:de:f8:83:ab:10:e0:8c:85:3a:e2:0c:
2e:76:36:05:74:c4:98:ec:b9:b4:c9:a7:4d:72:a1:
5e:d6:87:c8:3f:7b:63:d3:70:62:e6:9c:72:de:b0:
7d:49:4d:eb:ff:c8:b5:c4:b9:77:ec:a9:74:4e:57:
56:b7:9e:ec:b1:d1:2e:f9:7f:20:ab:d1:e8:e7:d0:
fc:88:78:e6:4d:6d:61:83:d8:4a:d7:e1:01:4c:86:
6d:56:64:78:3b:39:80:b3:bc:6f:86:36:d8:ad:fe:
f1:96:e5:63:01:62:ed:25:4e:95:a9:c5:d0:ed:54:
4e:0d:78:9e:9d:54:cb:5a:21:a6:02:17:3b:90:fa:
e4:e1:d9:01:a0:e3:94:d5:c4:4f:0a:32:e7:ef:3d:
30:53:c0:40:d0:a5:76:8c:d0:e6:bc:b0:e7:a8:2b:
75:5a:ca:4e:8f:b1:a9:5c:d1:dc:47:4c:da:c5:c4:
42:9c:57:cd:a6:e6:18:5b:b3:64:a0:55:03:94:86:
f5:d7:83:41:a7:ea:5d:f7:81:64:9d:1c:1b:e1:1c:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A7:1B:19:AE:C8:D9:82:24:A2:78:67:06:81:37:DC:F2:F6:04:F2
X509v3 Authority Key Identifier:
keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:57:33:18:c0:e7:60:90:b3:d1:c7:a1:6e:69:ea:8e:f1:4c:
d7:ca:4f:f2:7d:19:86:25:c4:f2:71:d1:17:ff:ff:de:45:a0:
e0:27:76:51:df:7e:3b:40:13:22:58:d5:90:f6:6c:4f:96:61:
4f:6c:c5:4e:ff:3a:9c:55:e7:82:43:da:0c:af:8c:c2:a9:5d:
32:63:bb:1e:93:d7:be:f0:a5:3e:3c:04:f6:df:30:03:d9:1f:
71:50:4b:11:18:10:e3:69:4a:0f:7f:0d:cc:8a:b1:42:93:7b:
4c:d6:49:4c:58:3f:15:79:7f:f2:8e:69:d1:74:bc:49:b3:88:
72:f5:02:84:55:9e:60:29:c2:7b:08:e0:e8:30:38:91:b5:06:
48:b7:45:cc:7a:59:0f:13:48:8e:6c:76:39:e1:69:27:79:79:
f3:cf:a8:c9:27:52:68:5c:e7:91:29:c9:5f:37:ef:9e:16:48:
22:c8:c4:40:39:93:86:0b:e1:04:9b:b3:76:76:35:78:f9:a1:
db:1f:1d:15:7b:97:66:79:6c:b5:5a:1f:bc:4b:b3:72:b4:7c:
43:31:27:67:e5:86:00:7c:74:0a:37:6e:81:0a:4f:ed:b5:00:
2d:22:93:ee:30:d2:70:a7:8d:de:dc:c1:80:7a:21:28:9e:a4:
7d:55:72:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+LoISkpIKZ8gM0/rIVYHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OTA1OTQ5ZTk2M2QzNTc3YmUwNzYzMjZjYTBiOTFmZjMy
Zjk2ODQwHhcNMjUwODA2MDcwMDMzWhcNMjUwODA3MDcwMDMzWjAzMTEwLwYDVQQD
EyhkNWE3MWIxOWFlYzhkOTgyMjRhMjc4NjcwNjgxMzdkY2YyZjYwNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWIRLoCxARrIqNLln9/VJCEJnn6b
Z//v7fY7plMJ8F9QZDY5bu6XcYrNaZKsho2r3viDqxDgjIU64gwudjYFdMSY7Lm0
yadNcqFe1ofIP3tj03Bi5pxy3rB9SU3r/8i1xLl37Kl0TldWt57ssdEu+X8gq9Ho
59D8iHjmTW1hg9hK1+EBTIZtVmR4OzmAs7xvhjbYrf7xluVjAWLtJU6VqcXQ7VRO
DXienVTLWiGmAhc7kPrk4dkBoOOU1cRPCjLn7z0wU8BA0KV2jNDmvLDnqCt1WspO
j7GpXNHcR0zaxcRCnFfNpuYYW7NkoFUDlIb114NBp+pd94FknRwb4Ry5+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWnGxmuyNmCJKJ4ZwaBN9zy9gTyMB8GA1UdIwQY
MBaAFHWQWUnpY9NXe+B2MmyguR/zL5aEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQt
MWE4MzAxYjdlNmRlLzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQtMWE4MzAxYjdlNmRl
LzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1czGMDn
YJCz0cehbmnqjvFM18pP8n0ZhiXE8nHRF///3kWg4Cd2Ud9+O0ATIljVkPZsT5Zh
T2zFTv86nFXngkPaDK+MwqldMmO7HpPXvvClPjwE9t8wA9kfcVBLERgQ42lKD38N
zIqxQpN7TNZJTFg/FXl/8o5p0XS8SbOIcvUChFWeYCnCewjg6DA4kbUGSLdFzHpZ
DxNIjmx2OeFpJ3l588+oySdSaFznkSnJXzfvnhZIIsjEQDmThgvhBJuzdnY1ePmh
2x8dFXuXZnlstVofvEuzcrR8QzEnZ+WGAHx0CjdugQpP7bUALSKT7jDScKeN3tzB
gHohKJ6kfVVyiQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:32:00 2025 by rpki-client