Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier: Gw4OfYDHTOpl3GHqisG/5rR+d34SIRMrXUR3n2k6YCI=
Subject key identifier: E6:BE:20:40:77:B6:BC:0E:31:99:0E:7C:67:92:A2:1F:2E:EB:4B:10
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial: 019A4DAAC9D0494458C62B842D5436BC85AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 07:00:29 +0000
Manifest this update: Tue 04 Nov 2025 07:00:29 +0000
Manifest next update: Wed 05 Nov 2025 07:00:29 +0000
Files and hashes: 1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: q3LQumyzQx3PQotDmIWnv3t/5Urht2muw28lQbsXKcU=)
2: ayJmzYBNfcdq3NPJ8M3cFOVfzCs.roa (hash: 0bZlkgsn21QwI80X8EQdx07gNzwAcET4bz9RvPxajWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:c9:d0:49:44:58:c6:2b:84:2d:54:36:bc:85:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Validity
Not Before: Nov 4 07:00:29 2025 GMT
Not After : Nov 5 07:00:29 2025 GMT
Subject: CN=e6be204077b6bc0e31990e7c6792a21f2eeb4b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e7:6f:02:10:fc:7b:76:10:af:bb:00:70:f0:
13:e6:8e:29:7f:30:bd:6e:5d:64:f0:fa:d6:d5:2e:
46:aa:ad:a9:e6:04:a8:22:76:b6:95:d5:64:9d:30:
1b:de:a5:a0:01:79:de:d3:b6:42:ab:5b:20:1d:8d:
d4:1c:8b:fa:5d:b5:d4:47:19:30:d0:f7:b2:52:4c:
26:f3:fb:45:29:7e:01:f2:eb:21:52:20:dd:83:af:
5a:af:30:d4:26:d7:82:a3:d7:28:2f:29:a6:c0:f8:
bb:05:6a:69:95:68:09:2f:a0:1b:d4:89:a8:38:74:
8b:31:57:74:83:ad:60:89:61:e8:6d:41:2e:7d:c4:
8d:a0:9e:19:2b:8a:45:5c:a7:37:bb:e0:88:8a:f3:
94:34:07:53:f7:05:38:ca:19:80:03:6b:af:c5:8b:
5d:c2:4a:f1:0d:28:c1:57:d7:68:98:b0:a9:87:01:
9f:df:f0:03:48:14:19:4b:84:69:a3:f9:82:9e:ee:
d4:22:2e:9a:87:cc:81:1f:a2:ed:72:a3:de:57:2a:
a6:59:76:00:de:9a:2b:77:54:b0:1a:b3:2b:9a:d7:
3b:41:a5:f3:eb:bb:5b:e1:6d:d6:01:21:90:7a:c7:
cd:d4:4f:bc:c2:00:c1:5f:78:e1:0d:55:14:65:32:
c3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BE:20:40:77:B6:BC:0E:31:99:0E:7C:67:92:A2:1F:2E:EB:4B:10
X509v3 Authority Key Identifier:
keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b4:a0:3c:b5:34:57:e7:fd:25:9b:bb:86:81:07:d8:52:58:
2a:82:8c:0c:44:81:47:07:01:65:a9:6d:8c:33:32:1a:c0:65:
94:79:14:d9:59:7b:dd:a8:db:6b:11:22:3f:fb:91:e5:f7:ea:
ad:f5:f8:c0:05:80:ae:d7:6b:e6:6f:ef:df:b9:a3:f0:14:d8:
64:01:36:3e:b5:22:01:40:c5:1a:44:95:d4:b1:9e:2e:75:12:
1d:8d:0f:29:7e:68:93:4e:93:c2:26:36:ae:b9:d2:30:f4:50:
d4:bb:5a:c5:6f:54:72:a1:21:b3:e5:df:0f:66:82:f3:53:0c:
1d:57:7a:9c:36:f9:c9:d0:2a:23:f7:0b:2f:78:b2:cf:87:6f:
30:15:4b:21:0a:2d:0d:f3:92:5b:f3:80:06:92:3b:a4:4c:b3:
00:f4:cc:65:02:b5:1e:03:c5:b6:d6:e8:32:73:97:d1:09:e2:
2f:8d:b3:2c:e1:6a:78:d6:f2:e4:43:53:39:19:a2:50:a7:4e:
fb:bc:9a:33:82:9d:2e:65:57:f9:60:a8:ab:08:ad:21:cd:73:
f0:99:54:64:a1:3d:69:a4:a2:8f:7a:3f:98:e4:8b:4f:4a:12:
62:c1:fb:34:77:d4:3f:b5:80:4c:06:39:84:37:8c:95:99:57:
07:01:e9:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqsnQSURYxiuELVQ2vIWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMzczOTdkOGI2Yzg3M2UyOWJlNmUwOTlkZTdiNzQ2ZWFm
ZDBlYjQwHhcNMjUxMTA0MDcwMDI5WhcNMjUxMTA1MDcwMDI5WjAzMTEwLwYDVQQD
EyhlNmJlMjA0MDc3YjZiYzBlMzE5OTBlN2M2NzkyYTIxZjJlZWI0YjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OdvAhD8e3YQr7sAcPAT5o4pfzC9
bl1k8PrW1S5Gqq2p5gSoIna2ldVknTAb3qWgAXne07ZCq1sgHY3UHIv6XbXURxkw
0PeyUkwm8/tFKX4B8ushUiDdg69arzDUJteCo9coLymmwPi7BWpplWgJL6Ab1Imo
OHSLMVd0g61giWHobUEufcSNoJ4ZK4pFXKc3u+CIivOUNAdT9wU4yhmAA2uvxYtd
wkrxDSjBV9domLCphwGf3/ADSBQZS4Rpo/mCnu7UIi6ah8yBH6LtcqPeVyqmWXYA
3pord1SwGrMrmtc7QaXz67tb4W3WASGQesfN1E+8wgDBX3jhDVUUZTLDiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOa+IEB3trwOMZkOfGeSoh8u60sQMB8GA1UdIwQY
MBaAFA83OX2LbIc+Kb5uCZ3nt0bq/Q60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yMWJhODMtZjk0ZS00NTVhLWEyYjct
YTYyNTU2ZDI1NDQ3LzEvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yMWJhODMtZjk0ZS00NTVhLWEyYjctYTYyNTU2ZDI1NDQ3
LzEvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLSgPLU0
V+f9JZu7hoEH2FJYKoKMDESBRwcBZaltjDMyGsBllHkU2Vl73ajbaxEiP/uR5ffq
rfX4wAWArtdr5m/v37mj8BTYZAE2PrUiAUDFGkSV1LGeLnUSHY0PKX5ok06TwiY2
rrnSMPRQ1LtaxW9UcqEhs+XfD2aC81MMHVd6nDb5ydAqI/cLL3iyz4dvMBVLIQot
DfOSW/OABpI7pEyzAPTMZQK1HgPFttboMnOX0QniL42zLOFqeNby5ENTORmiUKdO
+7yaM4KdLmVX+WCoqwitIc1z8JlUZKE9aaSij3o/mOSLT0oSYsH7NHfUP7WATAY5
hDeMlZlXBwHpbQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:32 2025 by rpki-client