Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier: ad7YWkerC9tX5v1V2YbWK62WNbtG7Xzo6v9a/JBV3d4=
Subject key identifier: 39:FB:B8:92:23:76:6A:4A:C1:58:97:BB:2B:3C:AB:DE:50:B6:03:56
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial: 019896A5B63357DB967C7F50F451474B9A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number: 0852
Signing time: Mon 11 Aug 2025 01:01:38 +0000
Manifest this update: Mon 11 Aug 2025 01:01:38 +0000
Manifest next update: Tue 12 Aug 2025 01:01:38 +0000
Files and hashes: 1: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: gVI7d/US6Q5d4kFORH/xUOXHiqhAihKNhDxNwuFjIkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:b6:33:57:db:96:7c:7f:50:f4:51:47:4b:9a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Validity
Not Before: Aug 11 01:01:38 2025 GMT
Not After : Aug 12 01:01:38 2025 GMT
Subject: CN=39fbb89223766a4ac15897bb2b3cabde50b60356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7d:8c:82:77:2f:8b:1f:2a:03:88:11:b8:79:
54:cf:95:70:8f:fc:29:b9:c7:dd:be:12:d2:c2:32:
50:ef:7e:a7:f5:10:aa:0d:cd:fc:8a:e7:a3:dc:55:
5a:b3:bd:15:8a:62:cb:55:80:0c:c7:3b:24:36:01:
a9:37:31:76:8b:83:0d:eb:43:19:23:f6:b4:31:2b:
4a:f8:1e:08:38:f2:91:d5:04:71:48:a0:f1:15:d6:
40:67:92:ba:f0:4d:7a:c5:b8:05:50:b4:67:d3:45:
05:01:9b:f4:d5:26:f1:03:f9:f5:ac:5a:8e:9f:f9:
07:44:df:63:7d:a2:e9:6c:85:70:3c:d5:10:d6:ed:
3b:53:43:6a:0e:15:4a:0d:c5:2a:b8:af:a4:d4:2f:
ea:2b:5e:42:57:08:ac:e2:7a:e1:93:38:d1:fb:1f:
b3:69:59:90:9b:e4:a6:67:db:7d:8e:bb:59:59:ff:
f1:d6:44:6a:f6:31:7b:b0:42:a7:74:c0:ec:c0:43:
ff:fc:ba:04:0b:03:91:2a:01:1c:63:6a:10:8e:b4:
d5:18:50:e5:f2:16:9e:14:7a:f9:a8:6f:ad:ac:ba:
0e:ee:e3:95:f6:40:30:2d:50:0b:8a:ad:f9:2a:ed:
a4:1f:bf:58:2d:bb:62:5a:45:a2:99:8a:b3:db:08:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FB:B8:92:23:76:6A:4A:C1:58:97:BB:2B:3C:AB:DE:50:B6:03:56
X509v3 Authority Key Identifier:
keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:99:0d:33:3f:f9:6f:44:3d:7d:00:01:da:d7:18:db:15:1e:
1a:bc:c1:16:3f:9b:3d:5f:75:73:36:5a:99:49:f3:a8:bb:5d:
00:85:b2:c1:c5:3d:2a:ca:2c:b6:1d:14:8f:70:c0:1a:2e:37:
6e:5e:9c:ae:ae:13:1b:9b:96:17:fd:36:6c:71:29:61:ed:57:
14:74:eb:46:f4:1e:65:7d:9a:8f:68:3d:45:28:cc:86:d0:d9:
97:f8:8e:56:39:34:27:52:5d:fa:a5:a4:e4:b9:51:e9:1a:12:
4c:26:20:e4:f6:98:5c:82:9b:a6:4d:ab:a6:b2:95:c0:bc:78:
cd:dd:e1:0b:be:38:31:df:6f:bd:40:0a:ec:9e:0f:1c:f6:2b:
5d:a3:39:61:9b:96:fe:9c:66:b3:60:af:b9:86:13:a5:2b:62:
1e:3c:fc:29:6c:24:f1:c2:93:17:3a:3b:cb:d7:9a:fe:d4:49:
53:65:5d:7c:b0:27:8d:03:f2:e8:c3:db:0f:28:ac:2d:55:75:
59:9d:ba:25:11:66:de:ca:4a:a6:9e:0d:03:26:b6:37:2e:68:
8a:02:64:f7:9e:e0:5d:d5:64:70:2a:ac:ef:b2:c8:71:0a:4c:
04:49:14:90:ce:45:89:6a:a2:c1:60:3e:0b:4a:74:45:0d:ae:
22:00:e5:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpbYzV9uWfH9Q9FFHS5qaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNkOTFiMWIyZjlhZjRiNzQyMTRhNmQ2NzhjZTA3MTk2
OGUxY2YwHhcNMjUwODExMDEwMTM4WhcNMjUwODEyMDEwMTM4WjAzMTEwLwYDVQQD
EygzOWZiYjg5MjIzNzY2YTRhYzE1ODk3YmIyYjNjYWJkZTUwYjYwMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X2Mgncvix8qA4gRuHlUz5Vwj/wp
ucfdvhLSwjJQ736n9RCqDc38iuej3FVas70VimLLVYAMxzskNgGpNzF2i4MN60MZ
I/a0MStK+B4IOPKR1QRxSKDxFdZAZ5K68E16xbgFULRn00UFAZv01SbxA/n1rFqO
n/kHRN9jfaLpbIVwPNUQ1u07U0NqDhVKDcUquK+k1C/qK15CVwis4nrhkzjR+x+z
aVmQm+SmZ9t9jrtZWf/x1kRq9jF7sEKndMDswEP//LoECwORKgEcY2oQjrTVGFDl
8haeFHr5qG+trLoO7uOV9kAwLVALiq35Ku2kH79YLbtiWkWimYqz2wj6dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn7uJIjdmpKwViXuys8q95QtgNWMB8GA1UdIwQY
MBaAFHW82RsbL5r0t0IUptZ4zgcZaOHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2Qt
MWMwNTc1NTI2OTFlLzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2QtMWMwNTc1NTI2OTFl
LzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvJkNMz/5
b0Q9fQAB2tcY2xUeGrzBFj+bPV91czZamUnzqLtdAIWywcU9Ksosth0Uj3DAGi43
bl6crq4TG5uWF/02bHEpYe1XFHTrRvQeZX2aj2g9RSjMhtDZl/iOVjk0J1Jd+qWk
5LlR6RoSTCYg5PaYXIKbpk2rprKVwLx4zd3hC744Md9vvUAK7J4PHPYrXaM5YZuW
/pxms2CvuYYTpStiHjz8KWwk8cKTFzo7y9ea/tRJU2VdfLAnjQPy6MPbDyisLVV1
WZ26JRFm3spKpp4NAya2Ny5oigJk957gXdVkcCqs77LIcQpMBEkUkM5FiWqiwWA+
C0p0RQ2uIgDl9w==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:57:16 2025 by rpki-client