Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: GjHdaAN8B2bVd3EPnU/6anhdsqagMbYeEdNUdTZBqJM=
Subject key identifier: AE:AD:21:C1:31:99:24:DE:85:87:C9:40:A4:FD:68:15:EB:DC:47:4A
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 019A4EF5D4CF9B8D50FA2739FFF734A94F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 0845
Signing time: Tue 04 Nov 2025 13:02:04 +0000
Manifest this update: Tue 04 Nov 2025 13:02:04 +0000
Manifest next update: Wed 05 Nov 2025 13:02:04 +0000
Files and hashes: 1: Dtmeeo2Ahqu20IUfCd65FxwTl2k.roa (hash: I+vjjlJcdrLb3KMRUhvwUitmKXx1JxbgC5EfsL3L6hI=)
2: MA5FazDAuWizu2sArINAiZDNSkk.roa (hash: RRjoWKPkJksBjTPCtL+V2nNMKG6oIx2+O6vH374Aw7I=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: na9WmZqfPMI1KEyCMqf8DxElPCKBgzwD7C2M0dL81BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d4:cf:9b:8d:50:fa:27:39:ff:f7:34:a9:4f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Nov 4 13:02:04 2025 GMT
Not After : Nov 5 13:02:04 2025 GMT
Subject: CN=aead21c1319924de8587c940a4fd6815ebdc474a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:ca:3b:44:ec:b7:0b:dd:92:04:85:fc:cf:
62:f9:4f:75:9b:64:df:2b:06:32:01:4e:d4:e8:bf:
1f:9e:23:ea:b0:7f:67:22:a3:5c:c2:29:f3:16:cc:
54:a3:59:6f:52:1a:51:9e:18:8d:3d:df:22:f9:13:
d2:d2:7d:f2:7f:5f:dc:f7:ce:2c:ab:3c:7f:9c:3f:
12:5a:bb:f9:77:da:19:1d:4c:af:1c:12:b7:52:b9:
f2:46:08:cf:75:68:82:94:22:c0:cf:67:df:27:c8:
84:f1:bc:98:52:c8:73:48:e9:69:91:2e:47:38:3a:
03:68:da:bf:33:f8:c5:8b:9d:58:8c:df:67:22:2d:
31:94:90:3e:96:41:ae:ab:3c:3f:00:d4:db:76:52:
ae:2f:97:5b:58:7c:8f:a1:00:72:e2:09:f6:2f:7a:
45:7f:b9:fa:7d:28:ae:62:1c:5a:60:97:10:09:43:
67:5c:d2:95:be:fb:e4:37:30:6f:23:8b:8a:7c:97:
08:4b:aa:e3:3c:77:21:9a:9a:d8:ce:ab:76:e7:05:
28:5d:d7:2f:5e:f4:2f:e0:38:e4:37:79:f4:a3:05:
7e:40:bf:e4:6e:08:1d:2c:5e:54:35:37:6d:12:2b:
c2:66:67:fc:c2:37:f2:55:ad:87:d2:71:47:fe:37:
62:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AD:21:C1:31:99:24:DE:85:87:C9:40:A4:FD:68:15:EB:DC:47:4A
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f8:65:a7:64:ee:36:dd:36:e6:d9:8b:e0:09:fc:e6:21:c6:
d8:fa:41:ba:40:61:b1:90:74:99:32:c9:60:39:97:c9:27:47:
d9:ac:c1:cb:1e:5e:84:ad:1f:4f:5a:2d:83:b4:a9:cb:b1:18:
73:fc:7b:05:34:ef:c5:f3:63:27:b1:75:16:1c:c5:5d:92:81:
a9:37:3f:42:d4:55:d1:33:7a:ec:96:70:06:77:4c:31:25:77:
42:c4:4e:a4:db:fa:89:f8:45:39:4a:45:00:91:54:60:5e:d8:
8f:ad:42:fd:a9:fd:c3:af:74:56:5d:52:fc:80:41:3e:52:11:
f4:d2:a4:a5:e8:52:18:ff:a8:1d:84:0d:db:78:fc:54:53:b5:
5f:8c:15:b5:21:83:8a:65:22:2f:50:31:24:9d:42:3b:41:3d:
c5:ea:0e:97:cf:bf:1a:83:9a:b1:ec:7d:2a:b9:52:8c:76:3c:
62:71:03:ff:3c:fa:c2:12:40:78:18:c6:23:11:59:86:84:e4:
77:13:81:03:86:52:3b:41:b4:28:e8:1b:c0:cb:df:a3:bc:1e:
45:28:eb:39:de:1f:5e:dd:8c:13:d5:20:2f:9c:95:9d:2d:b6:
43:4b:68:91:b6:c7:5d:34:14:2d:b4:f2:3f:c7:5f:b0:68:33:
19:b5:30:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9dTPm41Q+ic5//c0qU96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzQ3ZTE2OGQ2OTY1ODU0NTM3NGU2YTBiNjhkMjRiOTdm
Y2QwMDYwHhcNMjUxMTA0MTMwMjA0WhcNMjUxMTA1MTMwMjA0WjAzMTEwLwYDVQQD
EyhhZWFkMjFjMTMxOTkyNGRlODU4N2M5NDBhNGZkNjgxNWViZGM0NzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0fKO0TstwvdkgSF/M9i+U91m2Tf
KwYyAU7U6L8fniPqsH9nIqNcwinzFsxUo1lvUhpRnhiNPd8i+RPS0n3yf1/c984s
qzx/nD8SWrv5d9oZHUyvHBK3UrnyRgjPdWiClCLAz2ffJ8iE8byYUshzSOlpkS5H
ODoDaNq/M/jFi51YjN9nIi0xlJA+lkGuqzw/ANTbdlKuL5dbWHyPoQBy4gn2L3pF
f7n6fSiuYhxaYJcQCUNnXNKVvvvkNzBvI4uKfJcIS6rjPHchmprYzqt25wUoXdcv
XvQv4DjkN3n0owV+QL/kbggdLF5UNTdtEivCZmf8wjfyVa2H0nFH/jdimwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6tIcExmSTehYfJQKT9aBXr3EdKMB8GA1UdIwQY
MBaAFHc0fhaNaWWFRTdOagto0kuX/NAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2Qt
NjdlYmJjOGM2ODYyLzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2QtNjdlYmJjOGM2ODYy
LzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPhlp2Tu
Nt025tmL4An85iHG2PpBukBhsZB0mTLJYDmXySdH2azByx5ehK0fT1otg7Spy7EY
c/x7BTTvxfNjJ7F1FhzFXZKBqTc/QtRV0TN67JZwBndMMSV3QsROpNv6ifhFOUpF
AJFUYF7Yj61C/an9w690Vl1S/IBBPlIR9NKkpehSGP+oHYQN23j8VFO1X4wVtSGD
imUiL1AxJJ1CO0E9xeoOl8+/GoOasex9KrlSjHY8YnED/zz6whJAeBjGIxFZhoTk
dxOBA4ZSO0G0KOgbwMvfo7weRSjrOd4fXt2ME9UgL5yVnS22Q0tokbbHXTQULbTy
P8dfsGgzGbUw8A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:38 2025 by rpki-client