Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: xRujs1Kbxap+SCoEkPPVQkcTChG0W2QMdWLWvJoPh0w=
Subject key identifier: 14:BE:35:3E:71:77:A8:FE:5B:6C:D7:32:3A:63:67:6A:39:89:78:20
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 0199FD346F1DCE7E261F12E6B12D38A41513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:35 +0000
Manifest this update: Sun 19 Oct 2025 16:01:35 +0000
Manifest next update: Mon 20 Oct 2025 16:01:35 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: nhtS7ltU+UkIYxT64JF8sPXpH5ttuH9tf/DX7+hWoO0=)
2: Z7WQLysLOr9KTXHt3eRvtbiWeZo.roa (hash: fdaTiSBPfJFKIhyYKXlfKo3BVE4saxPRnib+dEXPrFo=)
3: ZOrfGuxYr-AGVishKANZfi1iYXI.roa (hash: LaLqBnWYlU5gFFvKLSeOrADM1iF3GbcpOkH2fyWF5fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6f:1d:ce:7e:26:1f:12:e6:b1:2d:38:a4:15:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Oct 19 16:01:35 2025 GMT
Not After : Oct 20 16:01:35 2025 GMT
Subject: CN=14be353e7177a8fe5b6cd7323a63676a39897820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:a0:3c:75:3a:07:80:26:2b:dd:91:1a:d7:
5a:11:20:cf:4b:45:9c:f8:f8:20:9e:6b:e0:ab:81:
9c:2a:6e:19:89:ef:ae:bf:b4:33:84:16:be:7a:4c:
41:ff:27:7b:58:d9:97:d8:46:31:75:d5:b7:de:ed:
09:84:d8:34:cc:70:9b:bb:4d:ae:79:2e:93:d3:98:
ae:6e:c2:91:8b:9e:9a:12:9a:95:c4:f8:9d:34:a2:
4d:37:c4:75:db:9c:46:ae:33:0e:28:23:68:5a:92:
34:31:e2:80:aa:28:b0:4c:da:28:e6:9c:1e:bf:c3:
1d:f3:c3:ca:a7:46:5d:a8:80:b8:a5:e8:4b:e9:c6:
d5:99:5f:ea:8a:c2:de:27:76:e8:ed:08:af:e6:86:
cb:53:ed:de:f9:73:3f:42:1f:d3:39:f0:a7:0a:af:
f4:0c:53:5a:4b:ce:6d:53:68:33:67:8a:2c:1d:ad:
09:d5:a9:7a:6a:a4:3f:89:a6:ba:db:8e:3d:5d:07:
57:12:0e:c1:79:11:cf:b0:7c:74:63:82:13:c4:a7:
81:19:c9:1e:48:d3:20:cc:59:11:9c:6e:b1:11:90:
0b:8a:86:89:c5:85:40:9f:e3:6e:d2:44:88:a3:0a:
8c:74:43:c7:d2:f1:c1:ef:45:5e:59:a1:5d:ea:61:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BE:35:3E:71:77:A8:FE:5B:6C:D7:32:3A:63:67:6A:39:89:78:20
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b4:4f:28:38:9c:fc:8b:90:18:dc:d3:25:01:e9:96:b7:7f:
e2:5e:94:1b:e9:a1:c2:c7:63:79:7f:3d:db:46:83:ef:a8:59:
10:3a:9a:24:b9:99:97:c4:53:7d:4a:3d:84:7c:7e:54:6e:33:
99:54:e5:f0:eb:60:3b:56:ea:d6:b4:d4:44:44:4c:7d:5d:5f:
a6:0e:bf:00:16:5f:03:10:f1:ab:0b:41:52:57:d5:92:79:a5:
c0:87:5a:e7:6c:2c:6d:1a:2f:a4:73:86:5f:c5:21:6c:c2:da:
ce:39:8d:af:39:de:7a:a8:db:3b:fd:00:8f:a6:eb:47:90:77:
c1:90:44:d9:df:78:e2:a3:9f:51:92:97:e2:6b:97:98:ec:62:
02:07:3c:d2:49:32:75:ee:eb:ed:05:5d:80:b9:aa:10:62:62:
9d:d9:59:83:8a:dd:5a:57:b9:6f:83:14:12:f2:31:e8:70:f1:
dc:3d:88:c7:6b:b1:b4:41:c0:aa:35:81:b0:51:87:8e:c9:2b:
f6:f8:25:42:c3:77:aa:0b:e3:4a:ab:89:3c:7a:d0:7d:3f:74:
f0:78:41:8f:01:0d:fe:3e:b0:79:3f:c9:1f:14:b2:bd:05:c7:
ea:e1:d7:25:0f:57:a1:fb:0c:be:b0:11:90:a3:e4:be:1b:de:
aa:02:a2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:11:11 2025 by rpki-client