Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier: GlE0q0ywJZN/vcBjgziMzOqWEJgKRsyHzxzVWpakvXY=
Subject key identifier: 39:BD:1F:58:05:5D:E5:24:D7:42:BA:77:32:6F:B6:92:5B:CC:79:29
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 0198D47314EE2ECAEC4A8D365D1BD4E43F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:02:48 +0000
Manifest this update: Sat 23 Aug 2025 01:02:48 +0000
Manifest next update: Sun 24 Aug 2025 01:02:48 +0000
Files and hashes: 1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: Gk00VSANZ7lzVmsM5aOn5kkXZhVFckOrUttuZDS940Q=)
3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:14:ee:2e:ca:ec:4a:8d:36:5d:1b:d4:e4:3f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: Aug 23 01:02:48 2025 GMT
Not After : Aug 24 01:02:48 2025 GMT
Subject: CN=39bd1f58055de524d742ba77326fb6925bcc7929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:e6:72:13:60:d1:ea:9c:47:2d:5a:8a:47:
29:23:47:a9:19:3e:d7:54:5e:80:e6:a6:7c:f8:fe:
db:bb:cc:67:de:36:e2:4c:c4:de:2f:d2:9b:66:32:
e0:17:20:41:2b:f2:67:d7:85:6b:c0:f9:45:52:53:
6d:bd:88:63:63:66:7c:a9:55:3e:16:dd:5b:84:9e:
67:ee:95:1b:d0:f7:8d:30:6a:54:24:fa:ae:5b:e7:
05:12:9c:44:d7:11:08:b5:d2:68:02:50:f6:f1:6e:
10:e4:8f:b2:76:a3:1d:ac:ba:41:75:5f:40:f8:8a:
86:60:95:00:c5:89:08:4b:ce:f2:b3:bf:66:ec:3b:
1b:8a:aa:bd:66:9b:2b:ab:aa:88:b3:4b:91:ab:aa:
30:a2:18:4b:a1:13:d9:32:8d:8c:53:a4:dd:18:61:
e4:f2:0b:18:72:a0:fc:58:86:67:e6:81:9e:4c:7b:
60:f8:77:cd:df:f8:9b:c4:ab:5a:fc:0a:88:04:5e:
0e:f4:a6:22:d8:ff:f7:11:47:05:f4:50:1f:76:1c:
7c:21:2a:72:8d:22:89:4b:a8:ed:39:05:e3:d1:ba:
08:eb:19:f4:b3:a5:cf:84:dd:73:5e:9f:ab:bf:75:
e1:a3:0e:54:59:0b:0f:3c:1e:6a:93:d6:9a:87:b0:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BD:1F:58:05:5D:E5:24:D7:42:BA:77:32:6F:B6:92:5B:CC:79:29
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:37:32:4d:22:6c:ae:9c:56:33:4e:3c:90:71:b4:af:0b:e8:
b7:f7:e6:db:08:18:59:3a:91:91:c4:dc:f7:2a:72:6e:e7:7c:
4a:0e:f4:f3:31:6d:f4:64:9e:2f:1b:74:5b:3d:eb:5c:80:b9:
c1:5d:98:02:fd:0a:a6:cd:e9:4e:c9:06:e1:4a:6e:0a:07:3f:
83:93:5b:4d:a7:00:26:9a:ca:d4:93:af:91:cd:a6:49:4d:21:
e6:51:3a:f9:3c:a2:71:0b:fa:b7:35:ae:4a:0f:55:7d:23:8e:
23:ca:37:ae:61:69:87:df:1d:bd:f5:f1:65:f3:86:cb:62:df:
23:0d:6a:83:9c:f7:43:32:ac:c1:61:19:95:92:58:e9:17:68:
ea:f7:13:fb:92:18:b5:4f:27:92:cb:82:c9:7d:9e:df:f6:82:
cc:e2:fe:ac:72:da:e9:1f:b2:a4:3e:8f:de:f2:c0:10:5a:c5:
39:a8:93:fc:cf:f0:fd:af:84:79:12:66:df:9c:1b:e1:89:94:
36:da:a5:f2:59:37:b5:77:a8:84:d2:84:5b:d6:67:07:26:9b:
60:a0:e1:27:92:68:72:00:3a:5b:d3:b0:ae:04:cf:0a:ba:54:
e2:d5:c3:11:81:b0:da:96:eb:ea:6f:7d:2f:15:b3:a8:a5:9c:
c3:62:7f:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcxTuLsrsSo02XRvU5D+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMzZhYWQ3MzM1ZjM0ZTRjZDgyOTQyM2JlYjA4OWM0ZTBh
NGU4NzQwHhcNMjUwODIzMDEwMjQ4WhcNMjUwODI0MDEwMjQ4WjAzMTEwLwYDVQQD
EygzOWJkMWY1ODA1NWRlNTI0ZDc0MmJhNzczMjZmYjY5MjViY2M3OTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5fmchNg0eqcRy1aikcpI0epGT7X
VF6A5qZ8+P7bu8xn3jbiTMTeL9KbZjLgFyBBK/Jn14VrwPlFUlNtvYhjY2Z8qVU+
Ft1bhJ5n7pUb0PeNMGpUJPquW+cFEpxE1xEItdJoAlD28W4Q5I+ydqMdrLpBdV9A
+IqGYJUAxYkIS87ys79m7Dsbiqq9Zpsrq6qIs0uRq6owohhLoRPZMo2MU6TdGGHk
8gsYcqD8WIZn5oGeTHtg+HfN3/ibxKta/AqIBF4O9KYi2P/3EUcF9FAfdhx8ISpy
jSKJS6jtOQXj0boI6xn0s6XPhN1zXp+rv3Xhow5UWQsPPB5qk9aah7DE6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDm9H1gFXeUk10K6dzJvtpJbzHkpMB8GA1UdIwQY
MBaAFA42qtczXzTkzYKUI76wicTgpOh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGphcTF6TmZOT1ROZ3BRanZyQ0p4T0NrNkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85YmE1MDQtMDJhZi00OTcyLWIwYjkt
ODIyZGU5MzA4ZTAxLzEvRGphcTF6TmZOT1ROZ3BRanZyQ0p4T0NrNkhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85YmE1MDQtMDJhZi00OTcyLWIwYjktODIyZGU5MzA4ZTAx
LzEvRGphcTF6TmZOT1ROZ3BRanZyQ0p4T0NrNkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjcyTSJs
rpxWM048kHG0rwvot/fm2wgYWTqRkcTc9ypybud8Sg708zFt9GSeLxt0Wz3rXIC5
wV2YAv0Kps3pTskG4UpuCgc/g5NbTacAJprK1JOvkc2mSU0h5lE6+TyicQv6tzWu
Sg9VfSOOI8o3rmFph98dvfXxZfOGy2LfIw1qg5z3QzKswWEZlZJY6Rdo6vcT+5IY
tU8nksuCyX2e3/aCzOL+rHLa6R+ypD6P3vLAEFrFOaiT/M/w/a+EeRJm35wb4YmU
Ntql8lk3tXeohNKEW9ZnByabYKDhJ5JocgA6W9OwrgTPCrpU4tXDEYGw2pbr6m99
LxWzqKWcw2J/ig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:25 2025 by rpki-client