Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier: Q0QGyaO5sUVxkd5UuIEBPI/L1mg8EVO3S97yMg5z23w=
Subject key identifier: D4:D6:D9:9C:25:80:62:2E:66:E1:7C:1D:A7:A2:16:22:46:3D:7F:E9
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 0199FBEADC0263310C04AF20CD20215B0235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:36 +0000
Manifest this update: Sun 19 Oct 2025 10:01:36 +0000
Manifest next update: Mon 20 Oct 2025 10:01:36 +0000
Files and hashes: 1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: xsmVwFym6xoFt6bL+AI+H9Ms2/fLoCCq9APBSJQ6mCI=)
3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:dc:02:63:31:0c:04:af:20:cd:20:21:5b:02:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: Oct 19 10:01:36 2025 GMT
Not After : Oct 20 10:01:36 2025 GMT
Subject: CN=d4d6d99c2580622e66e17c1da7a21622463d7fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5c:ee:8f:13:2c:ca:6c:ba:7c:70:88:41:bd:
3c:93:38:1f:ab:17:cd:85:fd:c5:3b:0d:e7:f4:cf:
b1:f9:47:0a:5d:8a:0f:0d:98:ee:20:d9:c0:f7:58:
e9:b0:8b:06:98:c3:54:ed:bd:88:39:0a:7a:d5:9e:
75:6a:bc:1d:6b:41:41:25:cf:58:67:96:1b:b2:9d:
53:ba:0d:14:68:e2:f5:04:3e:b8:21:f0:e6:1b:28:
4e:0d:3b:f1:12:b0:91:d1:dd:65:37:94:39:7b:e2:
77:68:6c:28:88:0e:15:2b:5a:eb:29:81:58:3a:e5:
d1:a4:5c:1c:11:f6:21:f7:a5:7e:52:5a:fe:62:1a:
95:50:b4:f1:39:c9:db:1d:16:2c:51:53:72:d6:60:
df:bb:28:40:7c:ec:36:95:08:45:19:2d:85:54:10:
1c:d3:1e:e1:ab:d5:e5:e7:cd:51:54:64:7e:0b:7f:
2b:63:87:42:b7:f0:ca:73:18:b9:8f:df:ec:f8:44:
c0:00:20:6b:76:41:e2:fc:75:16:45:76:14:7a:da:
e7:93:90:e6:87:18:e6:d6:1a:94:5c:c7:1a:4e:b9:
34:06:de:03:95:7e:64:ea:92:94:25:74:5e:19:b9:
ef:54:d1:a2:c3:a1:fa:31:a9:df:d2:bf:42:09:8e:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D6:D9:9C:25:80:62:2E:66:E1:7C:1D:A7:A2:16:22:46:3D:7F:E9
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3a:22:e8:12:db:2d:65:a4:d6:4a:9a:36:8c:05:bd:81:89:
60:90:cc:4c:63:3d:70:73:f8:51:3d:d2:bf:4f:5b:8c:43:4f:
1c:c2:af:de:31:23:7c:90:c2:bb:d3:7c:bb:d4:fc:40:4c:c2:
fd:f3:f5:ed:03:4f:e7:05:d2:07:f9:fc:02:c3:c6:cf:17:3e:
14:62:12:46:60:ab:f6:ed:fd:00:40:9c:bc:8a:69:6c:e9:b2:
d1:8e:c3:0f:65:cc:2f:8a:19:b6:2d:68:a6:ba:a7:b0:dd:9c:
b6:aa:7e:03:cf:bd:2e:ed:52:c2:d2:12:ff:d8:48:d3:4d:45:
70:10:81:88:d0:0b:be:1c:09:09:31:af:56:92:17:73:2e:0a:
a1:80:f6:a5:d6:5a:6c:b7:90:a6:74:fb:a4:db:90:63:a4:84:
04:b8:14:cc:dc:69:0e:84:17:dd:e3:77:cb:49:4b:4d:e3:77:
08:e7:a3:f9:37:b2:71:a2:fe:89:40:d9:af:4d:5e:d5:7f:c1:
53:ec:56:f2:f8:f0:11:ee:d1:a4:a0:af:e4:ae:d4:1e:e5:cd:
34:5a:c5:79:17:fd:53:dd:eb:6a:8f:70:79:71:f3:3e:4e:7a:
5a:5a:14:9b:ad:ec:28:9d:45:9b:52:60:ec:4f:66:a9:67:8e:
3d:23:07:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:59 2025 by rpki-client