Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File: DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier: gfZhlVi2GpgsY2ZQEzB7qO59s7aGBTt+so2uHmkEqkU=
Subject key identifier: 54:14:C3:C3:4E:61:AB:9A:C5:9D:6C:55:D4:EF:86:BD:19:01:CD:C7
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 0199FC219E3F4C066935821DE4FDE58BE235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: BIW9vZFlI0AGchEhOMCoIYY1RECA1f696lwsMBbWJoQ=)
2: x2MfmeFdkAhvqtMnijQj44RaTsU.roa (hash: vo8DVrtFsZbAKsU4/jySKYry7q+PSUACGGuHHoeRqBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9e:3f:4c:06:69:35:82:1d:e4:fd:e5:8b:e2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=5414c3c34e61ab9ac59d6c55d4ef86bd1901cdc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:f7:06:25:63:77:0c:6f:b5:6c:41:cc:65:
47:47:88:d6:eb:d0:34:b6:04:fa:fe:c3:48:dd:20:
25:3e:fa:31:64:75:03:cc:47:19:79:95:31:c1:cd:
87:3f:18:b1:89:b6:7e:23:0a:29:91:35:ee:58:09:
bd:64:32:ec:77:89:2f:b8:82:a8:97:e5:47:aa:48:
c3:60:f8:38:5a:42:46:14:ec:5b:d8:1b:ba:eb:7b:
c4:61:ba:16:28:02:09:80:88:2b:07:a5:dc:95:89:
31:e0:c4:8a:cc:15:96:db:80:f4:ac:5b:26:b0:9f:
bd:f6:99:2f:57:3c:3e:cf:0a:8b:b4:8f:5b:1d:ae:
b2:7c:d0:18:13:13:b1:0e:72:1a:b7:8f:1c:e8:74:
54:cd:7e:98:9f:80:c6:67:f8:c6:a2:52:b1:d0:8a:
32:0d:9b:e7:a0:c7:32:25:14:ed:ea:31:81:4a:95:
b1:5b:06:24:97:ac:9a:b1:6b:0a:ba:bc:8a:37:eb:
ed:71:6e:aa:6c:c3:dd:cb:08:7f:5a:c0:74:68:c3:
e7:79:0a:1f:56:14:c0:86:c2:82:99:00:68:f4:30:
b3:ef:6a:6d:f3:76:b4:63:b0:b7:cf:21:23:e6:6f:
1f:20:ee:5a:d9:d1:4c:a4:e5:9b:58:00:7d:df:27:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:14:C3:C3:4E:61:AB:9A:C5:9D:6C:55:D4:EF:86:BD:19:01:CD:C7
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2b:39:43:78:52:db:a2:ec:4f:83:a4:6a:c0:bc:08:de:38:
4f:e5:d4:78:9d:00:8a:31:95:34:76:40:1f:f2:53:3e:29:8a:
77:c1:63:8d:34:42:9b:fd:95:51:d3:32:cb:15:09:a7:84:f6:
5d:f9:80:15:c1:6a:fd:0b:d0:e2:db:af:5b:d3:2f:e0:b9:26:
a9:70:93:af:99:03:7c:cb:68:40:d9:34:2f:dd:5f:a0:be:30:
72:c2:08:35:cf:36:0b:b2:29:eb:0c:ac:22:f6:cb:b1:7f:57:
80:1b:ca:d8:69:65:aa:57:43:87:82:f8:74:ef:e3:d1:69:7f:
e5:67:c4:ac:9f:f3:71:47:40:9b:70:2f:97:0c:74:5d:d3:7a:
d1:ed:ed:95:93:d1:9c:2b:14:a5:f7:ff:b2:d4:15:ef:35:5c:
05:5a:d5:3b:4f:ef:30:c5:74:bd:e1:58:e4:a9:46:aa:bc:3a:
ff:09:47:88:19:85:ac:01:74:35:31:0f:88:da:ad:57:13:2e:
9c:b2:4d:64:f9:84:91:1b:b0:cd:f6:3f:61:27:6b:92:cc:fa:
41:57:38:e0:5b:d6:58:8e:e7:ba:b4:e4:4b:96:e7:bf:0b:a1:
76:5a:82:b6:13:94:7d:82:70:20:05:6f:a9:86:6a:67:d5:5e:
c4:3e:99:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZ4/TAZpNYId5P3li+I1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWE0MDJlYzkwYjViNDc1ZWNjOWJmNGIxYzY2YjIzODIx
MzIxNGUwHhcNMjUxMDE5MTEwMTI1WhcNMjUxMDIwMTEwMTI1WjAzMTEwLwYDVQQD
Eyg1NDE0YzNjMzRlNjFhYjlhYzU5ZDZjNTVkNGVmODZiZDE5MDFjZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUT3BiVjdwxvtWxBzGVHR4jW69A0
tgT6/sNI3SAlPvoxZHUDzEcZeZUxwc2HPxixibZ+IwopkTXuWAm9ZDLsd4kvuIKo
l+VHqkjDYPg4WkJGFOxb2Bu663vEYboWKAIJgIgrB6XclYkx4MSKzBWW24D0rFsm
sJ+99pkvVzw+zwqLtI9bHa6yfNAYExOxDnIat48c6HRUzX6Yn4DGZ/jGolKx0Ioy
DZvnoMcyJRTt6jGBSpWxWwYkl6yasWsKuryKN+vtcW6qbMPdywh/WsB0aMPneQof
VhTAhsKCmQBo9DCz72pt83a0Y7C3zyEj5m8fIO5a2dFMpOWbWAB93ycdgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQUw8NOYauaxZ1sVdTvhr0ZAc3HMB8GA1UdIwQY
MBaAFAyaQC7JC1tHXsyb9LHGayOCEyFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2Qt
Nzc4NjlhNmJmZTU0LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2QtNzc4NjlhNmJmZTU0
LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSs5Q3hS
26LsT4OkasC8CN44T+XUeJ0AijGVNHZAH/JTPimKd8FjjTRCm/2VUdMyyxUJp4T2
XfmAFcFq/QvQ4tuvW9Mv4LkmqXCTr5kDfMtoQNk0L91foL4wcsIINc82C7Ip6wys
IvbLsX9XgBvK2GllqldDh4L4dO/j0Wl/5WfErJ/zcUdAm3Avlwx0XdN60e3tlZPR
nCsUpff/stQV7zVcBVrVO0/vMMV0veFY5KlGqrw6/wlHiBmFrAF0NTEPiNqtVxMu
nLJNZPmEkRuwzfY/YSdrksz6QVc44FvWWI7nurTkS5bnvwuhdlqCthOUfYJwIAVv
qYZqZ9VexD6Z2A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:51 2025 by rpki-client