Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier: owy5+eF5LWyTiXy/DTAzDFm8HFxsm95cZGkYt3TDfz4=
Subject key identifier: 2A:CD:7E:2D:9B:FB:45:95:E5:6B:8C:77:67:47:DA:49:AF:93:34:7E
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 0198D5BBC4FE4F0ACC2DC73C9A92DB1D7A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: 9hax9lcbcBPwKNzrRoXl7XRGxs0.roa (hash: IRPjVfW8M9ASmZNnOGpHStRGP8SiQ3X0Tpw2PWHs4Gs=)
2: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: dU4JO1fXiUPublq3nvId1RXYDkskGIU+0jaXuPD3R+s=)
3: EiGZtAu9plqsBeiA66w6CIaKbMQ.roa (hash: dj8GKcFexedHYt10VTQ4ji9NoWWxtuLzNtXT9+iqLpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c4:fe:4f:0a:cc:2d:c7:3c:9a:92:db:1d:7a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=2acd7e2d9bfb4595e56b8c776747da49af93347e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:28:65:7a:28:10:61:11:10:b1:93:04:41:
79:fc:9b:10:be:8a:e4:ee:73:5f:a9:e3:d4:f8:03:
29:b6:ad:ec:b5:24:5a:8d:7d:9d:7f:29:df:c1:c2:
38:84:70:df:80:d9:42:ab:bb:87:e0:d3:7b:a1:a6:
77:15:bb:62:1d:09:ea:c2:b8:e8:f3:93:2d:56:36:
d9:51:aa:58:96:50:28:ec:39:5c:7d:9c:4a:34:46:
14:ab:f1:9a:ff:00:b4:af:9c:d4:76:a2:cc:6d:db:
98:aa:80:08:f2:3f:7b:3e:b8:3d:37:62:78:a9:67:
55:2c:58:8d:07:0b:f7:0e:be:27:85:85:99:2c:33:
10:50:67:6e:2c:6c:40:30:b8:97:67:3b:67:55:2f:
1e:b4:9e:6f:0d:70:0d:17:a2:29:7b:c0:17:37:d0:
92:f0:6f:a6:d5:3e:47:e2:2a:b0:7d:23:90:43:73:
d5:ed:35:eb:74:44:05:f8:2c:f7:d3:8a:16:dd:51:
08:1e:57:3d:d7:ac:82:f8:5f:4d:0a:1c:9e:b4:a0:
98:d1:3a:68:21:43:59:6d:01:26:ae:b1:da:69:d6:
87:9f:7b:c2:e6:34:8b:ec:75:72:0f:5d:60:d9:33:
39:ac:08:b3:26:4b:dd:4a:73:af:2e:2a:e5:98:8d:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CD:7E:2D:9B:FB:45:95:E5:6B:8C:77:67:47:DA:49:AF:93:34:7E
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:47:7b:f7:da:b8:83:b5:a7:85:8d:7b:23:1a:56:0d:5f:11:
e8:49:06:fa:95:9e:b2:f5:3d:46:40:1a:b9:ac:15:77:ee:00:
de:81:83:10:d8:44:b5:26:07:79:ee:26:e1:92:c7:c8:8a:33:
54:d6:32:d4:5b:5e:73:83:9b:73:55:c0:09:75:39:10:99:bd:
f0:1f:34:12:07:23:0d:63:7f:67:bf:49:0b:a2:f1:90:3e:b9:
03:3b:8c:1d:44:0e:16:9e:1f:47:7d:89:04:ae:cc:47:b3:9e:
e7:59:57:00:5a:52:62:9d:fc:d5:7d:f7:7a:19:87:8d:52:b5:
6b:72:4a:89:7b:e1:af:66:29:c9:64:16:95:fe:00:88:aa:b5:
d1:94:61:87:12:69:b0:c0:06:7b:2c:1a:68:83:74:a3:fb:89:
13:ac:05:2a:ee:a7:96:05:94:de:16:bc:2f:18:6a:ea:4b:c8:
9f:c0:67:81:e2:8b:0a:af:57:99:f2:8a:87:7b:83:54:22:fd:
e1:09:07:10:b7:3c:2d:3a:a5:4d:70:e7:ac:b5:5a:85:d2:4b:
d4:16:17:a2:20:80:80:57:ee:4a:78:85:db:8d:47:0b:ba:6c:
4a:a8:82:da:d0:74:18:d9:63:39:12:4b:84:c5:01:a0:3d:0c:
4f:c5:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:31 2025 by rpki-client