Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
File: DjGYqYJ97q-rHSe1U3lPRLkabAY.mft (raw, json)
Hash identifier: TNZPTz1EoUQi+RVniDHhTJ08M+O7a3BppdGoSuvATVk=
Subject key identifier: 87:5A:EC:5D:4E:C3:72:01:9D:1C:62:EF:4D:F7:4A:05:74:8A:8D:2A
Authority key identifier: 0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
Certificate issuer: /CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Certificate serial: 0199FC21C2C835760B0B1CEED7A8D31508A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: DjGYqYJ97q-rHSe1U3lPRLkabAY.crl (hash: mL3+7+xksRG9tgt8EEKz/RpOGq1hkScmDs0wx+Ejz+w=)
2: Q2G86FF3yJmX8igU3QYVD4ZCivo.roa (hash: 6/LUNvPV45MHYpMpmogqr8zL/TAfgvM+oAX3YS1oNRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c2:c8:35:76:0b:0b:1c:ee:d7:a8:d3:15:08:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=875aec5d4ec372019d1c62ef4df74a05748a8d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:16:56:16:75:f1:cf:cd:3e:33:65:01:36:
59:ec:04:49:32:ef:45:c8:3d:a5:16:a4:c4:cb:ed:
64:d8:0c:f6:5e:0a:af:90:ce:f9:76:7b:b7:e4:11:
64:3f:1b:e6:4f:2f:4f:e9:53:1a:87:8d:b5:9c:03:
a7:98:20:ec:39:11:07:47:44:20:fc:82:84:fd:6b:
b4:48:18:7f:4f:e9:42:4e:68:be:42:39:b2:5a:10:
c2:0e:9f:3a:67:d3:17:09:3c:f6:9b:01:a8:d8:dc:
1e:0b:d9:4a:94:90:b8:5b:b3:ee:e0:f5:4d:4c:a6:
60:06:cc:6e:e5:b7:f2:a3:3c:ad:20:49:58:05:0c:
a5:04:be:69:57:4c:44:64:8c:02:a3:28:e7:23:97:
26:df:7c:42:ae:3c:11:65:14:b1:bc:19:c8:0b:e0:
72:8c:dc:22:f3:b9:26:a1:d2:e3:e0:9f:76:c1:d5:
4a:76:61:f1:59:05:af:cd:e3:9f:21:d1:3a:ab:72:
ff:b3:48:64:65:bf:5a:ab:70:f5:a8:11:57:e3:7c:
77:f3:e8:38:b1:87:f8:a8:ca:b4:3e:a7:a1:1d:4b:
4a:d6:42:65:0d:22:39:f1:da:65:52:7b:84:cd:f0:
ea:06:83:54:8e:22:cb:20:80:bf:be:36:78:80:09:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5A:EC:5D:4E:C3:72:01:9D:1C:62:EF:4D:F7:4A:05:74:8A:8D:2A
X509v3 Authority Key Identifier:
keyid:0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a2:d6:ff:e9:64:85:15:bb:46:91:72:a9:e1:21:82:a6:eb:
6d:96:85:85:9a:01:aa:93:a8:c4:76:46:9a:97:f3:ef:e8:ca:
5c:dc:fa:53:14:40:4e:7a:06:93:72:17:93:fe:10:bc:80:3b:
bd:df:56:e1:b3:af:3f:f5:6a:25:bd:9f:dc:a7:da:48:bc:47:
75:b4:dd:a3:a5:6e:c9:6b:d1:29:5a:ee:37:7e:09:71:3e:1b:
62:5c:4e:ff:4e:77:46:34:fd:b7:63:04:e6:d9:6a:d4:28:28:
a8:30:bb:72:22:aa:d1:f4:3e:ba:92:c1:86:85:8a:22:cd:0c:
93:1f:17:6b:1e:d2:04:92:4e:dc:45:df:a2:b9:d7:5f:8b:4a:
0d:4a:46:61:66:8c:37:f8:c4:cc:bc:a8:a4:7e:d8:f1:70:58:
0d:fe:86:2a:df:10:ed:a7:a3:98:3c:f1:5b:d3:3d:0b:e7:a5:
70:cf:7a:fa:35:97:34:53:5f:fc:da:ff:6b:fc:df:e7:bc:fa:
9d:03:07:19:e1:44:77:dc:a0:ae:fe:b8:51:1e:c6:b7:c3:49:
55:25:15:1b:1a:d0:1f:e2:3e:a4:d9:ad:be:d6:26:c7:f1:07:
26:8b:b3:79:af:91:67:1d:ec:be:ee:f1:68:25:e6:91:68:4a:
0b:82:c6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:47 2025 by rpki-client