Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
File: djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json)
Hash identifier: SXXwxmMFDRzKegtutl2PxspRxp1routcP0kaIJs/TPk=
Subject key identifier: FA:7D:F2:01:37:CC:4C:5F:F5:D3:63:95:2A:CE:E4:D7:17:C1:DD:5B
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial: 0199FC8FB57312821505194931F96DE017F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: 9V6/RBNx1tExcmkLPKsbLkM0wLyk/FQiFv0K2JU/ERM=)
2: wBaE5svUrTDa4cJiCAHlEwrForw.roa (hash: sNv0g7ZzW3+C7EQOHQU5ckniP/nqJPJ/xsRMEfe9338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b5:73:12:82:15:05:19:49:31:f9:6d:e0:17:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=fa7df20137cc4c5ff5d363952acee4d717c1dd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:48:76:a5:e5:8b:2b:36:7f:09:9d:d5:9b:
1a:af:86:56:4f:92:f6:e8:73:30:cf:1d:ea:1d:20:
bb:dc:a3:ef:89:93:5b:91:d4:6a:c5:e2:ca:da:e3:
37:10:61:fe:59:7c:86:e9:3a:b4:0d:86:b4:35:80:
e5:9f:21:a5:57:ec:1d:f1:3e:5c:1c:bd:dd:85:54:
eb:c0:de:69:95:a3:f4:7a:11:3b:01:df:82:6a:0a:
7e:c0:f1:89:5e:3f:3c:a9:18:c4:58:7b:89:ed:73:
3f:c3:ae:1a:89:b0:67:c6:a9:44:fa:a9:2e:0e:8e:
da:76:a4:79:fb:0c:3d:6c:f5:5a:dd:25:1e:5f:b4:
6e:df:d5:c7:59:ec:4a:15:08:cd:fd:6f:63:0c:fc:
61:05:1f:ca:0a:6b:e6:21:9b:0f:18:ed:5a:85:a7:
62:82:54:0b:77:e8:78:da:d5:88:fb:91:90:23:fc:
0e:4d:c9:e9:b4:58:d8:5d:3c:c5:29:07:d1:cb:b3:
20:8f:70:a4:75:cb:55:6e:a3:a8:9e:e6:ba:9f:56:
9b:d2:19:08:dc:9c:a1:04:3e:7d:12:62:c7:8f:ea:
bd:a6:8d:7d:b7:dd:bc:8c:d9:44:ca:90:2d:c0:33:
1e:8a:41:be:83:57:ff:82:50:72:c3:bd:cd:d7:3d:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7D:F2:01:37:CC:4C:5F:F5:D3:63:95:2A:CE:E4:D7:17:C1:DD:5B
X509v3 Authority Key Identifier:
keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:66:ba:5a:cd:7c:94:86:81:f5:4f:f0:7d:a8:ba:8c:06:a5:
55:b9:2c:15:13:bd:98:b2:b9:b3:a9:31:ee:a9:2a:9a:86:6a:
ae:5f:eb:bc:a2:7d:55:7b:02:f1:e1:df:43:e9:79:fc:7c:9b:
64:a1:ae:d0:c0:66:d8:c8:7a:a4:77:23:23:6a:a3:87:df:77:
cc:58:83:ce:69:fc:65:5d:44:a0:d3:cf:62:b1:89:4a:df:b9:
48:34:49:d0:38:55:1c:ec:bd:f8:ac:35:01:65:50:3f:df:de:
ca:4b:c6:0c:82:a5:24:28:de:d5:3f:31:3f:a2:62:73:63:2a:
8d:ad:23:6b:5f:1e:e1:0f:d9:22:0e:62:ba:70:cb:1e:d3:a6:
a4:ee:c4:b9:d0:a5:56:e8:72:52:52:e7:a0:c5:be:11:b8:a0:
b5:16:6a:a7:8a:b8:20:86:5f:69:46:50:b2:73:19:dd:31:89:
0f:e1:98:45:c9:de:40:31:ee:b0:2d:60:45:f2:01:f1:58:7b:
6d:98:c3:e9:17:83:fe:f8:ed:7e:0d:4f:9f:7d:fb:8a:20:0d:
c6:a1:bb:29:cc:23:c5:7f:6f:67:36:cf:11:1a:9b:55:54:fa:
d4:1f:73:58:68:23:17:2a:3b:b9:39:4d:45:71:1b:2e:0f:54:
b2:f8:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:03 2025 by rpki-client