Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: BUATT/TCZe0Z0fsX4iL6bncHC3NBMKNwB8BvgdPJ5Nw=
Subject key identifier: 0E:A3:A1:C3:2B:78:36:79:6B:D0:19:82:32:17:EA:BD:23:84:18:E0
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 0199FE4763739E70BB627505AF140478B39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 0A7F
Signing time: Sun 19 Oct 2025 21:01:55 +0000
Manifest this update: Sun 19 Oct 2025 21:01:55 +0000
Manifest next update: Mon 20 Oct 2025 21:01:55 +0000
Files and hashes: 1: 9AG_khzlUq_52M_uwAyAT--X2D8.roa (hash: j5npHva08ps2FjnGO8hTZ3BTaOYOIDt9K8fTqv+VPPw=)
2: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: afg1DvVSh2E9VaZam1gN6m6p4rU/JD6HJLcZ+nE6ocY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:63:73:9e:70:bb:62:75:05:af:14:04:78:b3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Oct 19 21:01:55 2025 GMT
Not After : Oct 20 21:01:55 2025 GMT
Subject: CN=0ea3a1c32b7836796bd019823217eabd238418e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:52:f0:a2:6b:9f:c2:3b:aa:d1:3b:aa:ec:
8c:e9:98:c2:52:67:92:14:bf:0e:d6:c1:80:65:d6:
ef:8d:ad:47:44:3f:2b:05:43:2d:35:08:48:f6:a3:
ad:dd:cb:8e:4f:de:1c:72:c2:6e:05:d0:32:47:c1:
8b:4c:88:06:53:4b:0e:8b:89:ff:b6:59:f4:77:b3:
10:fe:e8:da:f9:61:04:ea:c5:bf:36:43:b7:ff:51:
ca:80:af:dc:94:96:99:80:6a:82:1f:0c:6d:89:6c:
e0:72:ec:56:16:98:3b:53:9b:c9:ff:e0:2f:d0:99:
41:64:42:87:7f:45:27:49:70:82:cd:42:aa:81:92:
d3:93:8e:17:c2:20:4f:d4:d9:4a:c0:54:87:0c:bb:
0b:d5:5c:cc:c5:1c:f2:26:3c:a6:30:3a:ce:66:d3:
4b:e2:59:cf:bb:bf:a7:e7:94:e6:c9:be:b4:80:f5:
a9:cc:ed:0a:43:e9:11:d2:84:22:c7:b3:40:d2:f6:
24:73:fc:f8:b9:ab:64:50:52:f3:1c:4b:8d:31:be:
02:82:9e:0c:d4:5a:bf:6d:e7:ec:ea:c9:fc:eb:b7:
17:d2:0e:10:74:e9:97:12:71:c4:a2:57:dd:34:58:
fa:02:96:31:75:05:90:07:3b:40:95:15:de:20:44:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A3:A1:C3:2B:78:36:79:6B:D0:19:82:32:17:EA:BD:23:84:18:E0
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:83:15:07:25:fc:f8:8a:a3:64:20:7e:5a:70:25:11:c7:da:
4e:3f:fe:89:77:4b:bc:92:82:03:63:08:f6:29:0e:93:b7:d3:
58:1e:f4:f5:00:3d:dc:d7:34:5f:0a:59:6e:e5:8e:48:33:10:
5b:a3:24:f8:8c:71:00:2e:fd:49:1b:51:c4:3d:ee:8f:b4:28:
c3:6c:fd:d6:e1:88:80:31:a8:de:89:1b:90:b5:78:32:9e:4c:
d4:e5:03:52:87:12:db:af:bf:00:b4:4a:28:b0:61:25:f8:9e:
9d:ea:50:11:0e:7c:0e:6d:6f:2d:50:60:fd:a0:85:ce:9a:99:
ad:53:e9:80:80:6a:38:db:54:0a:fc:be:67:b2:39:f1:31:83:
59:0a:44:72:36:5d:c4:71:01:75:0e:0e:0b:47:b3:c1:b5:ca:
9f:dc:17:bc:ee:ab:f0:e1:04:cd:c6:46:b9:ab:84:f3:f9:15:
d5:df:eb:e8:68:b0:e3:c8:fc:6c:59:69:61:26:91:39:12:29:
c8:ec:55:45:39:3b:f5:4c:d5:e5:05:ea:d3:da:f2:ca:32:8c:
d0:ba:ce:6a:85:07:62:81:74:56:b4:ea:af:4e:ae:d1:15:50:
89:69:b7:0c:68:3e:85:e8:cf:c8:98:1a:ac:64:0e:ed:e8:99:
de:59:8e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:36 2025 by rpki-client