Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json)
Hash identifier: rGMPt70+cvoLTzEuNTI+ike52aYxQjDuqPdRUF1AqXk=
Subject key identifier: 83:23:AE:20:A0:AA:5C:41:BE:88:8B:95:03:D9:97:3F:40:BC:B6:A3
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 0199FF59539946C0413177A0B62EBBC9949D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
Manifest number: 169E
Signing time: Mon 20 Oct 2025 02:01:08 +0000
Manifest this update: Mon 20 Oct 2025 02:01:08 +0000
Manifest next update: Tue 21 Oct 2025 02:01:08 +0000
Files and hashes: 1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: HEJnE7RZXw1FA9eB/p7Yp3rb4hcnTCet5T9l604NYIQ=)
2: J3l5rSoC85N4xAXm2HxvLusDt_A.roa (hash: jgHAZqarPBwPQhS0mFPS0Zo6XKz3AtLQwgXQdr9WvR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:53:99:46:c0:41:31:77:a0:b6:2e:bb:c9:94:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Oct 20 02:01:08 2025 GMT
Not After : Oct 21 02:01:08 2025 GMT
Subject: CN=8323ae20a0aa5c41be888b9503d9973f40bcb6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f2:57:0a:13:e4:b5:4c:f5:0a:be:26:62:6d:
93:34:9b:14:fa:6b:13:f0:51:ac:19:b0:73:9c:52:
e8:f0:24:1e:1c:41:25:04:61:d2:50:7f:9a:0a:78:
16:12:e0:eb:18:57:51:9c:e6:9b:ae:2f:5f:39:7a:
94:66:ef:9a:b1:99:82:46:5a:07:51:5f:dd:36:65:
b7:68:cc:9b:71:1f:af:e9:ab:87:4c:9e:98:65:7b:
9a:23:9b:59:ae:1e:f1:b2:81:8d:c2:b4:ce:72:c4:
f5:bc:15:6b:95:a8:30:60:0e:d0:1b:3d:55:12:ef:
0f:8c:3d:18:d2:37:f2:fc:0c:dd:50:09:d2:f4:50:
dd:74:a1:7c:5a:9f:be:d4:a4:dd:d4:55:b9:63:d2:
ec:dc:38:c8:a4:0a:4e:72:11:d5:9b:d3:9c:89:89:
36:d4:64:fa:dd:03:ae:a8:9d:99:18:13:17:50:c2:
c8:fc:20:a7:8e:0d:51:9d:3a:6d:9f:eb:3e:a0:d8:
2f:45:e8:ed:47:1f:6a:3e:ab:b7:b1:46:6d:2f:f0:
02:4b:50:ae:6f:be:96:42:03:4d:2b:cd:e8:ad:ee:
e7:8a:41:3c:67:dc:55:77:4e:b6:96:e6:c6:f8:d7:
98:bf:39:5b:4c:d7:6b:aa:7b:cf:f8:c2:8f:f2:b9:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:23:AE:20:A0:AA:5C:41:BE:88:8B:95:03:D9:97:3F:40:BC:B6:A3
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:78:5c:5c:4c:19:c3:df:dd:4c:12:84:66:46:8d:ca:d4:99:
a3:ae:78:d7:31:4f:17:91:ee:c2:e3:0b:35:53:08:75:e1:37:
62:a7:47:66:4e:c3:80:39:69:6b:bf:de:88:37:9e:88:79:ea:
0f:28:c0:06:61:c5:b7:13:94:77:6d:1b:1e:03:e6:81:10:a7:
1f:7e:74:2f:87:fe:c3:c3:f1:ff:59:ec:73:8f:3e:b4:c2:db:
b5:4f:87:2a:e1:47:78:4a:d6:1e:fa:a4:41:de:08:5b:38:38:
16:39:af:8e:5c:27:9f:cf:08:13:e3:c4:f4:64:ae:af:ed:0d:
b1:93:e2:f6:eb:b2:dd:3a:2b:91:e5:5d:59:fa:49:9a:17:e8:
a2:96:c8:3b:a9:d4:c4:20:38:de:57:40:9e:df:8d:e8:52:43:
af:17:c3:bd:f6:7f:a2:6d:e2:3d:b2:d8:e2:e2:f1:00:6d:0e:
d7:21:b5:9e:7a:2f:cf:57:85:a1:f0:a2:eb:20:b3:96:00:e5:
13:5a:23:ea:b2:24:94:4d:1d:c3:e4:2c:80:3c:42:2a:d6:02:
17:38:ed:4e:41:0a:9c:86:44:bb:27:1d:e9:6a:ac:fd:9f:ac:
f9:8a:03:f1:ae:3e:dc:b5:4a:87:2b:4b:0d:7c:9f:e5:51:c3:
6d:a7:e7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:54 2025 by rpki-client