Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
File: djizYCRf5EsXV6ael3oV4H-q9ps.mft (raw, json)
Hash identifier: h21vAI9HPQUte0eB1hvv/AX4Lug4fSa1Ez9dGUp0qUs=
Subject key identifier: 2F:04:32:78:12:A2:07:7C:F9:6F:3E:45:55:F9:9B:1F:A0:DB:32:64
Authority key identifier: 76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
Certificate issuer: /CN=7638b360245fe44b1757a69e977a15e07faaf69b
Certificate serial: 019A00A2D535EBA39858E595CD7695848CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
Manifest number: 023F
Signing time: Mon 20 Oct 2025 08:01:02 +0000
Manifest this update: Mon 20 Oct 2025 08:01:02 +0000
Manifest next update: Tue 21 Oct 2025 08:01:02 +0000
Files and hashes: 1: djizYCRf5EsXV6ael3oV4H-q9ps.crl (hash: 794n2uSlt3Q/JKtj7G1ktQK5VUihFXSQy46zvTfUK1M=)
2: gSGKFe1pn3_5E4Q7YRW3hV9F-dg.roa (hash: Gfi8XtFBl7a2jBdHmK+GtPDHztaG0pAxvqWau8U6T/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:d5:35:eb:a3:98:58:e5:95:cd:76:95:84:8c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7638b360245fe44b1757a69e977a15e07faaf69b
Validity
Not Before: Oct 20 08:01:02 2025 GMT
Not After : Oct 21 08:01:02 2025 GMT
Subject: CN=2f04327812a2077cf96f3e4555f99b1fa0db3264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:94:c6:7d:bc:f5:31:bb:06:ee:1d:c9:50:
ca:f4:c9:b8:93:4e:28:b1:ec:9d:9e:32:b6:89:ff:
42:d0:cc:df:b7:60:92:d6:59:d6:bf:26:e1:13:01:
21:db:05:27:9d:35:2e:00:8f:22:49:11:ec:14:94:
1c:2c:97:91:89:79:a3:49:9e:08:e4:c4:18:76:ff:
98:35:ca:6d:50:2a:0f:ce:ac:75:10:b1:24:f2:9f:
df:89:20:a8:3f:1d:3d:f6:90:1a:4a:77:6e:51:25:
be:4e:10:a4:39:d3:ea:dc:45:6c:81:0d:cf:d3:65:
9e:fc:d4:70:a3:82:1e:44:7e:e1:7d:73:fa:cf:3c:
41:1a:c3:ab:bf:5f:cc:cf:8e:24:51:96:ab:99:01:
03:da:57:36:35:6c:84:1c:08:23:2a:3a:3c:92:e6:
27:ad:b5:d4:ec:bf:b3:47:72:dc:70:cd:3c:45:7c:
4d:98:55:ba:24:6c:06:72:21:92:d6:d9:cf:11:7e:
9d:a5:6a:e9:04:2d:1f:16:92:31:f3:30:a4:3e:cf:
c9:41:6e:b1:91:de:38:de:e4:94:a9:f2:9d:3c:a1:
75:78:3c:42:3e:91:07:63:93:45:19:63:d4:95:31:
e4:5d:3b:0a:aa:98:fd:51:27:2c:ee:5a:52:7f:10:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:32:78:12:A2:07:7C:F9:6F:3E:45:55:F9:9B:1F:A0:DB:32:64
X509v3 Authority Key Identifier:
keyid:76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:59:2e:fe:ed:2a:25:56:fc:94:63:b9:2a:85:e0:4f:e5:76:
f5:e2:da:a4:4e:12:ec:d2:ca:6e:d2:65:60:77:d7:33:60:db:
b6:80:b6:ba:38:37:d0:43:f0:a3:0f:6f:d5:9c:30:22:a2:aa:
b5:2f:e5:af:95:64:c5:3c:53:44:5f:52:b7:87:26:ac:64:54:
39:43:e4:da:82:9f:0b:89:69:51:45:07:fc:6e:a8:42:c3:5c:
73:d9:15:fc:3a:df:c9:0a:57:8a:ce:8a:05:fe:a7:55:5e:a6:
6f:e3:17:53:7a:65:27:d4:cc:fc:79:8b:61:c4:5c:14:5d:0e:
67:b9:d7:e0:38:8b:4e:9b:07:44:b0:c8:7c:12:00:5b:f5:51:
96:0e:65:cc:c4:44:5d:5d:f9:c0:b6:5c:52:e0:bb:63:18:ef:
95:ba:be:ce:0f:37:a2:ec:0e:bd:f6:2d:ee:64:8f:50:b1:93:
90:9d:6d:3d:07:a6:fd:a2:50:df:c5:a2:c5:a5:24:25:3d:54:
3e:64:df:db:9b:33:57:cd:f0:1c:6a:19:ac:fd:74:9a:4f:3b:
74:06:50:cc:66:9e:c7:1b:4e:1b:45:e2:f1:f9:99:c1:22:63:
25:9d:fe:e0:7b:c6:52:18:09:ee:c6:51:02:54:f8:d5:cd:d4:
25:cc:7a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:18:18 2025 by rpki-client