Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier: KS0eEEEeRj/X+pQtsh9p9QlNyTHsG7u3rG3EgQb3hg0=
Subject key identifier: A8:79:A5:55:1F:48:F2:77:1C:4D:16:3A:92:15:FA:2A:A2:19:FA:7C
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 01984776E307AAFAEFD55F05785FEFD2F387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 16:00:30 +0000
Manifest this update: Sat 26 Jul 2025 16:00:30 +0000
Manifest next update: Sun 27 Jul 2025 16:00:30 +0000
Files and hashes: 1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: okyEubAQfdE7pIhrQElYX0eMYmdhZ7d6pGgIG9K4GNU=)
3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:e3:07:aa:fa:ef:d5:5f:05:78:5f:ef:d2:f3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: Jul 26 16:00:30 2025 GMT
Not After : Jul 27 16:00:30 2025 GMT
Subject: CN=a879a5551f48f2771c4d163a9215fa2aa219fa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:6c:87:e4:97:46:7a:f7:00:cc:95:9f:a4:
25:26:da:6c:7a:a4:94:df:d4:3f:e0:4a:39:a4:28:
6b:9b:9d:b0:4c:4e:09:75:30:4f:22:98:7a:a2:50:
b9:55:9a:e6:8e:4d:7b:52:81:4a:04:4f:70:12:64:
77:d2:be:1c:a6:9f:c2:e6:22:96:32:5e:29:94:83:
b0:17:09:91:ab:e9:b6:97:b3:ba:3c:7d:5e:c9:4f:
be:19:8d:11:67:b7:97:e4:86:5d:c2:1b:ee:5a:bd:
7a:69:df:0a:d4:02:c2:ec:f3:51:6b:65:b8:54:ee:
74:32:f2:0e:30:d2:d3:19:07:38:32:b9:79:d9:a9:
5f:ad:66:71:01:e9:0f:f9:d5:0a:c3:74:99:fc:b8:
29:d6:dd:90:38:e1:97:31:75:06:e8:50:4e:38:bc:
d6:95:59:be:5b:a7:d4:7f:38:1f:24:8f:06:56:da:
a0:af:a7:d8:96:39:3f:02:e5:68:ea:18:de:f0:70:
c9:fd:95:53:d8:73:3e:a7:e6:ce:57:9b:46:a9:1c:
ce:b0:94:ef:e0:0d:7d:dd:bb:de:ed:b6:90:58:7d:
e1:97:cc:ba:ba:0a:3e:75:be:a2:63:81:47:29:d3:
90:d4:a6:e7:ad:5e:22:93:07:e6:5b:fa:d9:45:49:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:79:A5:55:1F:48:F2:77:1C:4D:16:3A:92:15:FA:2A:A2:19:FA:7C
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:af:4b:98:a1:7c:43:49:c8:c1:34:d9:72:5a:b2:46:1a:26:
b6:96:1d:c4:ff:4f:5c:60:9c:7b:2f:38:65:1f:dc:9b:06:8a:
d0:e3:58:c3:d4:79:5a:81:0f:45:db:eb:19:7f:cd:42:30:61:
19:a4:ba:35:c5:46:76:4c:fd:cd:68:43:b8:30:53:51:4e:2a:
3d:57:9d:e8:32:81:78:a7:c7:af:a9:0b:9c:14:99:fe:81:ec:
7b:33:0c:10:71:94:42:0e:4f:12:01:93:d5:87:9e:9e:67:03:
b9:c8:35:6a:b6:d7:22:af:c0:8a:18:61:ce:0a:26:26:6d:b2:
dc:2e:ac:ce:79:58:1a:37:7a:88:66:83:d8:a3:60:b0:b4:e0:
0f:fc:3a:0e:fe:ff:ff:d6:6f:25:ff:cb:99:4a:2e:83:60:03:
5a:7a:1d:f5:63:02:5b:b1:41:1d:4f:ee:7c:6f:7b:4b:93:de:
95:10:1b:1b:4a:7f:db:8b:3b:31:e6:e4:07:85:ef:dd:29:ef:
35:88:6c:c8:f3:fe:2f:d8:7f:20:66:90:1b:4d:aa:1a:9d:e5:
a3:c1:4d:62:cf:77:bc:a2:d1:32:6e:0c:f0:f7:b9:71:75:54:
d1:8f:44:f4:d8:b7:65:43:04:28:e9:f2:f9:44:92:9b:06:ab:
a0:db:f9:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHduMHqvrv1V8FeF/v0vOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMzZhYWQ3MzM1ZjM0ZTRjZDgyOTQyM2JlYjA4OWM0ZTBh
NGU4NzQwHhcNMjUwNzI2MTYwMDMwWhcNMjUwNzI3MTYwMDMwWjAzMTEwLwYDVQQD
EyhhODc5YTU1NTFmNDhmMjc3MWM0ZDE2M2E5MjE1ZmEyYWEyMTlmYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnelsh+SXRnr3AMyVn6QlJtpseqSU
39Q/4Eo5pChrm52wTE4JdTBPIph6olC5VZrmjk17UoFKBE9wEmR30r4cpp/C5iKW
Ml4plIOwFwmRq+m2l7O6PH1eyU++GY0RZ7eX5IZdwhvuWr16ad8K1ALC7PNRa2W4
VO50MvIOMNLTGQc4Mrl52alfrWZxAekP+dUKw3SZ/Lgp1t2QOOGXMXUG6FBOOLzW
lVm+W6fUfzgfJI8GVtqgr6fYljk/AuVo6hje8HDJ/ZVT2HM+p+bOV5tGqRzOsJTv
4A193bve7baQWH3hl8y6ugo+db6iY4FHKdOQ1KbnrV4ikwfmW/rZRUmwDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKh5pVUfSPJ3HE0WOpIV+iqiGfp8MB8GA1UdIwQY
MBaAFA42qtczXzTkzYKUI76wicTgpOh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGphcTF6TmZOT1ROZ3BRanZyQ0p4T0NrNkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85YmE1MDQtMDJhZi00OTcyLWIwYjkt
ODIyZGU5MzA4ZTAxLzEvRGphcTF6TmZOT1ROZ3BRanZyQ0p4T0NrNkhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85YmE1MDQtMDJhZi00OTcyLWIwYjktODIyZGU5MzA4ZTAx
LzEvRGphcTF6TmZOT1ROZ3BRanZyQ0p4T0NrNkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHa9LmKF8
Q0nIwTTZclqyRhomtpYdxP9PXGCcey84ZR/cmwaK0ONYw9R5WoEPRdvrGX/NQjBh
GaS6NcVGdkz9zWhDuDBTUU4qPVed6DKBeKfHr6kLnBSZ/oHsezMMEHGUQg5PEgGT
1YeenmcDucg1arbXIq/AihhhzgomJm2y3C6sznlYGjd6iGaD2KNgsLTgD/w6Dv7/
/9ZvJf/LmUoug2ADWnod9WMCW7FBHU/ufG97S5PelRAbG0p/24s7MebkB4Xv3Snv
NYhsyPP+L9h/IGaQG02qGp3lo8FNYs93vKLRMm4M8Pe5cXVU0Y9E9Ni3ZUMEKOny
+USSmwaroNv5kw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:25 2025 by rpki-client