Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: Nv6asvquIL16I3hb4gx7/gjgxKQVPpc8XpKwxdh7VuE=
Subject key identifier: C2:B3:5F:8D:B5:0B:63:17:B2:EE:37:2D:6D:45:A2:7C:73:33:F9:63
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 019947E232DC00404DC078647E0089A32FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 1685
Signing time: Sun 14 Sep 2025 11:00:30 +0000
Manifest this update: Sun 14 Sep 2025 11:00:30 +0000
Manifest next update: Mon 15 Sep 2025 11:00:30 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: 0FOO/klLLb7o2LD9knEFImQZ/I2X8lRXAvK8lqRT+2I=)
2: Z7WQLysLOr9KTXHt3eRvtbiWeZo.roa (hash: fdaTiSBPfJFKIhyYKXlfKo3BVE4saxPRnib+dEXPrFo=)
3: ZOrfGuxYr-AGVishKANZfi1iYXI.roa (hash: LaLqBnWYlU5gFFvKLSeOrADM1iF3GbcpOkH2fyWF5fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:47:e2:32:dc:00:40:4d:c0:78:64:7e:00:89:a3:2f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Sep 14 11:00:30 2025 GMT
Not After : Sep 15 11:00:30 2025 GMT
Subject: CN=c2b35f8db50b6317b2ee372d6d45a27c7333f963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:45:ff:1c:02:bf:b9:92:9f:2d:1c:af:be:
45:ac:0f:c2:78:9b:9e:6f:fb:a9:c6:c9:ae:b0:26:
dc:f1:d6:df:b5:31:09:71:6b:c1:5c:19:74:0b:b4:
70:b4:26:b7:38:f4:a9:60:16:0f:c5:53:e1:98:14:
bb:15:7e:78:1d:c4:56:ba:2f:29:70:1e:80:c3:4f:
6e:53:51:a7:36:00:b0:2d:95:b7:e2:64:71:c0:f1:
73:a4:e4:d5:35:01:bc:3d:96:a3:40:32:b2:aa:86:
6d:4a:3a:51:6e:b7:41:ee:55:e2:0f:ea:48:1b:7b:
2d:69:c8:1a:c3:28:cb:97:df:0a:ab:17:8e:af:e7:
9a:c0:dc:c2:74:98:3d:0b:82:c8:f0:89:7c:aa:57:
0a:c1:7f:93:e8:4b:0c:1a:5d:17:27:33:78:c5:76:
be:2d:34:82:49:3b:73:9c:4c:f0:54:79:53:81:f3:
20:1d:f3:d4:0e:cb:0c:5b:51:db:3d:0c:44:74:01:
22:77:68:b7:b8:fb:70:02:30:eb:c2:2d:af:28:7c:
ff:33:86:4f:db:66:be:20:d7:e0:08:cd:4a:6f:45:
19:d9:02:ea:e1:dd:f9:86:ad:a8:2d:e4:e1:46:c8:
03:f1:ed:3f:15:a1:da:76:8a:e6:7e:0f:a3:0c:15:
0e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B3:5F:8D:B5:0B:63:17:B2:EE:37:2D:6D:45:A2:7C:73:33:F9:63
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7d:60:ce:74:d8:e7:92:2d:45:3c:4a:aa:7b:78:b1:6c:2a:
7b:9a:3c:0d:66:fd:e9:23:8a:4d:d2:8c:37:5f:72:8e:28:06:
cb:7e:97:f8:75:36:0c:c3:2e:d1:01:52:cf:17:22:b0:8c:90:
d3:48:36:44:7d:a3:ba:f2:45:57:9a:55:12:67:30:3f:ec:88:
13:12:f5:64:e7:f0:f6:1a:75:8c:9d:5c:0a:f3:a8:23:d2:72:
03:0d:6c:08:26:07:6d:72:ac:51:36:ea:08:c3:2e:94:5c:06:
6b:30:d9:d6:a0:a7:d3:62:08:56:bb:50:c5:aa:f0:f1:62:6a:
98:fc:c1:f5:b8:76:b7:99:ef:bd:e4:cc:f4:0b:48:1a:01:3f:
bf:df:ef:51:7b:7f:f9:c9:37:9c:50:3b:24:73:7e:f9:6c:09:
5c:29:e9:4e:52:97:b9:f1:07:f7:9f:8f:03:24:5a:76:78:7f:
e0:c5:aa:9b:32:ba:0e:25:ee:87:af:29:39:cd:0c:1d:24:6e:
e7:a1:66:32:48:64:35:1c:90:63:6c:34:8c:49:86:b3:8f:74:
6d:5c:b3:d4:1b:f5:75:6b:c8:e9:3c:71:7a:3e:6d:38:25:09:
27:95:17:29:f6:2c:42:48:b4:de:60:9c:78:46:2a:59:d6:11:
60:91:50:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 17:13:27 2025 by rpki-client