Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier: 70mK3K1skV1v/yE00TufXA+2BgF5ZyzmcQEpgkuM2W0=
Subject key identifier: 5C:26:77:D3:24:B3:C6:13:DB:98:F6:08:03:6E:C1:BF:D9:02:F8:03
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial: 019953E7BF4233B7607BBD56DE5E9F470CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number: 168C
Signing time: Tue 16 Sep 2025 19:02:00 +0000
Manifest this update: Tue 16 Sep 2025 19:02:00 +0000
Manifest next update: Wed 17 Sep 2025 19:02:00 +0000
Files and hashes: 1: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: WPO3gnK1Fkhc0LbMtMNW3s0/ZpE/QTB8yv611W1LLjU=)
2: Kw07JxAM6PIjr2ZZEDMn7JfYALU.roa (hash: 7yLwIb1VffX9y/T7PbcK03UjKmQOn5ktXM/NbKeEUqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 18:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:e7:bf:42:33:b7:60:7b:bd:56:de:5e:9f:47:0c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Validity
Not Before: Sep 16 19:02:00 2025 GMT
Not After : Sep 17 19:02:00 2025 GMT
Subject: CN=5c2677d324b3c613db98f608036ec1bfd902f803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:f2:ce:0d:2a:5c:2d:fd:0b:9b:ee:b5:62:
7e:96:26:f4:df:84:65:bd:16:02:2c:7b:9b:63:1b:
ca:0f:97:7e:31:6d:b9:90:75:36:ea:6c:33:3c:98:
7f:f2:32:69:1d:87:6b:dc:5d:d9:85:df:43:81:b7:
d5:b0:03:40:ee:39:6f:17:e6:df:3c:65:88:24:d5:
19:36:a2:27:75:b8:28:91:ae:85:28:90:60:23:0f:
5f:ad:76:fd:be:05:89:9b:0f:49:ef:c4:2b:f5:29:
64:31:8f:38:f6:2b:cd:1b:1f:71:34:49:e8:f8:1f:
f9:28:8b:db:e0:72:b1:ff:05:33:01:f7:d4:29:fd:
3f:35:c5:d5:7b:76:bd:6c:c4:70:c0:24:e2:83:23:
51:8a:6e:fc:ef:dc:1e:d9:13:cc:6a:6d:ee:7d:ff:
00:fe:f0:9e:61:24:ed:50:e8:42:d3:a7:94:5e:27:
27:65:ce:6e:5d:f2:31:19:fb:c6:0e:f3:8d:dc:10:
17:84:90:99:fd:2a:47:b1:4d:e2:80:c6:36:e7:c6:
57:bd:ac:63:e8:24:23:68:8a:4b:76:77:53:33:89:
37:ab:f5:b9:ce:f0:f2:89:4a:4a:a0:77:cd:ad:41:
86:d4:9c:3b:c6:fe:d4:28:37:87:33:a3:28:62:83:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:26:77:D3:24:B3:C6:13:DB:98:F6:08:03:6E:C1:BF:D9:02:F8:03
X509v3 Authority Key Identifier:
keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:94:65:3f:dc:57:2b:ec:f2:25:d7:67:7d:d7:9a:94:df:14:
22:f1:a4:c1:9d:f6:8b:80:27:e0:ad:41:2c:97:60:94:4b:b2:
4f:12:61:f9:e4:f1:70:57:08:40:18:7f:8d:42:27:d2:01:cd:
db:cf:55:fd:f8:76:d5:e8:62:72:cb:6d:ab:01:89:a9:8e:a6:
64:53:10:a9:f4:06:30:64:37:d3:3c:5a:f5:ff:74:d1:93:fc:
c0:68:25:59:d1:52:09:1e:a4:5c:3b:02:bd:3e:de:a2:c3:64:
0c:94:26:4d:c6:fa:2d:07:d1:1f:c8:e9:8f:86:bf:fc:bb:55:
66:4d:ff:26:4f:e8:67:08:08:d3:d3:95:1b:3a:71:64:7b:1b:
70:84:01:0e:35:d3:73:a4:0a:ba:36:9f:e4:a9:41:28:0b:da:
7b:38:d8:b6:1f:a5:11:72:9d:5c:12:01:7d:33:43:13:d8:ed:
d7:f5:d9:0f:06:30:61:23:dd:f2:9b:28:c5:26:2b:43:9f:16:
91:79:69:34:a1:9f:62:b9:af:00:e7:c2:cc:eb:cb:7f:4d:fa:
90:b3:f5:c8:ed:95:4d:88:bb:74:bb:3a:1c:e3:39:5d:1e:1c:
05:86:49:50:34:3f:43:65:df:69:ed:f9:4f:2e:7a:3d:60:e4:
15:37:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 23:06:09 2025 by rpki-client