Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier: 668wq+v4Iq2Dq1iIk32VoaaAWnVl5m/hABNw9kgxDXU=
Subject key identifier: 97:EB:A8:3F:66:B0:AB:B3:57:2C:2C:5A:6B:BE:11:9F:81:AB:D0:F4
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial: 019A56AE71C6BA6B1F67601CA64B54321858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number: 1712
Signing time: Thu 06 Nov 2025 01:01:04 +0000
Manifest this update: Thu 06 Nov 2025 01:01:04 +0000
Manifest next update: Fri 07 Nov 2025 01:01:04 +0000
Files and hashes: 1: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: 6fo8rzK2S0halIjCnweiXMP1Fr+ePYRy9ATIe2DgAoU=)
2: Kw07JxAM6PIjr2ZZEDMn7JfYALU.roa (hash: 7yLwIb1VffX9y/T7PbcK03UjKmQOn5ktXM/NbKeEUqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ae:71:c6:ba:6b:1f:67:60:1c:a6:4b:54:32:18:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Validity
Not Before: Nov 6 01:01:04 2025 GMT
Not After : Nov 7 01:01:04 2025 GMT
Subject: CN=97eba83f66b0abb3572c2c5a6bbe119f81abd0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:18:26:40:31:bd:30:d2:b8:d5:b4:d4:1b:56:
49:b6:da:b1:a2:72:71:83:d2:aa:43:30:3f:c7:b6:
90:ac:a1:1b:96:00:ae:b9:43:fc:af:e4:e0:48:08:
99:9c:5e:53:76:d6:b3:e7:5c:38:7c:64:cc:2d:bb:
cd:26:ef:9f:c4:ed:5c:1a:70:f3:54:25:9b:82:6f:
9a:ed:a5:97:e1:2f:96:c4:ae:c8:66:d1:0a:33:09:
ae:af:8b:3f:ee:e6:ee:64:06:f4:a1:81:4f:eb:2e:
d1:98:be:69:d8:9b:37:85:65:13:18:1f:fb:eb:38:
c2:a4:3b:1f:a6:39:44:a3:ea:46:43:f1:5c:8e:b4:
61:48:af:da:37:19:84:5f:cf:f8:be:a6:bc:6e:5b:
ee:fe:a3:37:0c:3a:9b:7f:83:3d:16:0f:bc:52:e9:
d4:04:2a:4b:26:62:33:bf:1b:6d:9e:ed:11:eb:3e:
b8:a2:7c:c5:b3:72:fa:1f:96:b4:c4:43:bb:d2:92:
e3:d8:fa:c3:af:ad:27:7b:d3:e7:4e:80:f9:b4:14:
2e:12:a9:16:3c:e8:51:12:07:87:fc:65:89:10:d0:
18:96:15:64:dc:ab:33:15:d9:82:87:a2:2c:17:98:
6e:50:96:f7:d3:b5:6a:58:95:14:ac:ef:d3:da:2f:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EB:A8:3F:66:B0:AB:B3:57:2C:2C:5A:6B:BE:11:9F:81:AB:D0:F4
X509v3 Authority Key Identifier:
keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:98:5b:71:db:fc:06:39:10:da:f5:75:a8:8a:c5:f7:5a:57:
d6:fa:ea:1c:15:53:a1:d6:4e:65:20:70:a3:56:cb:cd:21:f0:
ac:32:86:a7:8b:52:e6:f1:1d:86:47:e7:b7:bb:97:ea:ef:12:
a3:aa:23:c8:db:15:c3:3e:8e:5e:c4:20:59:69:5e:c6:09:d3:
b9:7d:de:cc:80:6d:67:83:5c:f0:ac:75:4a:af:b6:06:e4:fb:
84:67:ad:0b:e9:04:52:91:c3:22:12:b6:39:3c:12:14:b9:3f:
f8:12:7a:da:af:cb:e8:45:63:2b:1c:46:0e:ed:68:92:b9:8c:
67:97:cd:e5:8b:91:d3:2f:17:5f:bb:5b:1e:d9:03:28:32:e7:
e9:fc:94:2a:90:cd:60:54:61:53:89:d7:bd:ae:f5:85:6b:4c:
45:fe:28:d6:19:37:a6:31:22:83:54:db:30:4f:52:05:b4:3d:
a7:e8:8e:66:32:14:7a:a6:41:0e:11:fe:8f:ac:3e:51:da:56:
a9:ec:02:d0:e7:dd:49:c6:dc:d0:f6:f6:5c:15:00:c8:cc:af:
31:98:cf:3c:32:c8:f5:88:99:27:9b:27:78:e2:36:a8:98:9d:
68:f1:72:2b:d3:8b:7e:55:f4:5c:1b:a8:d6:3b:ff:83:11:c6:
55:e8:2c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 11:22:44 2025 by rpki-client