Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier: +rnL8OaCUXHfOCGLN+yVI7SjI3uvB1H5ksW1voxpEU4=
Subject key identifier: 63:C4:14:80:FE:CB:38:93:81:3E:AE:9A:C4:16:A9:11:2E:86:46:D0
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 019953E758D7D9D16099FFD5A20370895C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number: 168C
Signing time: Tue 16 Sep 2025 19:01:34 +0000
Manifest this update: Tue 16 Sep 2025 19:01:34 +0000
Manifest next update: Wed 17 Sep 2025 19:01:34 +0000
Files and hashes: 1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: QwAYFL2w/nN1J9a44NfwQqwSOeYGlSz9wAA887KVzNA=)
3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 18:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:e7:58:d7:d9:d1:60:99:ff:d5:a2:03:70:89:5c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: Sep 16 19:01:34 2025 GMT
Not After : Sep 17 19:01:34 2025 GMT
Subject: CN=63c41480fecb3893813eae9ac416a9112e8646d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:37:eb:14:c7:c8:1f:b4:c7:87:cb:7b:69:
d1:7e:94:b1:ce:39:53:f3:5a:9a:8d:49:0e:24:fa:
b0:12:6d:56:72:2c:3b:e7:3a:41:58:9a:e9:5d:ce:
8e:d0:d2:86:1a:04:fe:f5:a9:d3:53:42:1a:6e:9a:
e9:7e:9d:c2:6a:b3:87:ba:9a:05:dd:30:8e:5a:41:
93:34:4a:73:67:ae:fe:b4:09:55:f2:fc:f1:63:28:
0e:a4:86:cb:85:03:f9:29:65:1b:f0:6f:cb:e0:fd:
70:b0:e1:34:4e:b9:8a:43:4e:f4:8f:d7:c9:e2:95:
06:ec:59:5f:68:a9:6f:a8:f6:8d:af:d1:c2:35:44:
56:99:3f:ce:67:ab:a3:a0:df:2a:73:ce:17:07:7d:
0f:2e:d5:35:a3:23:cf:5b:42:9b:22:a4:c7:8d:29:
67:0d:62:d8:1f:93:81:e7:6c:65:9d:9e:54:b5:8a:
b9:4f:0a:d7:e8:79:f9:56:7e:1c:ba:57:3a:01:bc:
1a:df:68:3b:fc:21:44:19:1f:1e:20:54:e8:19:02:
29:20:0f:46:38:58:78:e1:82:75:f2:b4:10:b8:5e:
c9:c9:09:3b:7f:91:f2:ca:7c:5f:b1:71:c6:1a:83:
8f:05:81:79:eb:34:37:59:50:d3:cf:89:ef:ff:ca:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C4:14:80:FE:CB:38:93:81:3E:AE:9A:C4:16:A9:11:2E:86:46:D0
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:87:b4:a1:08:29:80:5e:bc:a0:ce:82:d2:ab:c9:db:0a:3f:
0a:9d:35:9a:41:56:fc:14:cd:45:95:78:e6:be:04:29:21:3e:
7d:ee:25:df:5f:54:95:21:6a:7a:6d:cb:26:46:b9:b9:02:73:
6c:db:67:29:eb:45:e2:8b:e3:e6:7e:65:fd:76:d3:d7:cd:7f:
6d:91:05:09:0d:f2:23:bc:f4:a0:05:f1:7b:75:0d:44:d6:57:
e7:84:f3:70:96:6e:4d:d8:74:1f:00:3a:4f:7e:c9:17:98:4c:
75:e6:ad:11:a5:65:1d:df:e7:5c:0f:7e:10:e1:5f:37:bc:43:
2a:00:0d:7d:7c:6c:ac:b2:cb:b9:1a:96:3f:cc:f4:60:27:be:
93:28:33:1f:52:f4:b3:c5:ef:c9:b4:bc:aa:9e:19:58:21:bf:
63:0a:c6:74:d3:56:3c:82:11:e1:be:78:3c:05:fe:02:50:63:
9b:6e:30:10:4c:39:e7:aa:ae:75:fd:80:f9:2d:e0:aa:0d:bc:
e7:e6:9f:af:ec:ad:e0:cd:60:d7:9d:de:70:b9:13:4c:0a:e5:
a3:ef:38:e2:41:40:c5:b6:75:59:6f:0e:45:63:5b:f4:7a:b1:
d4:91:62:38:e5:5c:0b:61:78:ab:37:87:ed:a8:e7:28:f5:fb:
ce:84:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 02:02:33 2025 by rpki-client