Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File: DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier: Wej91k+cexMiqBKLdsDJJoAZTv8t/Ak0BDZE7TyXZww=
Subject key identifier: 1E:E0:E4:14:C1:3B:EE:3E:0C:5C:86:9E:2E:AE:06:3C:24:0D:14:FF
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 019A24AF20AC9260FDD8649483444E8BC01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 08:00:48 +0000
Manifest this update: Mon 27 Oct 2025 08:00:48 +0000
Manifest next update: Tue 28 Oct 2025 08:00:48 +0000
Files and hashes: 1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: kZ9BjZXJR4KFO0NsyReWBqTTQ1ovM5sKg7aUVZcHcdY=)
2: x2MfmeFdkAhvqtMnijQj44RaTsU.roa (hash: vo8DVrtFsZbAKsU4/jySKYry7q+PSUACGGuHHoeRqBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:20:ac:92:60:fd:d8:64:94:83:44:4e:8b:c0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: Oct 27 08:00:48 2025 GMT
Not After : Oct 28 08:00:48 2025 GMT
Subject: CN=1ee0e414c13bee3e0c5c869e2eae063c240d14ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:17:bd:36:da:ce:cb:f6:5e:8a:f7:97:65:
0f:b0:e5:83:1c:52:b1:07:c7:d5:88:23:98:fb:8f:
66:9c:1d:93:b1:c8:c8:30:cb:f2:7c:10:7d:08:1b:
9f:95:ed:2b:3e:e9:f6:78:3c:76:0f:34:9b:e4:83:
42:3f:78:32:d8:1f:9a:70:c5:cf:1c:09:04:b7:e1:
b5:e5:a3:11:66:f4:d8:09:15:c4:f4:00:9f:f0:cd:
6a:34:37:3d:f4:5c:ac:6d:4b:e4:c2:1b:5e:88:e6:
f2:c4:b0:c6:7c:13:5e:c0:5c:00:36:00:c4:ed:d5:
52:0b:76:83:89:a4:3e:ba:93:a9:c3:24:fe:02:1e:
75:ba:89:67:c9:3e:b5:05:ab:2f:58:05:b2:3d:c7:
ce:f4:b7:70:86:9f:91:0c:52:e0:16:f6:2c:3b:07:
44:d6:ef:06:14:4d:4f:a0:63:f6:1a:f3:47:f2:f0:
a2:4e:54:77:ce:2b:4e:7c:42:23:5e:2b:dc:93:e4:
2a:38:fc:57:8b:e0:96:88:4a:7c:23:3d:94:81:de:
4a:a9:3b:81:27:79:70:d8:be:da:b5:fc:37:93:1c:
62:b7:6e:3b:4e:1c:8f:7b:48:15:a9:2b:8b:6d:c9:
63:04:54:13:fb:96:02:b8:9c:f7:c3:c0:16:48:ec:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E0:E4:14:C1:3B:EE:3E:0C:5C:86:9E:2E:AE:06:3C:24:0D:14:FF
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:53:de:3c:db:4a:1b:c2:bf:9e:b6:59:2f:e8:0d:27:c5:f6:
22:7a:17:a4:88:4a:03:4a:08:56:26:c7:e0:a7:29:b4:b8:c6:
19:dc:e9:14:f5:74:9b:49:f8:64:21:6e:22:69:7c:af:de:c0:
0c:4b:ef:0d:19:92:2f:4a:00:a9:d3:ea:56:e9:9e:a6:85:81:
a2:90:a9:8d:67:07:0c:c0:b6:d9:51:dc:6a:9f:3a:e7:23:a9:
29:d6:da:90:ef:70:70:95:7d:87:4d:e4:89:4e:77:f4:73:3c:
42:5b:2b:2b:a7:be:36:fd:0d:3e:58:e6:43:b8:cf:5c:7a:46:
90:3b:17:4f:d6:42:d8:bc:13:2f:1b:95:8e:25:29:b0:5d:5a:
73:54:de:ed:dd:b0:36:72:b1:9b:34:bb:93:5d:a4:26:c9:b6:
9f:64:9a:d6:4c:8f:58:a6:73:2d:e4:be:2f:7c:13:0b:42:31:
0b:06:2b:a9:87:c5:49:c8:31:06:e8:77:03:15:f9:21:fe:63:
ff:9a:e6:9f:59:f9:6b:fd:83:7e:be:70:27:64:5c:d0:a1:cd:
02:92:e1:e8:36:0a:8e:76:e8:44:11:48:df:6c:15:1b:a6:ef:
9d:a9:3b:4e:da:d5:ff:a1:f1:c2:f4:51:da:60:b3:67:e2:62:
4f:05:12:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:23:40 2025 by rpki-client