Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier: kdaSINOJHqa7ctzwgPISlbDwy1D5kSByoqul3PeGpb0=
Subject key identifier: C5:34:A7:05:8A:D1:39:17:F5:14:CC:6D:CA:B2:14:6F:B2:3A:93:90
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 019A711303F217D8B3C03CC869058CF31742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 04:01:02 +0000
Manifest this update: Tue 11 Nov 2025 04:01:02 +0000
Manifest next update: Wed 12 Nov 2025 04:01:02 +0000
Files and hashes: 1: 9hax9lcbcBPwKNzrRoXl7XRGxs0.roa (hash: IRPjVfW8M9ASmZNnOGpHStRGP8SiQ3X0Tpw2PWHs4Gs=)
2: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: rF9gEesn2FLVQiCmd+ORZ6QLOGR9mcBUCbGkwaSHPZE=)
3: EiGZtAu9plqsBeiA66w6CIaKbMQ.roa (hash: dj8GKcFexedHYt10VTQ4ji9NoWWxtuLzNtXT9+iqLpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:03:f2:17:d8:b3:c0:3c:c8:69:05:8c:f3:17:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Nov 11 04:01:02 2025 GMT
Not After : Nov 12 04:01:02 2025 GMT
Subject: CN=c534a7058ad13917f514cc6dcab2146fb23a9390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:01:b4:55:a7:4f:2b:6a:bd:5c:0e:a9:02:
0e:3f:73:df:8c:fa:3a:71:a5:67:a4:59:a3:df:ff:
08:63:a2:8a:b4:94:bf:58:5f:cb:ea:78:2e:c7:89:
b7:6f:7e:64:88:7c:3f:49:6b:9f:e5:2b:30:ac:91:
0e:10:a0:6b:ab:19:5e:0d:30:e8:a5:b2:9f:67:2a:
91:8a:e4:50:22:d1:9e:dc:97:0b:de:da:e7:28:8c:
14:42:c7:ef:99:2e:ff:ab:90:ed:24:10:bb:06:31:
16:d1:14:cf:a5:77:a4:c5:63:27:14:4d:f0:55:60:
f2:9e:b3:d9:6c:cb:02:59:9b:07:06:df:90:1e:fa:
94:6b:c5:08:4a:01:c9:80:45:63:2b:f6:b3:52:c1:
fc:d4:87:7c:53:44:fe:4b:f2:97:31:1c:18:e4:48:
6b:25:dc:8f:1e:f8:5a:4b:90:2c:82:d5:7a:73:db:
ba:5b:25:8d:5d:13:ba:70:51:53:18:38:a5:80:d5:
30:e9:e0:2e:8a:6e:26:43:3c:d4:e7:8a:e6:46:a5:
7d:98:e7:19:af:59:af:b1:c2:3e:3c:e9:e3:fa:24:
f4:f7:77:52:df:27:d3:fa:c4:c5:1a:cd:2d:f5:6a:
02:f3:ce:07:9f:c5:ae:95:19:79:b8:25:0b:4f:80:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:34:A7:05:8A:D1:39:17:F5:14:CC:6D:CA:B2:14:6F:B2:3A:93:90
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:86:34:8a:59:20:d1:d6:e7:d8:5e:7a:c6:fd:0f:87:05:e2:
2a:56:b9:ce:06:57:a2:0f:c1:90:40:1b:a3:40:ff:c1:a5:24:
ce:e7:e4:b1:57:28:ca:2a:47:17:73:40:fe:1d:9b:3f:04:bc:
27:6b:14:ce:d7:db:a1:ad:74:3b:9c:d5:da:4d:7b:23:97:22:
83:9a:9c:c1:fb:98:b9:77:c0:c4:7f:97:46:35:36:6f:b7:0a:
15:3c:2c:07:3f:f9:6c:de:00:09:f3:7c:2c:2b:bf:3f:2a:0c:
8d:93:ea:20:37:d5:3e:c7:3c:d5:68:b9:b1:07:94:b6:fc:c8:
ac:f3:aa:88:f6:b4:a4:13:31:cc:29:36:42:93:e4:d9:7a:00:
8d:87:aa:67:1c:89:ea:30:97:c6:a7:20:27:dd:f2:b8:bf:b3:
62:a8:2d:de:dc:3c:e1:78:8b:ef:d9:7d:f4:84:27:49:ec:54:
51:44:8f:75:26:36:80:1e:03:4d:f6:09:59:fa:f6:cf:b1:23:
1c:0e:d5:86:45:8c:c0:36:e1:0d:11:9d:91:5d:47:c3:57:c0:
ea:d5:b2:3b:24:23:af:d2:88:4d:88:d7:3e:95:ce:1c:a5:0b:
60:91:c8:fd:4b:bc:8d:2a:60:ae:f9:fe:68:d2:85:df:d8:21:
6c:4b:2a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:48 2025 by rpki-client