Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier: F323SbHBOz6t40NurYo4df02VX4nYKkHn8Ey9Q/6H4M=
Subject key identifier: 3B:3B:5E:73:0B:16:B5:47:88:B8:C2:8F:BB:50:26:85:DF:18:A4:49
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 019922FAE679FBD22358CA7C0DFFD01950F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:01:32 +0000
Manifest this update: Sun 07 Sep 2025 07:01:32 +0000
Manifest next update: Mon 08 Sep 2025 07:01:32 +0000
Files and hashes: 1: 9hax9lcbcBPwKNzrRoXl7XRGxs0.roa (hash: IRPjVfW8M9ASmZNnOGpHStRGP8SiQ3X0Tpw2PWHs4Gs=)
2: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: gveGpN0za2jui27/BwvFj2gp9ch3PY2HScF1gslVVcg=)
3: EiGZtAu9plqsBeiA66w6CIaKbMQ.roa (hash: dj8GKcFexedHYt10VTQ4ji9NoWWxtuLzNtXT9+iqLpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e6:79:fb:d2:23:58:ca:7c:0d:ff:d0:19:50:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Sep 7 07:01:32 2025 GMT
Not After : Sep 8 07:01:32 2025 GMT
Subject: CN=3b3b5e730b16b54788b8c28fbb502685df18a449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:49:e5:ba:02:65:90:4b:09:9a:5c:8d:c4:
42:5d:63:22:a2:28:f6:7d:11:de:c1:9d:66:3c:c6:
e9:6a:1a:74:03:19:96:ae:7a:9b:c3:63:e6:97:cc:
57:cf:91:ae:eb:b3:f1:ff:ab:fc:28:15:b3:ca:7d:
31:34:f1:cd:8e:be:cd:43:98:53:fa:9f:c4:e3:33:
eb:94:2d:ed:e0:9f:a3:2e:8c:46:26:01:52:d9:a4:
9b:44:a3:93:42:11:53:52:78:7a:83:f1:2f:8a:b1:
eb:b4:02:02:f6:59:fa:c6:dc:97:2e:64:16:39:8e:
4b:dc:1b:5a:30:25:86:bf:73:3b:8d:47:de:42:88:
e1:fc:a3:8c:c8:89:79:22:de:dd:87:5d:b0:99:30:
0b:c5:f1:04:26:65:03:d5:a4:8f:eb:01:7d:8e:7e:
d4:d9:9f:6c:3e:35:83:c5:b1:a2:3f:19:53:80:e3:
d1:ac:c1:09:9f:06:3f:f8:bb:7d:02:c9:eb:6c:5a:
b9:52:59:d1:8e:9a:51:fb:7f:80:38:09:8d:1c:2e:
96:02:a7:75:cc:4a:b9:d7:1e:d2:20:81:c8:2f:5c:
c3:a9:38:d4:29:d1:38:0e:e8:20:1a:19:74:9c:be:
4a:3e:b2:84:99:88:3a:3c:42:2d:e9:d5:23:9b:db:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3B:5E:73:0B:16:B5:47:88:B8:C2:8F:BB:50:26:85:DF:18:A4:49
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:95:f7:b6:d9:b5:7d:d0:6b:53:c3:a6:4c:25:b3:de:c5:ce:
7d:71:0c:31:da:cc:a6:ee:33:58:ed:2f:5f:43:c0:0f:68:29:
31:2f:c6:b8:1e:58:82:bd:22:f5:7c:e9:83:0d:89:8d:e1:e3:
62:2a:ef:c7:34:d9:94:3c:61:c8:6c:14:ff:90:1d:ed:ac:10:
71:53:bf:7c:56:a6:66:10:e7:cb:f0:49:0d:eb:98:85:09:cd:
83:46:0f:f4:aa:a3:57:77:5f:f0:9e:40:a5:74:de:ec:4e:75:
3f:64:5c:60:91:be:e8:51:af:31:95:f5:87:15:47:48:ac:29:
b5:fb:b9:04:16:b5:2b:2d:f8:ea:7e:1c:38:4b:dc:e6:fc:98:
c5:e3:50:02:7f:7e:df:cc:10:d0:6f:97:d1:0b:25:49:d7:73:
9c:41:ce:16:b9:2e:26:9c:e0:e5:df:b3:0f:1a:c3:ce:7a:09:
fb:e2:bb:8b:23:89:cb:b6:d8:d8:42:e7:ba:85:a8:84:ca:a1:
79:2c:ec:a8:f8:c7:38:94:12:2f:6b:92:5c:e5:98:75:ad:ff:
9d:1f:86:5b:6a:fb:6a:e9:b4:19:64:29:68:42:f8:4e:91:2f:
9e:0a:fb:ed:dc:5a:3d:20:05:22:47:41:48:5a:54:aa:37:28:
5d:35:58:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+uZ5+9IjWMp8Df/QGVD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMzZhMDVmYWU3NjA2OTFmNzBjZmI1YjRmNjI0OTk0N2Fi
YWRlODcwHhcNMjUwOTA3MDcwMTMyWhcNMjUwOTA4MDcwMTMyWjAzMTEwLwYDVQQD
EygzYjNiNWU3MzBiMTZiNTQ3ODhiOGMyOGZiYjUwMjY4NWRmMThhNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQBJ5boCZZBLCZpcjcRCXWMioij2
fRHewZ1mPMbpahp0AxmWrnqbw2Pml8xXz5Gu67Px/6v8KBWzyn0xNPHNjr7NQ5hT
+p/E4zPrlC3t4J+jLoxGJgFS2aSbRKOTQhFTUnh6g/EvirHrtAIC9ln6xtyXLmQW
OY5L3BtaMCWGv3M7jUfeQojh/KOMyIl5It7dh12wmTALxfEEJmUD1aSP6wF9jn7U
2Z9sPjWDxbGiPxlTgOPRrMEJnwY/+Lt9AsnrbFq5UlnRjppR+3+AOAmNHC6WAqd1
zEq51x7SIIHIL1zDqTjUKdE4DuggGhl0nL5KPrKEmYg6PEIt6dUjm9s1uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs7XnMLFrVHiLjCj7tQJoXfGKRJMB8GA1UdIwQY
MBaAFA42oF+udgaR9wz7W09iSZR6ut6HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MzVkMzctMzkxYS00YWEyLWFjODMt
MGIzNmFjOGUyM2M3LzEvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MzVkMzctMzkxYS00YWEyLWFjODMtMGIzNmFjOGUyM2M3
LzEvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5X3ttm1
fdBrU8OmTCWz3sXOfXEMMdrMpu4zWO0vX0PAD2gpMS/GuB5Ygr0i9Xzpgw2JjeHj
YirvxzTZlDxhyGwU/5Ad7awQcVO/fFamZhDny/BJDeuYhQnNg0YP9KqjV3df8J5A
pXTe7E51P2RcYJG+6FGvMZX1hxVHSKwptfu5BBa1Ky346n4cOEvc5vyYxeNQAn9+
38wQ0G+X0QslSddznEHOFrkuJpzg5d+zDxrDznoJ++K7iyOJy7bY2ELnuoWohMqh
eSzsqPjHOJQSL2uSXOWYda3/nR+GW2r7aum0GWQpaEL4TpEvngr77dxaPSAFIkdB
SFpUqjcoXTVYTA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:16 2025 by rpki-client