Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
File: dJFafoze18DuIhnnMMGYy7eLxfI.mft (raw, json)
Hash identifier: 4wQo9CC3a6v+bKHxK/akA1qPgHbG6Ot5eSZJdYPVll4=
Subject key identifier: EF:70:A9:4A:99:8E:F4:E8:08:40:64:DB:79:29:99:92:06:F2:EC:83
Authority key identifier: 74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2
Certificate issuer: /CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2
Certificate serial: 019A71EE8DB78702066C9521024F1EF804AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
Manifest number: 0281
Signing time: Tue 11 Nov 2025 08:00:50 +0000
Manifest this update: Tue 11 Nov 2025 08:00:50 +0000
Manifest next update: Wed 12 Nov 2025 08:00:50 +0000
Files and hashes: 1: dJFafoze18DuIhnnMMGYy7eLxfI.crl (hash: 9egwsetXDwocKiQNUNhJgE6o3tdHbSMyAnftNQiRfIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8d:b7:87:02:06:6c:95:21:02:4f:1e:f8:04:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2
Validity
Not Before: Nov 11 08:00:50 2025 GMT
Not After : Nov 12 08:00:50 2025 GMT
Subject: CN=ef70a94a998ef4e8084064db7929999206f2ec83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:64:d2:e0:df:85:87:c0:95:45:bd:43:e9:
7e:25:f7:b9:a9:0f:44:23:60:78:34:7f:7d:e3:5d:
71:1e:99:4f:b0:9c:ae:46:67:8b:2f:c3:42:f9:0a:
4e:74:fd:07:b0:98:d8:b9:84:d6:89:90:00:58:88:
3b:98:86:c1:3e:9e:6a:ef:14:9f:73:76:7d:f5:7b:
fb:f9:5a:ac:d5:91:b8:d8:33:c2:b2:a1:8c:f8:f7:
18:7c:38:b6:6e:7c:bf:f7:47:19:d7:d8:34:46:12:
c2:65:c4:56:6e:4c:fd:fa:ae:a2:bd:c2:38:63:0f:
a9:75:08:7f:0b:79:a0:57:c8:dd:da:82:ff:6e:73:
9b:8a:11:22:b8:7d:6b:67:42:9c:da:89:0f:57:f3:
67:45:34:c3:a7:4e:5b:23:ad:b5:2e:9d:cc:16:00:
cb:df:11:2a:ce:61:cf:9d:6c:26:64:e4:07:85:5b:
47:d1:2c:fe:09:8b:1a:c7:9d:dc:5e:42:b4:d8:46:
7b:ff:f7:a9:1b:a8:be:b9:b4:48:2c:95:9c:35:c8:
a1:5c:20:fd:d5:ae:13:a4:1b:33:b6:8e:cb:64:9e:
99:6e:5d:16:89:e4:af:41:d4:3a:47:4b:ab:e7:b2:
56:85:71:c4:70:1d:c3:59:ba:34:a5:c4:cf:3c:5c:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:70:A9:4A:99:8E:F4:E8:08:40:64:DB:79:29:99:92:06:F2:EC:83
X509v3 Authority Key Identifier:
keyid:74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ef:ec:e5:98:6a:04:d2:7a:b5:80:67:a3:8a:3f:c0:18:61:
57:af:97:03:7a:e1:fe:fc:1b:49:d5:c1:29:f6:b3:c9:69:2b:
09:79:2a:a5:33:9d:06:b2:95:f2:e4:fd:e8:d2:3c:b4:c6:42:
db:27:ad:28:e5:21:84:33:a1:71:e5:7c:9c:ab:80:78:74:b6:
75:01:84:8a:0e:c1:a7:8a:8c:9b:a9:89:26:1a:a7:0d:f6:c7:
08:80:5a:af:c8:22:f7:17:cf:d6:c7:86:3a:a7:7e:97:02:08:
c2:f8:74:ec:ea:3e:6c:39:08:a3:b9:91:83:eb:69:c3:18:b8:
e0:ae:f5:fb:19:f6:fb:9a:18:80:ed:55:7c:a9:0a:92:f1:ce:
f2:3a:3d:20:0c:57:00:95:4d:80:19:78:1c:17:3d:cd:db:8d:
ad:9d:61:75:23:a5:f4:7b:42:64:35:62:55:32:2b:36:81:2b:
99:44:7e:f3:16:05:e4:c8:ae:56:88:bf:2f:79:15:b2:e2:12:
9c:8d:85:71:41:5e:6e:12:20:34:b0:95:f5:01:e3:e5:2f:71:
15:cb:2f:84:0a:9c:f1:90:51:f3:da:72:de:14:2f:26:0f:19:
0a:7e:9b:3c:6b:ea:13:85:b0:89:79:1c:1c:ec:4b:fa:b8:b9:
2b:06:8f:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7o23hwIGbJUhAk8e+ASuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTE1YTdlOGNkZWQ3YzBlZTIyMTllNzMwYzE5OGNiYjc4
YmM1ZjIwHhcNMjUxMTExMDgwMDUwWhcNMjUxMTEyMDgwMDUwWjAzMTEwLwYDVQQD
EyhlZjcwYTk0YTk5OGVmNGU4MDg0MDY0ZGI3OTI5OTk5MjA2ZjJlYzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Vk0uDfhYfAlUW9Q+l+Jfe5qQ9E
I2B4NH99411xHplPsJyuRmeLL8NC+QpOdP0HsJjYuYTWiZAAWIg7mIbBPp5q7xSf
c3Z99Xv7+Vqs1ZG42DPCsqGM+PcYfDi2bny/90cZ19g0RhLCZcRWbkz9+q6ivcI4
Yw+pdQh/C3mgV8jd2oL/bnObihEiuH1rZ0Kc2okPV/NnRTTDp05bI621Lp3MFgDL
3xEqzmHPnWwmZOQHhVtH0Sz+CYsax53cXkK02EZ7//epG6i+ubRILJWcNcihXCD9
1a4TpBszto7LZJ6Zbl0WieSvQdQ6R0ur57JWhXHEcB3DWbo0pcTPPFzQRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9wqUqZjvToCEBk23kpmZIG8uyDMB8GA1UdIwQY
MBaAFHSRWn6M3tfA7iIZ5zDBmMu3i8XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpGYWZvemUxOER1SWhubk1NR1l5N2VMeGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YjFlNDItNDY4Zi00MWU3LWE5ZTct
MGEyYThjNmM5NWRhLzEvZEpGYWZvemUxOER1SWhubk1NR1l5N2VMeGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83YjFlNDItNDY4Zi00MWU3LWE5ZTctMGEyYThjNmM5NWRh
LzEvZEpGYWZvemUxOER1SWhubk1NR1l5N2VMeGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwu/s5Zhq
BNJ6tYBno4o/wBhhV6+XA3rh/vwbSdXBKfazyWkrCXkqpTOdBrKV8uT96NI8tMZC
2yetKOUhhDOhceV8nKuAeHS2dQGEig7Bp4qMm6mJJhqnDfbHCIBar8gi9xfP1seG
Oqd+lwIIwvh07Oo+bDkIo7mRg+tpwxi44K71+xn2+5oYgO1VfKkKkvHO8jo9IAxX
AJVNgBl4HBc9zduNrZ1hdSOl9HtCZDViVTIrNoErmUR+8xYF5MiuVoi/L3kVsuIS
nI2FcUFebhIgNLCV9QHj5S9xFcsvhAqc8ZBR89py3hQvJg8ZCn6bPGvqE4WwiXkc
HOxL+ri5KwaPUw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:10 2025 by rpki-client