Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
File: DjGYqYJ97q-rHSe1U3lPRLkabAY.mft (raw, json)
Hash identifier: UcZtfY/T9ZOUpFRsfNpVfgkQhlrZ0MXq+4Xeg2VIrHI=
Subject key identifier: 3D:7A:D9:BE:3E:19:86:B4:C1:60:BB:12:09:B4:6C:78:F0:40:DA:91
Authority key identifier: 0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
Certificate issuer: /CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Certificate serial: 019A71EE9E1C63BA15AD5678894F4D52D723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: DjGYqYJ97q-rHSe1U3lPRLkabAY.crl (hash: I09aq6wyViihg4Xdkhw2gFZtn+wfcDCvvMbzztLFiww=)
2: Q2G86FF3yJmX8igU3QYVD4ZCivo.roa (hash: 6/LUNvPV45MHYpMpmogqr8zL/TAfgvM+oAX3YS1oNRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9e:1c:63:ba:15:ad:56:78:89:4f:4d:52:d7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=3d7ad9be3e1986b4c160bb1209b46c78f040da91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:6a:f7:c7:75:9a:57:8e:d8:a7:8c:30:15:
91:26:3f:28:62:70:0d:47:05:3a:ef:54:62:a1:21:
51:52:1f:d1:14:dc:15:32:aa:78:53:55:33:52:9b:
90:72:cd:40:d5:91:67:4e:e9:84:0f:3c:38:08:cf:
63:bb:90:6e:46:5c:2b:90:36:ce:e3:c4:b8:7f:f3:
41:60:65:94:8f:a0:47:bb:25:9f:2a:68:74:76:db:
18:46:2c:a3:95:84:e8:09:0e:ae:84:d4:64:d8:e7:
51:c2:79:58:9d:22:2e:a0:00:cf:3c:a1:78:4f:2d:
b3:76:96:b6:25:11:29:cd:58:79:5e:84:19:c9:6f:
8f:53:19:89:bc:b7:70:17:58:05:76:da:00:b3:f4:
3a:0f:c0:f4:a7:34:26:54:aa:d9:7a:45:68:d6:10:
6b:91:b1:f2:8c:1b:fb:1c:ae:ce:be:27:9e:c1:73:
34:e9:26:ad:63:d9:82:7f:62:74:ab:b8:5b:22:c5:
f0:6a:d4:ac:9e:04:5f:68:68:2c:42:36:b6:80:a1:
0d:33:20:1d:0f:73:e9:0a:63:48:7b:0a:e3:7a:78:
c8:5e:d8:32:b4:23:28:4b:1a:37:18:18:35:5f:7d:
6b:99:8d:ba:77:bf:2d:d1:81:32:1e:6f:69:68:56:
52:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7A:D9:BE:3E:19:86:B4:C1:60:BB:12:09:B4:6C:78:F0:40:DA:91
X509v3 Authority Key Identifier:
keyid:0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9c:60:5c:e5:04:8f:43:8a:96:e8:43:b8:11:90:42:5a:f7:
cb:f8:1d:f1:52:5b:0a:a2:0a:3c:36:88:50:c0:a3:f5:4c:63:
09:67:10:64:8a:32:7f:ec:e7:9c:99:94:6b:63:80:27:8c:fd:
e1:31:f8:14:25:69:f1:fc:05:9f:41:bc:28:32:68:c5:c9:ae:
cb:2f:56:4c:ca:c6:2e:82:8c:3e:6d:17:5a:24:6d:35:ad:7e:
7d:1f:46:e3:87:93:23:1a:9f:2b:e3:b5:a6:fa:8e:70:07:aa:
ec:84:9f:6d:ac:4a:d2:8e:55:ca:da:f0:4e:bc:11:3b:f8:6c:
d0:d7:6b:59:5e:c5:84:75:77:c0:0a:1c:de:80:be:22:e5:7e:
56:c0:1e:4e:7d:78:5f:07:c2:b5:7b:d2:93:46:2c:85:eb:42:
fa:f7:bd:45:da:a7:a0:32:26:3c:ff:0b:ee:e4:ba:8d:5b:de:
91:f0:3c:13:db:7c:d5:e6:7c:76:d9:99:d8:f6:98:4c:54:96:
12:3a:07:36:13:68:70:a5:d1:67:e3:9f:c9:6a:94:74:8b:c3:
b4:ba:2d:d4:e4:79:2b:93:17:4b:e1:9c:65:27:3e:84:1c:91:
76:84:45:cb:8d:be:f8:42:68:c6:a7:f2:fb:4f:9e:40:21:1d:
ee:0c:24:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:35 2025 by rpki-client