Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
File: djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json)
Hash identifier: rSBUnLeZwPcV/qLDkywenN1zUQXGbxSdeJyIiVfisKI=
Subject key identifier: EB:C5:D2:1A:5A:CC:97:6A:DC:7D:A6:E4:96:04:D5:78:74:13:75:FB
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial: 019A232E2E579D3D3C0ADC2EE5C473F7CF2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 01:00:20 +0000
Manifest this update: Mon 27 Oct 2025 01:00:20 +0000
Manifest next update: Tue 28 Oct 2025 01:00:20 +0000
Files and hashes: 1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: n1ROHdZdvWXk3cYCbQnVvygXS0fzFUFwV6gMggwe3uc=)
2: wBaE5svUrTDa4cJiCAHlEwrForw.roa (hash: sNv0g7ZzW3+C7EQOHQU5ckniP/nqJPJ/xsRMEfe9338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:2e:57:9d:3d:3c:0a:dc:2e:e5:c4:73:f7:cf:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Validity
Not Before: Oct 27 01:00:20 2025 GMT
Not After : Oct 28 01:00:20 2025 GMT
Subject: CN=ebc5d21a5acc976adc7da6e49604d578741375fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9d:5b:c6:03:4a:18:73:fc:bb:6f:e8:d0:4e:
f2:bf:12:6c:3a:12:3c:60:6f:0e:5e:d0:7f:6b:b8:
7d:8c:46:4f:8d:7a:6e:16:54:7e:f5:0a:5c:b4:34:
4f:cc:9f:97:6d:10:08:7c:b1:31:ff:38:4c:98:b6:
7a:3a:5d:99:7b:51:a0:96:93:db:7d:2a:5a:6f:eb:
7e:a7:0f:c0:89:48:03:29:81:52:90:4a:e6:6d:4f:
50:3f:8f:b2:50:39:1e:fd:99:09:fe:e8:2c:7d:9e:
de:e3:bd:a9:27:d6:28:9a:58:8b:23:ab:42:58:c7:
b0:a2:fd:a9:83:8e:24:e7:68:48:3b:3e:40:d1:52:
4e:35:20:82:dc:73:c6:ce:3d:31:07:68:86:de:13:
e0:db:f6:fb:57:b4:e6:e4:63:50:b6:99:da:d8:a0:
b6:27:43:1e:8e:54:8f:7c:cb:ea:b8:a2:d2:68:dd:
42:9c:cb:26:e6:c8:21:78:b6:ee:81:a6:70:42:55:
70:02:a2:f3:4e:d7:e2:21:40:0c:4f:0e:35:31:5e:
93:c2:ab:d3:a4:43:35:c6:31:4b:be:87:b3:41:0e:
32:57:09:fe:7d:f2:b9:24:e4:49:5d:61:8e:99:d5:
2d:1b:02:bf:1a:81:88:a5:df:fc:cd:4e:43:fb:de:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:D2:1A:5A:CC:97:6A:DC:7D:A6:E4:96:04:D5:78:74:13:75:FB
X509v3 Authority Key Identifier:
keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:80:d7:ac:d0:2d:ea:bd:15:f2:47:c5:4e:88:30:8a:2b:3f:
53:d7:0b:8f:4d:1b:e5:6d:aa:e6:3c:d0:46:8d:8c:d4:af:03:
bb:6b:a1:53:47:46:df:37:a8:d8:c5:a7:86:d4:20:df:c4:70:
4c:16:b7:71:50:f6:6b:00:80:a1:fb:dc:a2:c7:f4:f0:62:7f:
fe:b8:89:3d:7f:ed:82:f0:a5:b4:4b:32:16:9d:d6:5f:27:74:
bc:06:32:27:ed:ca:f1:81:e3:06:91:1b:58:57:c8:d4:a8:d8:
1d:93:26:6e:61:7b:38:19:82:09:39:e2:97:ff:7c:b1:ea:0b:
67:1c:cd:e9:03:d6:f8:63:42:1f:46:9b:37:8f:ba:16:a2:b8:
19:e8:5f:de:d4:99:88:92:14:77:09:40:da:4d:1b:d0:47:22:
ce:9c:34:66:1f:72:15:b4:98:7f:77:45:3d:9a:df:b3:a4:9d:
3a:4a:fd:2b:fa:b8:78:3f:20:c4:ff:70:89:db:25:6f:10:4b:
92:72:16:9b:7d:81:5f:bd:59:7b:a0:7e:24:16:e4:10:32:90:
f2:7c:fd:ad:e7:79:ba:f9:4c:c0:7b:cf:cc:94:9c:d0:a2:dc:
fe:b5:6a:82:f7:2f:92:83:41:e2:a0:c5:dd:a3:19:78:f6:9d:
85:49:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:05:51 2025 by rpki-client