Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
File: djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json)
Hash identifier: +6lZW/qscH1iPfqhVuzjPAATNSuwG+YlJc3yQLhiKiI=
Subject key identifier: 05:94:A2:5F:13:A0:B2:20:F0:9C:B6:F7:A6:B9:08:57:17:A3:1F:B3
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Certificate issuer: /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial: 019A0D4B9F5D5757A7FCD41C2A318D94BB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
Manifest number: 16EC
Signing time: Wed 22 Oct 2025 19:00:51 +0000
Manifest this update: Wed 22 Oct 2025 19:00:51 +0000
Manifest next update: Thu 23 Oct 2025 19:00:51 +0000
Files and hashes: 1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: pMlsDg1T6UJh0vikGrYV/KQ6Er1vXPpNOPgYVD+Hepk=)
2: qv1Sau3fL4G3RgHjzDZHci6uI6I.roa (hash: ET2wfrNdhyfoM3NLg7fIoXPxXSHceauvtrVyaQ0oOdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4b:9f:5d:57:57:a7:fc:d4:1c:2a:31:8d:94:bb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Validity
Not Before: Oct 22 19:00:51 2025 GMT
Not After : Oct 23 19:00:51 2025 GMT
Subject: CN=0594a25f13a0b220f09cb6f7a6b9085717a31fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:b2:f8:44:19:5c:f9:cf:d0:90:6f:cf:9a:
4f:b3:3e:13:c2:91:f0:24:72:be:07:9b:05:71:09:
c4:e4:ed:05:ae:f6:f5:16:57:89:07:fc:62:79:92:
0b:2f:2a:b5:3e:ab:1c:f3:a9:e1:40:6e:5b:5d:53:
dd:68:53:94:06:35:36:da:fc:e0:bd:ab:07:9b:63:
72:be:42:52:36:fd:5b:35:84:94:79:b9:9a:61:6d:
7f:5e:56:a4:20:23:3c:57:ec:b5:04:5d:33:be:62:
3a:0f:35:f1:51:a9:d2:a2:e4:83:7d:94:9b:d0:d7:
ad:84:9e:50:3c:e7:68:63:1b:d1:cf:2b:27:38:96:
e2:ad:1c:a9:66:10:31:1b:f9:c6:6c:ad:63:af:d7:
43:30:2f:09:72:90:e5:e0:fe:a7:ca:76:13:1b:c5:
88:a1:63:3f:fc:b6:74:88:00:b2:72:9d:ea:8f:bd:
bd:41:00:b9:4f:65:23:e5:65:ee:2a:6d:19:84:b3:
aa:0b:43:31:21:0a:79:b9:0a:c3:8f:50:8c:6d:cd:
e8:48:74:04:98:2c:4f:f1:a3:d2:12:07:5e:85:d4:
4d:12:39:e1:f6:1c:d8:80:f4:dd:51:5a:ff:d4:93:
a4:28:fc:b0:b2:4b:62:8f:58:47:0d:13:b8:90:d5:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:94:A2:5F:13:A0:B2:20:F0:9C:B6:F7:A6:B9:08:57:17:A3:1F:B3
X509v3 Authority Key Identifier:
keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:eb:d7:4c:61:a7:70:ef:7c:da:da:23:aa:04:67:30:b5:c9:
22:31:ee:52:55:80:3f:24:7b:f0:0a:d9:81:c0:e7:ce:0d:73:
73:c6:77:c3:0a:64:b1:c5:d6:86:27:06:c5:af:c4:c4:5e:31:
51:20:a2:cc:0e:00:09:7e:5f:8c:36:08:fe:de:b5:ca:ad:75:
38:db:d4:28:4f:c3:cb:e8:7f:b2:3c:66:49:2f:d1:b1:8b:70:
87:42:50:0d:a6:7f:b7:62:57:93:8d:e1:09:1d:d6:99:63:40:
c5:06:0a:a0:57:af:5f:d9:b2:4e:09:6f:64:ff:9f:15:92:3f:
4c:4e:bc:93:e9:db:af:96:24:3c:44:a6:05:12:19:98:bc:aa:
81:28:28:7e:d5:38:44:ca:bd:3a:a9:a4:86:7c:38:f1:1a:6c:
d2:2a:f2:8c:85:4e:af:d6:f0:71:c8:7e:12:de:6d:20:c8:e4:
8b:13:62:0d:22:57:cc:aa:c6:89:ec:59:9f:43:2a:57:1d:41:
c0:57:30:6a:55:7d:c3:2d:dd:12:fe:5c:5a:2e:1f:76:14:da:
29:42:ef:2f:94:1c:cc:56:5e:55:e1:91:3f:b2:3b:74:0d:f9:
44:d1:58:83:e1:e3:5e:71:63:4f:d1:9c:00:a9:24:b7:3a:ee:
05:78:f5:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoNS59dV1en/NQcKjGNlLuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MzM1ZWI2MzNmNzY5NDJiYmU5OWYxMjlhMWViODhhNGQ3
M2ZjN2MwHhcNMjUxMDIyMTkwMDUxWhcNMjUxMDIzMTkwMDUxWjAzMTEwLwYDVQQD
EygwNTk0YTI1ZjEzYTBiMjIwZjA5Y2I2ZjdhNmI5MDg1NzE3YTMxZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoOy+EQZXPnP0JBvz5pPsz4TwpHw
JHK+B5sFcQnE5O0Frvb1FleJB/xieZILLyq1Pqsc86nhQG5bXVPdaFOUBjU22vzg
vasHm2NyvkJSNv1bNYSUebmaYW1/XlakICM8V+y1BF0zvmI6DzXxUanSouSDfZSb
0NethJ5QPOdoYxvRzysnOJbirRypZhAxG/nGbK1jr9dDMC8JcpDl4P6nynYTG8WI
oWM//LZ0iACycp3qj729QQC5T2Uj5WXuKm0ZhLOqC0MxIQp5uQrDj1CMbc3oSHQE
mCxP8aPSEgdehdRNEjnh9hzYgPTdUVr/1JOkKPywsktij1hHDRO4kNW7ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWUol8ToLIg8Jy296a5CFcXox+zMB8GA1UdIwQY
MBaAFHYzXrYz92lCu+mfEpoeuIpNc/x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wODM4NWEtMWU4MS00MWYyLThiODUt
OWMyOTNmNzFhODBhLzEvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wODM4NWEtMWU4MS00MWYyLThiODUtOWMyOTNmNzFhODBh
LzEvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+vXTGGn
cO982tojqgRnMLXJIjHuUlWAPyR78ArZgcDnzg1zc8Z3wwpkscXWhicGxa/ExF4x
USCizA4ACX5fjDYI/t61yq11ONvUKE/Dy+h/sjxmSS/RsYtwh0JQDaZ/t2JXk43h
CR3WmWNAxQYKoFevX9myTglvZP+fFZI/TE68k+nbr5YkPESmBRIZmLyqgSgoftU4
RMq9Oqmkhnw48Rps0iryjIVOr9bwcch+Et5tIMjkixNiDSJXzKrGiexZn0MqVx1B
wFcwalV9wy3dEv5cWi4fdhTaKULvL5QczFZeVeGRP7I7dA35RNFYg+HjXnFjT9Gc
AKkktzruBXj1JQ==
-----END CERTIFICATE-----
Generated at Thu Oct 23 03:58:45 2025 by rpki-client