Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
File: dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft (raw, json)
Hash identifier: StP+lqFVWoZ2mGgZIh13BEgzwDh7A4CVaaeQwpW4/y8=
Subject key identifier: B7:72:9E:DC:3C:50:5F:A1:CD:0F:0B:60:8D:BD:9D:C2:76:18:06:26
Authority key identifier: 76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E
Certificate issuer: /CN=763d7a5535a5249e97a75064669399a93c46cc8e
Certificate serial: 019A2AB146158E88A9BE0D475663FE27DB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
Manifest number: 0B35
Signing time: Tue 28 Oct 2025 12:00:52 +0000
Manifest this update: Tue 28 Oct 2025 12:00:52 +0000
Manifest next update: Wed 29 Oct 2025 12:00:52 +0000
Files and hashes: 1: dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl (hash: rWkKndQCcD4oLz86b1NH6+CvHYpgIL5bA8jfMr2n23M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:46:15:8e:88:a9:be:0d:47:56:63:fe:27:db:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=763d7a5535a5249e97a75064669399a93c46cc8e
Validity
Not Before: Oct 28 12:00:52 2025 GMT
Not After : Oct 29 12:00:52 2025 GMT
Subject: CN=b7729edc3c505fa1cd0f0b608dbd9dc276180626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:dc:3e:a1:19:da:ab:c0:3d:6e:c0:93:1c:
7d:9f:fa:f3:b6:47:87:af:b7:78:27:22:55:78:1f:
34:9f:e4:cc:a1:d3:1f:df:3b:97:7d:1b:70:a8:8f:
15:d1:45:0e:ec:02:1a:b0:56:50:a2:2c:30:0b:e4:
25:96:8a:4b:a4:98:19:03:eb:62:33:4a:4a:0f:0f:
25:d5:6b:7d:9f:76:d8:ca:12:fd:67:05:a6:09:6f:
b0:a7:6c:df:f8:05:6c:15:bb:c8:2a:d7:c6:51:30:
3b:2a:af:e6:b3:a6:22:f6:e6:b4:b5:94:94:29:4d:
a1:4e:31:42:08:34:39:ed:00:81:66:84:a4:bf:21:
1f:1b:d0:68:b0:98:ea:c3:51:c6:7d:62:f2:21:f0:
9f:a9:b9:a5:3b:9a:b2:e3:b4:d3:c2:3e:b6:29:6b:
33:75:ae:1e:8e:79:56:d4:d7:b6:e7:96:e1:91:76:
1f:3e:66:c0:58:01:95:67:66:67:ee:a6:b3:ba:d4:
68:95:36:20:fc:8d:41:de:df:29:03:c3:e9:25:20:
49:0e:76:66:79:b7:c0:bf:38:95:6e:a5:df:73:51:
5b:42:8c:7a:0c:34:a2:97:a8:b8:19:87:09:67:8c:
2e:eb:a0:9b:df:30:39:47:85:a0:76:19:91:0e:61:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:72:9E:DC:3C:50:5F:A1:CD:0F:0B:60:8D:BD:9D:C2:76:18:06:26
X509v3 Authority Key Identifier:
keyid:76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2d:75:a8:4e:ae:f5:cf:5a:c7:b2:c6:f9:d5:13:3c:b1:dc:
16:03:e2:9c:4f:5c:98:e3:37:ee:a1:80:6a:27:45:9b:e4:53:
d2:b0:89:ec:9c:75:c7:3c:2e:30:9d:62:00:65:d9:d4:be:13:
38:24:f6:c4:8c:65:1d:44:20:7a:f7:30:83:93:f1:80:e7:2b:
3b:02:58:28:0d:38:e0:f5:b7:4d:35:b0:70:c7:c6:33:fc:38:
8a:5c:6b:77:bb:f2:21:af:d5:b7:80:4e:f2:4d:57:d8:45:0a:
b2:f8:01:46:0b:54:09:d6:19:15:5f:01:86:ea:b3:bb:b7:17:
14:42:94:25:d4:f8:8d:53:49:8f:fe:f3:59:11:3a:20:39:7e:
53:c4:88:c4:23:0d:93:12:84:c1:2e:2f:95:fb:82:6c:9e:84:
90:a3:c9:b6:41:f2:41:75:6a:21:dd:e3:d9:88:90:38:a3:cb:
7d:6b:b5:cd:63:d8:f0:97:8a:6f:12:fa:86:de:4e:58:8e:2b:
b9:7c:f2:49:c4:2b:e4:39:0f:49:0e:89:b5:65:e8:87:71:56:
2a:74:ac:5d:52:bf:f4:6d:eb:cd:56:14:2b:b1:38:d5:d7:34:
e1:d9:55:8a:19:65:a1:6b:df:f6:fe:ce:1a:ff:1f:05:f3:ad:
64:36:af:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqsUYVjoipvg1HVmP+J9tBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2M2Q3YTU1MzVhNTI0OWU5N2E3NTA2NDY2OTM5OWE5M2M0
NmNjOGUwHhcNMjUxMDI4MTIwMDUyWhcNMjUxMDI5MTIwMDUyWjAzMTEwLwYDVQQD
EyhiNzcyOWVkYzNjNTA1ZmExY2QwZjBiNjA4ZGJkOWRjMjc2MTgwNjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdjcPqEZ2qvAPW7Akxx9n/rztkeH
r7d4JyJVeB80n+TModMf3zuXfRtwqI8V0UUO7AIasFZQoiwwC+QllopLpJgZA+ti
M0pKDw8l1Wt9n3bYyhL9ZwWmCW+wp2zf+AVsFbvIKtfGUTA7Kq/ms6Yi9ua0tZSU
KU2hTjFCCDQ57QCBZoSkvyEfG9BosJjqw1HGfWLyIfCfqbmlO5qy47TTwj62KWsz
da4ejnlW1Ne255bhkXYfPmbAWAGVZ2Zn7qazutRolTYg/I1B3t8pA8PpJSBJDnZm
ebfAvziVbqXfc1FbQox6DDSil6i4GYcJZ4wu66Cb3zA5R4WgdhmRDmEiNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdyntw8UF+hzQ8LYI29ncJ2GAYmMB8GA1UdIwQY
MBaAFHY9elU1pSSel6dQZGaTmak8RsyOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NTBiMGItYjMwNi00ZDdmLWIxOTgt
ODgyMmJkMzg2ODQwLzEvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC84NTBiMGItYjMwNi00ZDdmLWIxOTgtODgyMmJkMzg2ODQw
LzEvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMi11qE6u
9c9ax7LG+dUTPLHcFgPinE9cmOM37qGAaidFm+RT0rCJ7Jx1xzwuMJ1iAGXZ1L4T
OCT2xIxlHUQgevcwg5PxgOcrOwJYKA044PW3TTWwcMfGM/w4ilxrd7vyIa/Vt4BO
8k1X2EUKsvgBRgtUCdYZFV8Bhuqzu7cXFEKUJdT4jVNJj/7zWRE6IDl+U8SIxCMN
kxKEwS4vlfuCbJ6EkKPJtkHyQXVqId3j2YiQOKPLfWu1zWPY8JeKbxL6ht5OWI4r
uXzyScQr5DkPSQ6JtWXoh3FWKnSsXVK/9G3rzVYUK7E41dc04dlVihlloWvf9v7O
Gv8fBfOtZDavpQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:44:32 2025 by rpki-client