Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: Mt0202Nv8QiT2DSvbp1oGSBB9Zt9IlVCJSFYmqllUwE=
Subject key identifier: D1:31:A1:92:91:37:BF:94:22:BE:64:56:05:6D:CC:B8:2D:9E:FA:2E
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 0199221E8A0ADB73DFC36A2061BD2154CAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 0A0D
Signing time: Sun 07 Sep 2025 03:00:50 +0000
Manifest this update: Sun 07 Sep 2025 03:00:50 +0000
Manifest next update: Mon 08 Sep 2025 03:00:50 +0000
Files and hashes: 1: 9AG_khzlUq_52M_uwAyAT--X2D8.roa (hash: j5npHva08ps2FjnGO8hTZ3BTaOYOIDt9K8fTqv+VPPw=)
2: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: coDLSrlv+wXV3bChywJy2Lds8aZ74NqXWLwXX02u4uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:8a:0a:db:73:df:c3:6a:20:61:bd:21:54:ca:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Sep 7 03:00:50 2025 GMT
Not After : Sep 8 03:00:50 2025 GMT
Subject: CN=d131a1929137bf9422be6456056dccb82d9efa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:2f:f8:59:53:49:19:c7:50:39:7e:11:70:
74:d0:ae:ee:4a:7f:cf:a2:5c:77:88:da:93:8c:8b:
22:b5:fc:e3:ad:9d:c3:b3:5a:98:e5:4a:05:ee:2a:
96:77:eb:d6:82:ee:9e:05:bd:c0:87:e1:cb:3f:3d:
ac:45:fe:aa:cb:4b:9a:2c:1b:50:ce:59:9d:40:3b:
48:09:0a:15:d7:ed:64:27:ac:89:df:15:96:77:ca:
0f:3d:e2:5d:a7:cf:f7:ee:e6:eb:19:97:d3:8d:a0:
c7:8a:02:fe:4a:19:df:68:e2:37:08:21:c7:8f:f8:
66:f2:c8:fe:a3:a6:06:a7:cc:09:94:46:97:e8:73:
53:45:3c:eb:e6:cf:4b:6b:30:55:f2:3d:a9:99:1f:
ff:0d:49:cd:ab:77:e7:38:e7:be:3e:b0:3e:54:42:
16:e4:af:c5:58:12:db:38:70:28:65:4c:b5:05:b8:
6d:26:c6:d1:7d:8c:b0:19:90:e3:b9:85:d2:0c:b8:
e2:5e:c1:d2:08:39:9b:43:cb:5e:a8:c8:cc:f1:9d:
fe:8b:6d:ff:8e:cd:08:6f:15:93:d3:9a:b8:05:8c:
45:56:b5:3b:fd:df:55:e5:f3:7b:cc:58:e4:fd:9a:
fc:62:88:66:42:0c:08:3a:34:28:0f:fc:78:8f:91:
bb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:A1:92:91:37:BF:94:22:BE:64:56:05:6D:CC:B8:2D:9E:FA:2E
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:69:85:8b:8b:73:dc:ed:81:5d:25:3e:29:bc:36:63:5a:48:
31:8c:a2:d8:2a:3f:db:bc:04:ad:52:dd:d9:0e:33:39:5f:9f:
f1:b4:66:24:35:c1:cf:ca:88:25:8f:f0:73:38:9f:08:c0:6b:
86:0b:ba:f4:90:ae:32:04:41:a2:c8:54:1c:a7:95:c0:a8:d7:
81:ac:98:46:b5:d6:48:c6:3f:0e:c9:2f:4a:08:dc:84:35:03:
a7:3f:b3:af:29:80:52:a0:e0:f4:bc:1c:32:1a:11:93:dc:e6:
68:1b:b0:c8:1e:0f:e1:f0:57:19:d3:e8:76:17:c4:a6:bd:6e:
c9:6c:c7:3c:75:41:4f:c4:18:2c:b4:e6:3a:4e:bd:2b:e6:32:
c0:f1:a8:8b:cf:c6:a3:3e:10:a4:40:98:3d:2e:0f:f8:be:7b:
8d:89:aa:cf:d5:c7:4a:40:21:02:f5:ba:cf:a7:32:37:f0:9f:
ba:a2:34:13:21:ff:db:74:50:13:a3:f3:8b:88:7d:97:94:dd:
d4:1c:54:d6:39:7a:06:97:5f:84:2c:37:1e:d4:fa:35:da:23:
27:3d:cf:34:19:4e:b7:87:5f:34:92:3f:da:e5:da:1b:e1:33:
69:50:26:f1:b6:7a:e5:a7:9c:2e:bb:f3:5d:7e:5a:ce:5a:07:
6c:81:3f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:23 2025 by rpki-client