Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier: RQ/YPouGF98aF7+EzHHrvMy8ME9hrgYKVqSTZW4Hjyk=
Subject key identifier: DB:0D:04:37:7B:58:09:24:BB:D6:92:DB:A0:43:31:54:F8:4C:3C:8F
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 019A71B914E0662DA07906040F7F40FCA17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number: 102B
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: pxlhO1LHK/bXUr7eqz5RYqJITHUprd/p9zElKMKhVqQ=)
2: KSFH2iX9DZf8Q-50ramqag80LYo.roa (hash: N6tvxRZU5FhCXYfq+gSSvyO+LQEuT5uPy32KkqFgDN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:14:e0:66:2d:a0:79:06:04:0f:7f:40:fc:a1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=db0d04377b580924bbd692dba0433154f84c3c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:03:01:37:9d:71:a7:46:a6:c1:86:08:95:
33:7b:a3:fb:56:6f:17:c9:ff:2b:d5:af:63:9a:42:
f2:85:03:6b:8a:8f:15:29:2a:76:f3:a0:e1:38:1c:
78:20:0f:bd:81:ce:7f:75:5f:e9:bd:37:d8:0c:5c:
12:a7:d1:b7:ee:d1:80:37:98:ab:d3:a1:e4:13:0c:
bb:b0:d0:7a:26:1f:2d:43:8c:93:09:f9:b2:d7:d8:
98:ec:64:e9:5e:69:50:90:9d:90:b3:18:04:a0:72:
b7:41:cb:2f:75:aa:f0:99:79:86:4b:ac:06:68:0f:
2e:5d:a5:fa:2c:79:2b:c1:79:24:7b:7b:b9:f5:5c:
ee:37:20:fe:2c:51:25:3f:d2:3a:46:5e:b9:5e:1f:
49:13:da:16:38:3f:9c:63:a8:ae:2b:cd:99:ff:09:
38:ec:fc:de:2d:42:17:1c:e8:a0:a0:19:c8:24:5c:
ca:15:2c:d9:5a:67:fe:9e:64:9f:61:04:c3:e8:c4:
24:23:8b:87:48:b9:f5:e4:b4:d8:3f:28:85:81:9a:
be:e5:d4:5d:b9:cc:89:43:22:81:a9:40:92:94:98:
5c:4a:90:e1:e1:89:f2:c1:15:7c:4e:ea:cd:86:cf:
47:c1:25:95:29:5b:ce:f2:16:07:c9:b6:b8:8e:e2:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0D:04:37:7B:58:09:24:BB:D6:92:DB:A0:43:31:54:F8:4C:3C:8F
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b2:2c:44:12:f3:94:0a:9d:34:dd:56:13:be:ee:24:e1:23:
01:1a:1d:15:c0:50:22:d7:af:4d:9d:b6:e8:70:4f:c9:7e:90:
d5:91:d7:a5:91:c0:bf:43:87:e4:51:e9:4f:a3:af:f8:4f:a9:
22:e4:48:a4:70:84:0c:4c:c6:14:c5:e7:61:94:12:60:37:a6:
bb:66:67:26:8a:50:fc:cc:fd:d1:cc:eb:06:82:8b:1a:a4:65:
ad:7c:6f:ce:c9:e5:51:67:fa:f1:4f:7b:61:87:8a:13:24:fd:
97:89:8a:07:a1:85:4f:1e:7f:9d:9e:f9:ad:18:13:d7:43:01:
61:00:83:a6:70:80:72:3a:70:e2:03:2c:60:59:71:d3:aa:5d:
ad:d8:03:e2:04:b2:93:2a:fa:8f:16:31:7a:d9:4b:30:f1:59:
74:a3:a1:01:5f:28:dd:c1:6c:f9:66:99:a9:d9:0d:2a:81:6f:
f7:83:a2:9a:fa:8a:48:b8:73:da:6c:3f:9c:64:07:bb:a2:a1:
bb:39:a5:ae:fb:ff:7e:00:f5:90:34:ac:a6:f0:6d:de:55:c2:
25:98:0d:85:64:b4:06:39:3b:d2:5a:54:87:8e:fb:51:0f:93:
10:6e:24:27:5d:30:2e:7e:40:e9:d7:90:45:2c:25:61:78:fb:
ae:64:ff:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuRTgZi2geQYED39A/KF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDI3ZmVhM2JhYTNlZjY4MGU4ZjdhMDdhNWYxOTRhYzQ5
ODkyYTUwHhcNMjUxMTExMDcwMjI2WhcNMjUxMTEyMDcwMjI2WjAzMTEwLwYDVQQD
EyhkYjBkMDQzNzdiNTgwOTI0YmJkNjkyZGJhMDQzMzE1NGY4NGMzYzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC8DATedcadGpsGGCJUze6P7Vm8X
yf8r1a9jmkLyhQNrio8VKSp286DhOBx4IA+9gc5/dV/pvTfYDFwSp9G37tGAN5ir
06HkEwy7sNB6Jh8tQ4yTCfmy19iY7GTpXmlQkJ2QsxgEoHK3QcsvdarwmXmGS6wG
aA8uXaX6LHkrwXkke3u59VzuNyD+LFElP9I6Rl65Xh9JE9oWOD+cY6iuK82Z/wk4
7PzeLUIXHOigoBnIJFzKFSzZWmf+nmSfYQTD6MQkI4uHSLn15LTYPyiFgZq+5dRd
ucyJQyKBqUCSlJhcSpDh4YnywRV8TurNhs9HwSWVKVvO8hYHyba4juJY0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsNBDd7WAkku9aS26BDMVT4TDyPMB8GA1UdIwQY
MBaAFAzSf+o7qj72gOj3oHpfGUrEmJKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYt
YTYwZjEzMTk4ZDVkLzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYtYTYwZjEzMTk4ZDVk
LzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv7IsRBLz
lAqdNN1WE77uJOEjARodFcBQItevTZ226HBPyX6Q1ZHXpZHAv0OH5FHpT6Ov+E+p
IuRIpHCEDEzGFMXnYZQSYDemu2ZnJopQ/Mz90czrBoKLGqRlrXxvzsnlUWf68U97
YYeKEyT9l4mKB6GFTx5/nZ75rRgT10MBYQCDpnCAcjpw4gMsYFlx06pdrdgD4gSy
kyr6jxYxetlLMPFZdKOhAV8o3cFs+WaZqdkNKoFv94OimvqKSLhz2mw/nGQHu6Kh
uzmlrvv/fgD1kDSspvBt3lXCJZgNhWS0Bjk70lpUh477UQ+TEG4kJ10wLn5A6deQ
RSwlYXj7rmT/Xg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:06 2025 by rpki-client