Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier: AcAzi8nu0DRgwZkRWpQMRxO/0eqRMV8Tixl39/9sUTU=
Subject key identifier: 13:B3:B7:DC:3C:91:6F:99:D8:DD:BD:58:19:99:6E:B0:98:3F:23:7E
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 0199277BC1B9DDAC3661EA43E12DA5E595AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number: 0F80
Signing time: Mon 08 Sep 2025 04:00:45 +0000
Manifest this update: Mon 08 Sep 2025 04:00:45 +0000
Manifest next update: Tue 09 Sep 2025 04:00:45 +0000
Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: +ibfW9O6oKy0k42yrMDTAfEkG6QOERN1P1JlFHiqvKY=)
2: KSFH2iX9DZf8Q-50ramqag80LYo.roa (hash: N6tvxRZU5FhCXYfq+gSSvyO+LQEuT5uPy32KkqFgDN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7b:c1:b9:dd:ac:36:61:ea:43:e1:2d:a5:e5:95:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Sep 8 04:00:45 2025 GMT
Not After : Sep 9 04:00:45 2025 GMT
Subject: CN=13b3b7dc3c916f99d8ddbd5819996eb0983f237e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:12:cb:74:4c:76:03:db:c8:45:6c:ec:36:
a6:53:46:30:ab:19:a2:2c:be:2f:14:da:64:7a:df:
e6:43:16:38:c4:ba:13:42:1a:f6:96:a2:63:32:ee:
cc:ff:09:4d:4b:be:e0:1d:1a:1e:db:62:c7:2b:1d:
b4:76:35:5f:43:85:87:f7:f2:25:3a:db:08:fd:5b:
14:7e:61:7e:fb:b4:11:6c:db:cd:6b:5b:82:ed:cf:
f2:c2:65:a6:71:b0:bf:6e:75:31:dd:89:83:07:0f:
12:6e:df:e0:0a:e1:38:36:70:11:08:26:87:4c:1c:
ff:3c:98:1f:7c:64:98:62:21:d5:02:d7:c8:04:c9:
7b:29:f1:42:aa:66:0f:2d:4c:3c:bb:19:b0:8f:8e:
fd:46:3d:7a:d3:4f:9a:4c:a9:a1:ed:b3:5a:8b:6c:
ce:9e:c2:c0:b5:9d:bf:8d:1f:7d:76:ad:f9:b3:31:
4c:e3:c8:db:8a:6e:70:57:4a:cc:f4:4b:01:bc:33:
b0:fd:02:3c:15:9f:be:8c:00:e3:41:3b:dc:00:d7:
4a:f6:d0:c9:34:e8:30:a4:0d:25:d4:04:be:e9:6e:
53:bb:de:6a:7c:1c:ef:3d:c4:26:e9:d6:bf:fa:f7:
b6:ea:1b:f3:75:e5:36:32:ad:66:bb:df:e4:7a:7d:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B3:B7:DC:3C:91:6F:99:D8:DD:BD:58:19:99:6E:B0:98:3F:23:7E
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:fb:9e:5a:ed:5c:f0:96:48:9f:9f:a3:91:4d:fe:7a:bc:e0:
d3:f4:ec:17:9c:57:74:f0:b9:8f:23:42:95:27:c9:c4:b3:0e:
13:95:00:83:47:10:7c:5a:7c:10:29:27:71:8b:07:21:8f:a3:
6c:0e:bb:c7:72:33:44:a8:78:c6:1f:2c:71:b6:d6:86:f1:6c:
86:63:42:06:45:29:ac:22:cc:01:1c:c1:68:15:e9:5e:04:99:
f5:d8:69:1f:62:a3:85:00:17:4b:7c:32:ce:2b:57:d6:5c:93:
4b:88:df:70:b7:62:2e:3e:b7:d9:95:af:04:ef:fd:c4:4b:09:
4a:e8:46:96:90:11:0f:e8:eb:f4:b0:95:dd:70:70:d5:e9:d6:
37:81:22:27:92:12:cc:89:5a:2a:90:a2:33:13:84:1f:eb:4a:
c6:94:cb:dc:ce:5c:42:8e:c0:64:1c:93:41:8a:10:e1:3d:e5:
06:95:b1:5d:9b:eb:79:77:f6:e3:39:b0:d5:bf:d3:19:a5:d4:
44:26:2f:e8:d2:35:1b:32:aa:01:5d:25:c3:35:a8:9e:7f:1b:
14:ea:dd:cd:49:9e:08:71:d6:22:3a:79:eb:d6:ad:00:3b:b3:
39:97:2b:39:70:52:d8:27:aa:c2:28:0b:d1:48:6b:66:7a:0c:
93:55:c3:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkne8G53aw2YepD4S2l5ZWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDI3ZmVhM2JhYTNlZjY4MGU4ZjdhMDdhNWYxOTRhYzQ5
ODkyYTUwHhcNMjUwOTA4MDQwMDQ1WhcNMjUwOTA5MDQwMDQ1WjAzMTEwLwYDVQQD
EygxM2IzYjdkYzNjOTE2Zjk5ZDhkZGJkNTgxOTk5NmViMDk4M2YyMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCUSy3RMdgPbyEVs7DamU0Ywqxmi
LL4vFNpket/mQxY4xLoTQhr2lqJjMu7M/wlNS77gHRoe22LHKx20djVfQ4WH9/Il
OtsI/VsUfmF++7QRbNvNa1uC7c/ywmWmcbC/bnUx3YmDBw8Sbt/gCuE4NnARCCaH
TBz/PJgffGSYYiHVAtfIBMl7KfFCqmYPLUw8uxmwj479Rj1600+aTKmh7bNai2zO
nsLAtZ2/jR99dq35szFM48jbim5wV0rM9EsBvDOw/QI8FZ++jADjQTvcANdK9tDJ
NOgwpA0l1AS+6W5Tu95qfBzvPcQm6da/+ve26hvzdeU2Mq1mu9/ken3c0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOzt9w8kW+Z2N29WBmZbrCYPyN+MB8GA1UdIwQY
MBaAFAzSf+o7qj72gOj3oHpfGUrEmJKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYt
YTYwZjEzMTk4ZDVkLzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYtYTYwZjEzMTk4ZDVk
LzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx/ueWu1c
8JZIn5+jkU3+erzg0/TsF5xXdPC5jyNClSfJxLMOE5UAg0cQfFp8ECkncYsHIY+j
bA67x3IzRKh4xh8scbbWhvFshmNCBkUprCLMARzBaBXpXgSZ9dhpH2KjhQAXS3wy
zitX1lyTS4jfcLdiLj632ZWvBO/9xEsJSuhGlpARD+jr9LCV3XBw1enWN4EiJ5IS
zIlaKpCiMxOEH+tKxpTL3M5cQo7AZByTQYoQ4T3lBpWxXZvreXf24zmw1b/TGaXU
RCYv6NI1GzKqAV0lwzWonn8bFOrdzUmeCHHWIjp569atADuzOZcrOXBS2CeqwigL
0UhrZnoMk1XDhA==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:41:54 2025 by rpki-client