Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
File: djizYCRf5EsXV6ael3oV4H-q9ps.mft (raw, json)
Hash identifier: bbzgroX/bvHWn9Lu3EjrUZGG5QJHSBa3TRxfeCTszpw=
Subject key identifier: EC:0F:15:37:BB:90:87:07:53:8C:CE:A4:64:A0:70:F8:CC:A1:5B:16
Authority key identifier: 76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
Certificate issuer: /CN=7638b360245fe44b1757a69e977a15e07faaf69b
Certificate serial: 019A70A4E2F8E6824C873878EF08AD44E0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
Manifest number: 0279
Signing time: Tue 11 Nov 2025 02:00:45 +0000
Manifest this update: Tue 11 Nov 2025 02:00:45 +0000
Manifest next update: Wed 12 Nov 2025 02:00:45 +0000
Files and hashes: 1: djizYCRf5EsXV6ael3oV4H-q9ps.crl (hash: OTiB9yoBbVQXr6xr6R6drSH4kqEjgmtFBjrntKPeP4w=)
2: gSGKFe1pn3_5E4Q7YRW3hV9F-dg.roa (hash: Gfi8XtFBl7a2jBdHmK+GtPDHztaG0pAxvqWau8U6T/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:e2:f8:e6:82:4c:87:38:78:ef:08:ad:44:e0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7638b360245fe44b1757a69e977a15e07faaf69b
Validity
Not Before: Nov 11 02:00:45 2025 GMT
Not After : Nov 12 02:00:45 2025 GMT
Subject: CN=ec0f1537bb908707538ccea464a070f8cca15b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:25:f5:9e:89:a9:de:d4:00:6a:77:92:e1:
a9:fd:ed:88:fa:7a:0e:bd:a7:b7:d0:35:2c:80:6f:
58:f3:aa:2c:f8:c8:cd:79:9b:b5:a3:d5:78:70:d8:
ee:13:12:e5:96:d8:7a:55:9e:33:56:64:87:ab:f3:
1d:3b:88:73:72:ea:fb:c2:17:1f:46:6b:bc:32:52:
89:51:55:bb:13:d9:1c:94:9a:b7:a9:99:71:5b:51:
b0:72:7e:01:92:7f:48:36:4e:65:cc:59:02:56:e6:
02:ce:de:ea:07:8a:56:1d:44:74:4f:dc:44:d6:35:
bc:69:b8:cc:d6:14:0d:0a:4d:cd:bd:45:be:bb:71:
64:d8:20:bb:e6:b1:cf:bd:be:a8:73:66:09:e2:0d:
aa:a9:99:55:a4:f6:f4:73:33:d9:59:ac:0c:05:31:
17:c6:7f:75:f7:55:90:4a:e6:32:e3:31:13:96:ac:
a8:70:60:79:f4:25:5d:c0:9b:7b:df:25:51:d2:84:
c2:55:ee:f9:bb:71:03:ef:88:71:57:dd:39:f1:d8:
8e:5f:af:5e:4d:99:88:05:4a:4f:70:66:4a:be:d0:
28:42:de:20:73:fb:b2:1f:cf:76:05:cd:c4:b2:f7:
66:04:d3:9b:8c:67:cb:da:6f:5a:d6:ef:24:bf:0f:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0F:15:37:BB:90:87:07:53:8C:CE:A4:64:A0:70:F8:CC:A1:5B:16
X509v3 Authority Key Identifier:
keyid:76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4e:55:3e:ad:d6:a0:2d:27:aa:77:29:58:00:f3:f1:7c:18:
ed:ca:a3:3e:04:f8:b0:78:18:11:8e:41:0f:91:e4:03:fb:38:
50:fd:17:4c:ee:e0:b1:24:cb:b1:82:79:bf:07:fb:cf:97:99:
d4:1c:8d:3c:22:66:20:d4:ce:5d:5e:08:41:be:c9:34:34:44:
52:09:db:c1:7b:2d:9b:18:08:64:b2:e0:48:b0:e6:9f:45:ef:
e6:e9:62:dd:de:0f:ae:bd:ad:86:24:99:1f:ee:36:4f:59:ac:
3d:95:14:27:82:08:ca:84:7c:3f:e9:c3:3f:dc:e2:57:a8:c0:
4e:f7:8a:aa:cc:6a:47:49:82:24:f8:04:2a:e1:15:f9:3c:0c:
5d:af:7b:dc:ff:95:bc:ed:cf:76:e7:10:1a:69:20:6f:da:01:
b5:6e:e9:46:32:c0:3b:bb:48:cf:ff:02:9c:94:9f:89:80:4c:
36:c4:26:ba:d3:66:89:f4:61:03:68:b5:65:dd:ff:a0:ec:5b:
e8:da:0b:fd:5a:c2:6b:b5:65:91:85:c6:a3:d6:0c:d4:86:11:
55:e2:5a:c2:fa:94:61:8a:69:04:17:10:03:60:2a:61:6b:f4:
5f:bc:3b:e0:d3:0b:1b:24:79:cf:45:7c:4e:de:da:c0:1e:b6:
cc:f1:2f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:04 2025 by rpki-client