Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: bGm5G/1OVD0at7pQ+5nTfTjosXbnSaqF01w80LcYECA=
Subject key identifier: BF:64:9B:BD:9D:4E:1B:85:46:A3:07:D8:B5:FC:A5:B8:12:2A:64:26
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 019A503E27A47A7147F90F70B5F55460965A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:41 +0000
Manifest this update: Tue 04 Nov 2025 19:00:41 +0000
Manifest next update: Wed 05 Nov 2025 19:00:41 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: WqLcvTUShyeWvvCythUwZUX11Tl4xpVPNDx9NknU/bY=)
2: Z7WQLysLOr9KTXHt3eRvtbiWeZo.roa (hash: fdaTiSBPfJFKIhyYKXlfKo3BVE4saxPRnib+dEXPrFo=)
3: ZOrfGuxYr-AGVishKANZfi1iYXI.roa (hash: LaLqBnWYlU5gFFvKLSeOrADM1iF3GbcpOkH2fyWF5fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:27:a4:7a:71:47:f9:0f:70:b5:f5:54:60:96:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Nov 4 19:00:41 2025 GMT
Not After : Nov 5 19:00:41 2025 GMT
Subject: CN=bf649bbd9d4e1b8546a307d8b5fca5b8122a6426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:85:b0:ea:ae:22:c8:f5:7e:22:f6:e6:98:
76:e8:4c:7c:a9:00:36:6e:14:96:42:8b:9c:16:c2:
21:c6:16:7b:66:d8:94:2b:ad:88:06:18:67:06:8e:
b4:cf:8f:63:be:95:a4:f9:bb:4c:26:8d:19:b9:4c:
08:fa:8c:8e:34:f8:56:b0:15:ac:46:c6:06:70:50:
0d:ce:4c:1c:0d:6e:c0:5f:30:69:3b:fa:3f:7d:e1:
8d:1d:2c:86:57:ac:99:c2:b5:a4:f5:98:71:42:08:
5c:68:7a:2f:8f:73:01:bb:6f:34:a1:fb:4f:94:bd:
5b:09:ca:b0:92:67:50:43:22:0c:89:09:a7:7d:9b:
fd:c9:fe:1d:8a:bd:d8:9a:4b:dd:d3:0d:b2:57:a3:
d8:0c:ed:7a:fc:ad:5a:7d:8b:bc:df:59:6e:c4:0b:
e4:8e:bd:99:c8:02:67:b4:2f:c4:7f:d7:63:88:0b:
d6:93:35:85:91:b2:c0:ab:7e:50:6e:65:ef:e2:7a:
fb:01:de:5a:43:d3:95:34:c8:83:5a:34:4b:e1:4f:
aa:06:d2:97:07:c1:43:93:54:06:fb:32:a1:22:98:
cf:21:81:93:77:56:aa:bf:16:0a:d1:99:de:4d:6d:
bd:51:48:87:5d:8c:13:1a:57:21:25:36:8b:54:c6:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:64:9B:BD:9D:4E:1B:85:46:A3:07:D8:B5:FC:A5:B8:12:2A:64:26
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:68:f8:51:29:f0:00:a4:8e:76:49:2e:0e:a1:62:0d:66:f0:
c5:f0:e6:7d:a7:8c:23:15:ef:8d:76:8f:2e:ab:f0:81:8c:61:
af:ce:12:93:88:4a:be:fa:5c:c9:14:1d:6a:48:71:6b:4f:4c:
62:1f:4b:3c:71:95:2a:65:53:f0:dd:77:21:4f:68:c3:1a:41:
bb:a1:66:3c:ab:32:a3:a5:96:24:97:ea:7e:95:b6:a1:62:15:
75:4d:6b:d0:89:e4:e9:06:c4:a1:32:e4:ad:ec:77:91:ac:21:
26:c7:f7:87:9e:80:75:c5:84:38:2a:23:b2:3b:d1:cd:9d:b1:
82:41:e4:0a:a1:2c:24:43:f5:28:5a:54:92:79:dc:6e:9b:1b:
3c:21:1c:80:bf:1f:83:7d:cb:54:c4:fe:e7:a8:c8:2e:cb:ba:
b6:42:bc:60:a0:b6:41:43:41:89:91:9b:47:6c:6f:6a:75:23:
7d:59:a5:3f:02:0a:9a:e2:0b:71:6f:9f:eb:7e:b7:54:ed:09:
8b:c5:35:02:7c:97:be:2a:32:28:ca:00:c4:b2:3a:7e:9c:3d:
99:e4:38:8c:f2:cf:a0:ac:5a:fa:23:4b:ba:41:f2:0e:11:4a:
de:5e:39:96:b6:48:7b:72:0b:67:f7:b7:41:c0:6f:60:b4:3c:
4a:72:c1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:07 2025 by rpki-client