Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier: t8EDsLzgavn6cAORvfn/gzhyoNGseVYbbq96SvE0zUM=
Subject key identifier: E7:67:56:F7:DE:C3:EF:F9:14:B2:AA:FA:C7:BA:2B:45:1A:BE:49:DD
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial: 019A4F2B5A25DDE98D6EAA8257EB9D293000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:32 +0000
Manifest this update: Tue 04 Nov 2025 14:00:32 +0000
Manifest next update: Wed 05 Nov 2025 14:00:32 +0000
Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: o3xSMq98mo2+Kk5BEY6rsKf8I2ebWc0uYBXiAdUbGyE=)
2: YeUbav6EAp2mAnn2v72RBK_mFZw.roa (hash: 6lsjmApYWIJWgcJbH7Xr/EBHcstui66uMy/hUDB8r3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:5a:25:dd:e9:8d:6e:aa:82:57:eb:9d:29:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Validity
Not Before: Nov 4 14:00:32 2025 GMT
Not After : Nov 5 14:00:32 2025 GMT
Subject: CN=e76756f7dec3eff914b2aafac7ba2b451abe49dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:65:56:5e:b1:05:61:08:85:f1:78:e6:e1:
5e:0f:3e:d3:d7:d2:c8:66:3b:48:13:44:06:3b:ea:
73:3c:64:30:88:f4:1a:56:12:3e:e7:3d:fb:2a:4b:
3b:9a:30:aa:b4:9d:87:7b:2a:14:40:00:42:b1:ad:
55:ef:a3:2f:d9:cc:a1:72:48:62:8b:30:85:d0:ce:
c3:15:0b:63:61:a0:1d:7c:28:a7:08:6a:68:22:6b:
68:e4:43:d8:f3:93:64:d6:7a:15:d3:cd:f4:28:17:
53:97:97:8f:04:ef:a8:1c:db:22:0a:c8:32:8d:16:
5c:cc:6b:e0:3c:02:88:7b:83:47:79:bd:d0:b4:28:
e1:37:0c:69:32:c4:95:09:15:5b:4a:80:54:58:a8:
be:8f:bf:67:a8:e5:d8:29:ee:78:09:20:db:ca:a5:
95:75:4f:d9:68:5c:c0:e2:74:94:b5:0d:ee:dc:1a:
a1:84:0e:20:52:6e:ae:ca:f9:dc:e9:2e:1b:aa:16:
9e:f1:f6:b7:56:60:32:ed:f6:0d:c4:64:b5:75:7c:
21:87:40:d6:15:3f:da:fc:28:dc:bf:4d:29:fa:78:
aa:9e:4f:56:d9:e7:8b:7c:58:51:5c:e7:25:4a:51:
bb:ef:58:ab:15:7d:f7:34:3c:80:1e:f2:6b:f9:ce:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:67:56:F7:DE:C3:EF:F9:14:B2:AA:FA:C7:BA:2B:45:1A:BE:49:DD
X509v3 Authority Key Identifier:
keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:79:ff:06:52:e8:1c:35:4a:ca:81:ba:7b:f1:00:42:da:35:
3e:90:ee:31:79:8e:0a:aa:4c:c7:0f:bf:2e:60:3c:94:b7:ca:
c9:7c:5e:22:9f:09:be:0a:87:e8:1b:84:6f:b9:a6:03:ef:85:
24:5d:8d:ae:29:80:63:d7:1c:e8:6a:20:10:75:cb:af:84:30:
8c:84:ad:74:b1:40:27:b4:71:ad:72:92:42:e0:fb:73:7a:54:
c7:15:df:04:e0:e6:64:60:0f:ae:d9:46:a0:8a:9b:6c:06:59:
42:79:be:fd:55:7a:e6:df:03:0d:ee:82:cf:1e:62:24:9c:5e:
1c:16:80:00:63:de:84:02:a4:53:b6:49:7f:1a:c8:ce:a3:96:
25:5e:a4:17:67:ff:7a:3e:60:73:3d:b9:53:51:9a:ba:f8:28:
7c:b2:96:41:e1:e8:5f:b0:e2:9c:bf:7c:ff:6e:a8:6e:85:bb:
28:2a:fe:7a:ac:b6:29:8b:3f:06:f9:8c:68:e8:af:a4:ac:b0:
30:87:a8:af:66:aa:fe:cc:94:bd:e9:1d:26:fd:98:ac:0d:ab:
c8:f6:29:19:6d:43:e4:c6:ff:b1:e1:cc:e3:a4:70:42:67:22:
55:75:c9:26:51:67:e9:2d:be:ec:ca:d2:2e:89:23:f3:f5:de:
a5:73:e2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:29 2025 by rpki-client