
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier: mWQmGe2urHu6f6VnK7uIodpdvLsnALZYDpwRnwTPEk0=
Subject key identifier: 7D:F5:C5:EF:C5:A0:F9:07:39:57:36:9C:09:84:EB:7E:5C:0E:AC:AC
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 0198816718B4BD4013D11C2997CB23C08A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 22:01:14 +0000
Manifest this update: Wed 06 Aug 2025 22:01:14 +0000
Manifest next update: Thu 07 Aug 2025 22:01:14 +0000
Files and hashes: 1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: GJIi2aJtH2GnUog4aX+PJb6XOCnh3TcpYa/QzhVKfUg=)
3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:18:b4:bd:40:13:d1:1c:29:97:cb:23:c0:8a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: Aug 6 22:01:14 2025 GMT
Not After : Aug 7 22:01:14 2025 GMT
Subject: CN=7df5c5efc5a0f9073957369c0984eb7e5c0eacac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:fb:b2:ed:5a:8d:cd:d3:3c:07:01:20:4a:
af:42:95:7b:6b:b9:82:e3:68:a8:d0:3e:cb:29:d8:
12:11:54:a0:d7:de:68:21:e4:35:1f:e6:aa:8e:86:
73:63:57:cc:65:9c:12:f1:26:cf:bd:a5:0e:2a:1f:
20:5e:d1:fe:52:69:f5:a7:9f:52:6f:7f:e2:88:83:
cb:d2:21:9e:df:1d:0e:76:36:8c:c9:f1:c6:30:7f:
62:94:51:d4:90:3c:aa:f4:d1:c5:f0:4c:86:32:20:
63:57:26:da:f5:b0:64:de:28:3a:02:5d:90:59:61:
22:a9:20:71:7a:c3:ff:c2:24:43:da:b1:0b:ce:10:
00:99:c6:13:56:fd:93:f4:24:d5:7d:df:e1:a5:70:
05:3c:0e:8a:b1:7f:12:94:c0:39:93:6d:67:c1:98:
11:50:da:75:e6:a8:fa:37:ce:d5:fd:27:09:fa:fe:
4c:7c:09:ba:1e:2a:a1:3b:af:f0:ea:cd:66:f5:5c:
28:75:c8:7d:be:d3:fb:d6:4a:fe:12:e3:e2:59:98:
3a:1b:00:37:9e:7f:cf:e2:0d:55:f2:1c:6b:a3:8c:
81:86:8f:67:9a:36:f5:42:94:42:5e:60:cd:05:50:
10:7b:be:80:a0:32:c6:a5:2d:e3:16:49:ce:2b:7a:
a5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F5:C5:EF:C5:A0:F9:07:39:57:36:9C:09:84:EB:7E:5C:0E:AC:AC
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c8:da:96:4a:c1:cd:d7:40:f3:7b:10:1c:c8:28:1b:93:79:
61:f1:81:bc:79:11:5e:e5:e2:21:b3:3b:0f:e3:4e:e8:20:60:
1f:4d:2f:1a:93:85:97:62:77:db:d9:4a:b3:f9:60:fb:78:ed:
19:d4:89:39:b1:83:6b:9b:75:64:90:72:15:78:6f:bf:75:58:
76:36:0c:7e:0b:2d:4d:eb:91:ea:72:0a:86:49:21:02:e8:c4:
ad:05:04:5b:4b:73:4a:8f:25:fc:d4:f9:e2:eb:f2:41:68:6a:
1d:62:b5:7f:96:16:c5:8d:e5:49:72:86:07:ee:c2:ce:07:ef:
67:82:13:7d:d4:74:59:d4:9f:ad:70:ca:df:fb:1d:43:fb:40:
da:73:d9:32:a4:9b:9c:d0:7a:55:38:29:e8:42:e5:50:66:2a:
8c:c7:4e:ab:0c:66:d9:7a:aa:88:bc:2b:8b:34:c6:a6:f5:1b:
31:90:0a:39:55:1b:f5:7a:4b:22:91:fb:b6:ef:c0:d6:45:08:
52:6c:f7:60:8f:6e:c1:4b:11:8a:c9:a4:36:16:64:96:92:be:
1e:23:83:e0:3c:b1:60:b3:99:27:2b:29:ef:71:40:4b:31:c4:
e8:b3:fa:9d:33:fd:3b:2c:9a:9b:13:8e:ca:89:f5:9f:47:27:
7f:f8:ad:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZxi0vUAT0Rwpl8sjwIqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMzZhYWQ3MzM1ZjM0ZTRjZDgyOTQyM2JlYjA4OWM0ZTBh
NGU4NzQwHhcNMjUwODA2MjIwMTE0WhcNMjUwODA3MjIwMTE0WjAzMTEwLwYDVQQD
Eyg3ZGY1YzVlZmM1YTBmOTA3Mzk1NzM2OWMwOTg0ZWI3ZTVjMGVhY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfb7su1ajc3TPAcBIEqvQpV7a7mC
42io0D7LKdgSEVSg195oIeQ1H+aqjoZzY1fMZZwS8SbPvaUOKh8gXtH+Umn1p59S
b3/iiIPL0iGe3x0OdjaMyfHGMH9ilFHUkDyq9NHF8EyGMiBjVyba9bBk3ig6Al2Q
WWEiqSBxesP/wiRD2rELzhAAmcYTVv2T9CTVfd/hpXAFPA6KsX8SlMA5k21nwZgR
UNp15qj6N87V/ScJ+v5MfAm6HiqhO6/w6s1m9Vwodch9vtP71kr+EuPiWZg6GwA3
nn/P4g1V8hxro4yBho9nmjb1QpRCXmDNBVAQe76AoDLGpS3jFknOK3qlTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH31xe/FoPkHOVc2nAmE635cDqysMB8GA1UdIwQY
MBaAFA42qtczXzTkzYKUI76wicTgpOh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGphcTF6TmZOT1ROZ3BRanZyQ0p4T0NrNkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85YmE1MDQtMDJhZi00OTcyLWIwYjkt
ODIyZGU5MzA4ZTAxLzEvRGphcTF6TmZOT1ROZ3BRanZyQ0p4T0NrNkhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85YmE1MDQtMDJhZi00OTcyLWIwYjktODIyZGU5MzA4ZTAx
LzEvRGphcTF6TmZOT1ROZ3BRanZyQ0p4T0NrNkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8jalkrB
zddA83sQHMgoG5N5YfGBvHkRXuXiIbM7D+NO6CBgH00vGpOFl2J329lKs/lg+3jt
GdSJObGDa5t1ZJByFXhvv3VYdjYMfgstTeuR6nIKhkkhAujErQUEW0tzSo8l/NT5
4uvyQWhqHWK1f5YWxY3lSXKGB+7CzgfvZ4ITfdR0WdSfrXDK3/sdQ/tA2nPZMqSb
nNB6VTgp6ELlUGYqjMdOqwxm2XqqiLwrizTGpvUbMZAKOVUb9XpLIpH7tu/A1kUI
Umz3YI9uwUsRismkNhZklpK+HiOD4DyxYLOZJysp73FASzHE6LP6nTP9OyyamxOO
yon1n0cnf/itCg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:45 2025 by rpki-client