Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier: DYs4OAQILUCrPrCHSNbWRlCNPiKgXMs3qs3GcQv/zsc=
Subject key identifier: 2E:B5:C2:DE:70:0F:B8:D4:73:A3:C4:98:0D:4B:CD:8C:D4:3A:AB:B8
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 019A4EF4E70DE270CFA82AC04CF7C8182F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:04 +0000
Manifest this update: Tue 04 Nov 2025 13:01:04 +0000
Manifest next update: Wed 05 Nov 2025 13:01:04 +0000
Files and hashes: 1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: dMZmEYiLJ1deo2jXSrPc9QU7+pmDitNdWZesdKcPB+M=)
3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e7:0d:e2:70:cf:a8:2a:c0:4c:f7:c8:18:2f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: Nov 4 13:01:04 2025 GMT
Not After : Nov 5 13:01:04 2025 GMT
Subject: CN=2eb5c2de700fb8d473a3c4980d4bcd8cd43aabb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:31:8b:aa:66:d0:5a:44:00:f0:6e:78:db:
7e:cd:1e:94:48:58:01:cb:5e:bd:d0:cf:02:ce:31:
0e:0e:24:37:dd:06:7b:5a:6e:e4:0a:c2:e3:6c:66:
64:47:5d:be:1a:a3:d3:2d:94:df:da:b1:28:df:bf:
5b:93:50:bf:f3:26:81:ab:8e:46:db:6a:f6:65:a5:
75:3b:a7:bb:34:10:56:90:9e:ab:80:75:ba:ce:9f:
78:74:31:ed:29:1a:2b:0e:2b:24:ae:7a:b2:6a:cf:
85:cc:45:0c:f6:81:34:43:d3:b2:78:6f:20:8c:a7:
86:4f:cd:93:d5:55:f2:68:74:26:05:e5:62:55:01:
34:de:2a:5d:cd:e7:cd:07:c6:e5:0f:4d:7f:d1:5d:
36:3a:b3:fc:fc:60:fa:91:c8:ab:4c:54:b8:ca:07:
9f:db:d4:a7:7e:13:55:9c:fe:34:4b:7c:c9:52:d5:
f7:a2:d5:f9:aa:fc:c0:17:fe:c5:4d:df:de:82:6f:
4d:a8:b1:2c:96:27:63:a3:81:43:02:33:ef:5e:5e:
3a:f0:f6:79:5d:06:31:b9:fb:97:7a:67:2a:79:ba:
e0:ce:03:97:80:ed:f1:4b:43:0c:1b:e0:22:76:90:
f8:d5:61:82:b9:19:60:f2:e5:2f:0d:40:ab:95:57:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B5:C2:DE:70:0F:B8:D4:73:A3:C4:98:0D:4B:CD:8C:D4:3A:AB:B8
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c8:ed:98:3a:8c:e4:f5:97:73:31:af:57:7e:75:be:2d:61:
1b:5a:14:cb:39:4d:02:99:0e:2f:99:c6:cf:aa:f1:6c:d8:d5:
3c:51:a3:90:ae:6c:d3:cc:7b:48:b8:8e:09:18:e6:d8:87:50:
53:c7:2d:a8:29:ab:4c:9e:e4:62:9c:25:5f:36:48:3f:17:b1:
8c:2f:93:16:a1:f6:5b:20:4c:83:fe:b5:01:4d:9b:64:ae:44:
77:89:5a:eb:8b:31:b2:0d:86:d8:46:8d:b8:5c:51:ca:94:16:
fe:52:3d:dc:b5:9a:90:0e:95:3c:5a:8d:13:62:2b:9b:1a:09:
a7:d1:db:af:c2:03:63:ba:9c:6c:40:3e:16:a6:13:7d:46:b5:
0f:c4:52:e1:ed:95:22:ff:e6:0e:6e:a0:24:d4:b4:02:0a:ec:
6d:b2:b6:20:23:11:d3:2c:32:16:ed:6c:24:e2:3c:a7:e3:89:
7e:0c:c0:2d:13:10:83:bc:96:3f:ee:39:c7:1a:67:a2:fe:d2:
2c:92:7f:f4:d5:50:8b:ee:26:6e:8e:56:67:5c:a0:db:dc:ee:
fd:a8:49:9c:f9:03:a2:f7:e9:6e:7d:1e:65:fd:7c:fa:ca:a6:
4e:61:a7:6d:f4:86:51:88:34:85:78:a2:0f:fb:57:64:a2:c1:
32:53:28:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:02 2025 by rpki-client