Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier: +jBwkLxHizQMP0YGXkgtgrsmYH7lO10MMXbebyvrYP0=
Subject key identifier: E8:53:03:D9:CC:C9:DA:35:61:6D:0D:68:02:29:F4:3C:CD:93:39:A4
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 0198A04E37D8F9A79DC5395EA70DCA7196E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number: 0F3A
Signing time: Tue 12 Aug 2025 22:02:17 +0000
Manifest this update: Tue 12 Aug 2025 22:02:17 +0000
Manifest next update: Wed 13 Aug 2025 22:02:17 +0000
Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: 3ILwMi3Gyh4D0px6reRGFPQ1b3gmokWaeg5g6fxOB9Q=)
2: KSFH2iX9DZf8Q-50ramqag80LYo.roa (hash: N6tvxRZU5FhCXYfq+gSSvyO+LQEuT5uPy32KkqFgDN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:37:d8:f9:a7:9d:c5:39:5e:a7:0d:ca:71:96:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Aug 12 22:02:17 2025 GMT
Not After : Aug 13 22:02:17 2025 GMT
Subject: CN=e85303d9ccc9da35616d0d680229f43ccd9339a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:1a:c7:68:c0:14:f8:47:e3:74:63:8d:36:
b7:33:53:6c:e0:cb:61:19:d5:0e:c9:2a:29:e1:ee:
05:64:a6:54:42:9f:26:41:6d:d7:ec:70:ab:ec:3a:
12:b7:66:1b:e3:81:5d:a5:f3:09:26:f1:f1:0f:f4:
d9:81:38:3f:db:b2:fa:34:e0:53:48:24:35:25:f4:
7c:1d:0e:16:07:e6:a5:18:11:7f:85:af:5f:53:59:
88:d2:c3:3f:69:28:05:72:01:77:1e:6a:27:b7:2c:
6f:11:bf:b9:dc:a7:98:42:e2:bb:73:f3:b7:92:8f:
4a:ea:64:33:d5:7f:a5:c1:02:f1:59:e6:52:45:24:
21:12:8a:27:62:cd:39:de:14:8e:e5:d6:77:02:5d:
f5:b5:6a:cf:b3:bc:3e:f7:d4:07:90:45:9e:a2:eb:
35:3a:eb:4d:dd:e8:9a:51:8d:6c:53:4f:1e:62:1a:
78:fb:a0:c3:60:c9:7b:e0:1b:94:c5:94:8e:ac:9b:
7f:75:19:3c:04:cf:fb:79:b0:ee:76:59:cd:28:43:
7a:f9:08:ea:a9:e1:39:63:45:7c:28:99:9a:9d:06:
73:80:8c:18:1f:30:10:31:97:7c:79:59:a4:ef:93:
36:0f:63:04:35:e8:48:42:9b:8e:74:06:b6:67:66:
a1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:53:03:D9:CC:C9:DA:35:61:6D:0D:68:02:29:F4:3C:CD:93:39:A4
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ec:14:77:ed:53:a4:e2:65:40:a7:a3:6f:13:a5:c6:30:20:
0f:ce:80:4b:9f:f8:fb:6a:8f:70:aa:1a:fa:9a:17:da:04:fe:
57:de:26:5a:d1:15:4b:4e:a5:08:27:0f:01:92:0a:8e:fb:b9:
62:9e:3f:b5:3f:61:83:68:79:5a:a9:85:7e:6b:17:70:76:a3:
09:f7:ba:d4:c8:9e:6f:b7:b3:89:da:af:6d:3e:9a:70:ee:bd:
8e:5a:b6:05:fb:05:13:1f:97:02:2e:4c:a8:f4:fb:c9:13:7e:
79:d7:98:74:86:06:e9:94:9f:02:13:0a:53:89:c9:9d:71:2e:
62:d8:60:55:d7:88:2b:db:ee:20:66:04:47:6c:ea:18:02:02:
5a:6a:e6:9e:a9:1e:58:18:ce:ca:3f:3c:ac:e6:d1:fe:c9:67:
c2:40:98:13:85:c5:76:62:60:00:8b:04:31:19:8b:2e:09:2a:
5c:4c:b2:6d:5d:10:c2:59:c8:da:10:d5:c1:d1:73:b5:b4:78:
1a:0b:f4:06:03:3e:82:3f:02:da:f6:10:12:b5:e2:96:13:cc:
98:ed:05:69:d9:4b:5e:ed:ca:00:d6:ba:2a:50:9b:97:20:b0:
a1:db:19:0f:0b:cd:de:39:b0:75:b9:36:d5:c5:4c:11:24:d6:
85:07:9b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:13 2025 by rpki-client