Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier: RCT19hxUuuPxPfHAWchn4GUTD7kbQ9PHdM3TcI9PdKY=
Subject key identifier: 46:F6:15:72:9F:09:C4:F9:8D:7A:C1:04:C4:6C:EB:D3:EA:91:BB:2A
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 019A50E375D38EFEF038137C62595936A434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number: 101A
Signing time: Tue 04 Nov 2025 22:01:15 +0000
Manifest this update: Tue 04 Nov 2025 22:01:15 +0000
Manifest next update: Wed 05 Nov 2025 22:01:15 +0000
Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: suy6CCParS7u3LDOQQRdw+hVPEOuHIgqHRzcF13ygok=)
2: KSFH2iX9DZf8Q-50ramqag80LYo.roa (hash: N6tvxRZU5FhCXYfq+gSSvyO+LQEuT5uPy32KkqFgDN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:75:d3:8e:fe:f0:38:13:7c:62:59:59:36:a4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Nov 4 22:01:15 2025 GMT
Not After : Nov 5 22:01:15 2025 GMT
Subject: CN=46f615729f09c4f98d7ac104c46cebd3ea91bb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:00:0e:9e:e1:b2:51:84:6a:c8:d8:d7:8d:
b2:83:38:63:34:53:a5:0b:0b:42:95:1b:65:01:6b:
0d:fd:8e:d3:25:11:5f:ba:aa:e6:27:c7:63:71:a0:
fa:c0:3a:ae:85:f3:6f:e5:f5:9b:a1:5f:da:ae:e4:
bc:5a:25:81:dc:4d:44:dc:a8:f6:8b:bb:be:8c:13:
5f:98:cc:16:e6:3e:d2:81:b1:13:99:ca:b4:79:e4:
9f:b8:a8:58:40:d9:25:dd:54:c6:d8:64:38:db:7a:
f0:7e:06:b8:ba:da:7d:13:38:c4:6e:c0:7b:07:1e:
d6:55:21:59:b2:b5:d6:c4:db:91:1a:54:2d:4d:a4:
7f:a6:0f:81:2d:50:37:b0:5d:91:8e:f9:1e:17:54:
56:4a:9f:e8:e0:2f:01:3f:83:2a:c2:6a:c1:95:11:
96:5a:07:ad:b4:48:f2:4f:eb:08:9f:d1:66:fd:2c:
a5:e9:ff:f3:ae:06:cd:ee:19:7c:12:c5:83:59:b6:
cf:89:91:cf:45:7f:aa:97:4b:98:68:3e:d5:12:cc:
0e:45:ea:f3:76:63:f1:1f:19:78:bf:7f:56:7a:68:
98:dc:59:85:25:0b:4d:68:1b:f0:d4:9f:71:6b:4d:
e5:41:89:33:0a:28:14:3c:6a:13:39:9b:72:14:50:
e9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F6:15:72:9F:09:C4:F9:8D:7A:C1:04:C4:6C:EB:D3:EA:91:BB:2A
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5d:50:8c:71:15:37:c0:ad:5e:70:60:87:c5:d2:1c:01:07:
7e:35:b5:22:3c:ea:dd:f1:95:94:10:3a:50:8d:7b:10:2b:df:
5d:5b:11:0e:fc:4d:af:b0:22:6d:ed:a2:48:b8:b9:60:82:bb:
99:13:83:fb:cb:8d:c1:b3:f9:09:54:91:58:c8:b0:90:6d:ec:
7e:a8:68:4d:7a:13:0a:55:d6:4e:cc:4b:6b:44:20:83:25:9c:
0a:1a:0e:2d:72:34:c9:f4:0e:b5:50:7b:6d:e0:3a:f2:34:a7:
a2:7d:57:07:15:5d:80:64:84:35:76:86:99:bc:2c:71:b7:65:
72:4f:6b:da:22:ff:f1:c3:de:78:54:18:58:c4:da:6f:d7:62:
ad:58:11:60:a5:54:a9:1f:3b:6c:b7:8c:04:5b:bf:85:ae:90:
5f:aa:23:d8:f9:5a:12:5b:a7:56:56:41:45:d1:fe:aa:a4:a3:
b7:b9:89:55:56:c4:ea:00:86:25:6e:4d:1a:2a:78:52:ff:64:
b5:f9:42:9e:54:77:94:67:84:d4:1b:c5:1d:39:6e:30:ff:60:
2c:40:53:bf:b1:9a:49:69:b0:b4:bd:45:dd:2f:d9:e1:af:98:
7c:1e:4e:ea:50:19:6e:2e:d0:04:c2:05:2d:10:dc:a5:a2:91:
65:91:41:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ43XTjv7wOBN8YllZNqQ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDI3ZmVhM2JhYTNlZjY4MGU4ZjdhMDdhNWYxOTRhYzQ5
ODkyYTUwHhcNMjUxMTA0MjIwMTE1WhcNMjUxMTA1MjIwMTE1WjAzMTEwLwYDVQQD
Eyg0NmY2MTU3MjlmMDljNGY5OGQ3YWMxMDRjNDZjZWJkM2VhOTFiYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbIADp7hslGEasjY142ygzhjNFOl
CwtClRtlAWsN/Y7TJRFfuqrmJ8djcaD6wDquhfNv5fWboV/aruS8WiWB3E1E3Kj2
i7u+jBNfmMwW5j7SgbETmcq0eeSfuKhYQNkl3VTG2GQ423rwfga4utp9EzjEbsB7
Bx7WVSFZsrXWxNuRGlQtTaR/pg+BLVA3sF2RjvkeF1RWSp/o4C8BP4MqwmrBlRGW
WgettEjyT+sIn9Fm/Syl6f/zrgbN7hl8EsWDWbbPiZHPRX+ql0uYaD7VEswORerz
dmPxHxl4v39WemiY3FmFJQtNaBvw1J9xa03lQYkzCigUPGoTOZtyFFDpHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEb2FXKfCcT5jXrBBMRs69PqkbsqMB8GA1UdIwQY
MBaAFAzSf+o7qj72gOj3oHpfGUrEmJKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYt
YTYwZjEzMTk4ZDVkLzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYtYTYwZjEzMTk4ZDVk
LzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa11QjHEV
N8CtXnBgh8XSHAEHfjW1Ijzq3fGVlBA6UI17ECvfXVsRDvxNr7Aibe2iSLi5YIK7
mROD+8uNwbP5CVSRWMiwkG3sfqhoTXoTClXWTsxLa0QggyWcChoOLXI0yfQOtVB7
beA68jSnon1XBxVdgGSENXaGmbwscbdlck9r2iL/8cPeeFQYWMTab9dirVgRYKVU
qR87bLeMBFu/ha6QX6oj2PlaElunVlZBRdH+qqSjt7mJVVbE6gCGJW5NGip4Uv9k
tflCnlR3lGeE1BvFHTluMP9gLEBTv7GaSWmwtL1F3S/Z4a+YfB5O6lAZbi7QBMIF
LRDcpaKRZZFB2Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:54:21 2025 by rpki-client