Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
File: DkGjlotidBs200i-DSyRxdSxM6I.mft (raw, json)
Hash identifier: NKhgpIjfGEb8YdDh2m3mQkwE3Hw6SkjEDUd7GUinefw=
Subject key identifier: 63:82:17:B4:E3:77:88:FA:72:9B:13:53:9B:F5:77:EB:39:47:22:D0
Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
Certificate issuer: /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Certificate serial: 0198D583BF5A31A8A6FB95EE23D45D077EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:37 +0000
Manifest this update: Sat 23 Aug 2025 06:00:37 +0000
Manifest next update: Sun 24 Aug 2025 06:00:37 +0000
Files and hashes: 1: DkGjlotidBs200i-DSyRxdSxM6I.crl (hash: XD4IniRyBdIfN7U9JtWVKr/q20rfQUGOh1CkWWrHb1s=)
2: nHnuu4F-Ic_WUkHgNlM9Go5lrwU.roa (hash: 5dkmrGwUAjAB3N+7M+2yibV5BDpF46oezVix+Yio7q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:bf:5a:31:a8:a6:fb:95:ee:23:d4:5d:07:7e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Validity
Not Before: Aug 23 06:00:37 2025 GMT
Not After : Aug 24 06:00:37 2025 GMT
Subject: CN=638217b4e37788fa729b13539bf577eb394722d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:86:ce:5f:78:c2:18:6b:84:e7:dc:75:c2:
3e:f4:f2:9e:76:25:0f:89:9a:b5:a5:61:20:9a:9f:
15:0c:9f:f5:7d:a6:96:81:7c:e8:c6:45:0e:bf:66:
25:e3:ba:fc:f2:d9:a5:e9:d1:66:f1:a0:8b:96:78:
4b:86:ae:81:18:48:12:c4:1c:73:af:ab:1c:cd:9a:
ba:13:3f:50:43:73:bc:a3:5c:d6:f4:4a:17:4c:43:
d3:24:ef:61:66:a7:d4:9d:be:46:cc:e0:d9:ca:fb:
a5:1a:1d:63:ff:5f:fb:70:10:ee:88:2e:3b:da:98:
e6:c6:45:bd:14:a6:f9:fe:4f:8c:66:75:60:0c:bd:
a1:51:ff:94:23:e8:64:11:bc:96:37:82:a7:56:63:
28:d0:42:35:7e:95:6d:e5:08:b7:8a:eb:f1:f9:4f:
99:33:51:d5:c8:cb:54:26:66:74:29:4d:12:e7:b9:
94:13:52:2f:95:15:be:d7:9f:8a:da:83:dd:ad:1e:
bf:de:47:f3:85:fa:a8:91:77:71:77:48:79:34:0c:
10:a1:45:24:fc:92:cf:4c:c0:81:d5:a3:e8:f5:24:
6b:db:ad:78:c2:30:f5:2c:ea:03:99:28:da:b9:bf:
13:a5:85:53:5a:9c:a7:6e:ef:22:38:fc:52:37:57:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:82:17:B4:E3:77:88:FA:72:9B:13:53:9B:F5:77:EB:39:47:22:D0
X509v3 Authority Key Identifier:
keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2a:bc:9d:b5:fa:7e:fd:cc:54:a3:5c:b8:23:ab:d8:a5:b8:
d4:8e:64:29:c7:f0:b6:3d:a3:84:7d:30:08:b0:9d:76:3a:ac:
28:14:31:39:cf:e1:aa:81:9a:c2:e9:f8:e5:c4:12:7d:6e:17:
f7:71:65:03:95:28:03:b0:c3:81:df:9a:96:25:6e:19:76:98:
ba:47:19:43:d1:22:3f:76:a0:b6:8c:ea:92:64:d2:9d:2b:9e:
d8:57:d5:0c:73:50:c5:ef:ac:90:fe:6d:8e:ea:be:65:ed:2a:
85:70:64:a9:ec:fb:06:9c:d9:06:8e:63:f5:b9:d3:32:e4:be:
55:b2:eb:ea:da:60:13:97:b6:37:1f:da:8b:75:9b:2c:7c:6f:
64:bf:a0:fb:59:85:19:a4:cb:61:43:4d:6c:59:5e:9c:8e:f5:
0e:9a:cb:04:1e:9d:0d:0b:62:f1:f2:87:16:3b:34:d5:ec:44:
ac:32:2a:2a:7c:25:32:e3:9e:c2:0d:cd:1b:db:47:4f:e7:c8:
a1:ea:8a:63:e0:98:29:9c:75:97:a1:1d:cf:0e:11:eb:dd:8c:
83:77:16:73:40:b6:20:44:13:ff:0c:68:52:3c:e2:eb:d4:3f:
fc:43:3b:54:24:2b:92:59:77:94:ff:52:50:39:73:45:8f:34:
39:44:b2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:56:45 2025 by rpki-client