Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
File: DkGjlotidBs200i-DSyRxdSxM6I.mft (raw, json)
Hash identifier: /TXdxrmBXMuvlnkQHg3AnLTDs3pBQw1lDjQESIMk0fM=
Subject key identifier: 0A:62:58:10:5A:52:7E:F2:AC:95:4D:70:D6:8C:7B:7A:95:8A:CF:83
Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
Certificate issuer: /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Certificate serial: 0199FCFD7D6B87960C12DB5A0595549BDD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:35 +0000
Manifest this update: Sun 19 Oct 2025 15:01:35 +0000
Manifest next update: Mon 20 Oct 2025 15:01:35 +0000
Files and hashes: 1: DkGjlotidBs200i-DSyRxdSxM6I.crl (hash: HvsX20aa4vMA2pW1UHtcDvh5I68/RC6M6p49DHd2i4g=)
2: nHnuu4F-Ic_WUkHgNlM9Go5lrwU.roa (hash: 5dkmrGwUAjAB3N+7M+2yibV5BDpF46oezVix+Yio7q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7d:6b:87:96:0c:12:db:5a:05:95:54:9b:dd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Validity
Not Before: Oct 19 15:01:35 2025 GMT
Not After : Oct 20 15:01:35 2025 GMT
Subject: CN=0a6258105a527ef2ac954d70d68c7b7a958acf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:22:03:ac:7b:ac:55:7f:34:2a:8e:c3:e9:
88:13:ef:8a:ac:ba:99:11:cd:f9:b7:1a:4c:ca:a1:
9c:a6:9d:bb:ce:de:46:6e:db:a4:f7:d8:8c:8f:af:
2e:91:a3:bb:5f:ec:e2:24:4a:53:89:24:09:58:b6:
b1:d6:89:fd:36:29:9e:86:19:0b:91:e0:f2:e6:7d:
84:5f:f2:e2:ef:ab:0c:41:b7:bd:2c:74:25:c9:24:
11:f4:e8:3c:70:86:78:3d:01:cc:6b:b3:e9:24:16:
96:05:34:3e:c1:4e:a8:c3:a3:94:34:4a:6a:80:e6:
4b:75:b0:02:40:6a:ed:76:bd:2c:75:12:e7:a8:88:
6f:f0:02:07:1d:7d:a1:de:31:71:64:51:08:21:ed:
16:17:9e:9d:52:03:70:f3:8e:d4:a3:12:e3:a0:b0:
8d:eb:e5:f2:79:cd:d3:16:de:84:af:6e:ce:a2:63:
26:ca:63:f5:a1:b7:20:67:05:f9:00:5c:44:21:e1:
bc:62:d6:d2:9b:8e:28:f4:d3:75:d9:f3:40:c3:6a:
d5:e9:67:cd:4c:78:c8:34:08:7b:2e:bf:ca:1c:7b:
12:af:35:2e:a7:e3:40:ae:c4:88:c6:9b:b2:90:bd:
0a:01:7c:9d:92:3c:18:5a:f5:0d:68:89:5c:2b:51:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:62:58:10:5A:52:7E:F2:AC:95:4D:70:D6:8C:7B:7A:95:8A:CF:83
X509v3 Authority Key Identifier:
keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fc:51:4b:30:50:be:f2:eb:cd:8e:77:2a:20:13:d4:10:09:
92:67:f4:e3:37:ce:37:b1:18:c3:cf:66:1d:8d:e1:dc:62:f9:
e2:97:7b:56:20:c0:2b:d0:44:48:e9:5f:15:ae:1f:53:0b:aa:
79:4d:36:62:cf:58:c0:2c:98:78:0b:08:c1:3c:6a:24:bd:59:
6d:3c:08:ea:9b:0b:a9:f9:46:81:57:84:b2:5e:e7:77:2c:37:
ad:cd:71:28:6b:40:b4:da:7b:83:05:fb:9a:59:48:39:9b:ef:
37:b5:30:5a:8b:b6:24:d0:f5:91:ec:5a:09:02:8c:4e:fb:9d:
5d:55:71:c5:00:cb:2d:96:46:f6:86:94:ab:19:e6:ef:4b:bc:
d5:40:e8:57:67:63:ad:a4:32:d3:bc:84:d5:d7:2d:bc:63:b7:
a8:89:a4:8f:93:ca:91:3d:52:db:da:12:f3:5b:83:42:29:36:
20:f1:28:b7:c5:73:4d:ac:d5:fa:11:61:df:55:52:41:e6:7a:
fb:27:b6:0d:7e:bd:95:74:3e:24:48:60:42:19:59:24:81:d8:
bc:d2:c4:1a:75:69:f2:2e:8e:8d:97:56:8b:f1:56:f8:12:07:
8f:7d:8c:fc:8d:80:b3:ba:22:6e:08:be:e2:3e:f4:f6:81:36:
cb:c2:b2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:31 2025 by rpki-client