Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
File: DkOg3wWaUlGkALWh8TIboA0xINI.mft (raw, json)
Hash identifier: xbtktJVkzolUhgI6El8dpYx9ia6F12m8xOVBMpJIK/0=
Subject key identifier: 82:AC:23:BB:F1:ED:A0:B2:C4:25:3B:D3:38:6F:45:BA:D6:B9:2D:A0
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial: 0199FAD7AA33508F5BF37A3CEEDE52565FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:01 +0000
Manifest this update: Sun 19 Oct 2025 05:01:01 +0000
Manifest next update: Mon 20 Oct 2025 05:01:01 +0000
Files and hashes: 1: DkOg3wWaUlGkALWh8TIboA0xINI.crl (hash: POdHbMpscjlio+j1Yu+hrz9HC1jlRezevrjPiFqWEsw=)
2: meyQlZ2V2fFm7jP19tS1SnwZU8o.roa (hash: Rjzn7WIqlB0uqbC7++KFiY3Pm+Td1rmouk6fxkElj30=)
3: u8p2k1kowabt5V010HcHbUdny4A.roa (hash: +zIIZMzEVP0HgE88S7aeA3JokmowyYpTKNzs1+R3c2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:aa:33:50:8f:5b:f3:7a:3c:ee:de:52:56:5f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Validity
Not Before: Oct 19 05:01:01 2025 GMT
Not After : Oct 20 05:01:01 2025 GMT
Subject: CN=82ac23bbf1eda0b2c4253bd3386f45bad6b92da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:29:cd:4a:94:06:22:07:38:ba:95:e8:f2:
d4:88:c2:a4:05:f1:b7:22:bd:a9:44:0b:74:99:70:
c3:0a:73:42:15:91:c5:ed:b0:5f:f6:2e:61:9c:17:
a0:a7:89:7f:28:9e:c4:46:2c:8c:03:41:a4:6e:c2:
fc:33:a3:94:a5:7c:2e:94:2d:6e:1c:69:2a:be:ff:
73:39:28:21:c0:04:6d:95:30:d0:7a:64:46:6d:47:
d5:cb:c9:a0:55:20:30:e8:13:c7:ce:65:55:44:61:
b7:a0:52:75:bc:8c:e6:0b:95:75:3b:75:a5:8d:0e:
8b:76:ac:83:4c:78:99:16:b1:15:e6:5d:1a:d1:a2:
97:d7:1e:25:e5:98:fb:b3:44:e6:59:14:e9:cc:1b:
9e:6c:d1:ec:24:42:91:c8:b4:61:8f:a7:88:7a:86:
a8:02:e5:fa:96:56:3e:af:3a:17:24:4e:a0:76:21:
6f:30:ad:cc:7a:c9:05:dd:45:43:08:8f:70:c2:c9:
95:63:ef:82:80:94:bb:6b:aa:d7:2f:d2:62:c6:2b:
88:0f:7f:4c:4a:20:a2:cd:f0:ac:c7:b5:7e:c3:52:
2e:a7:4e:0c:85:39:05:c1:93:4b:fa:ba:0b:52:12:
7c:73:39:05:62:6b:5d:18:74:24:06:57:0a:aa:4d:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AC:23:BB:F1:ED:A0:B2:C4:25:3B:D3:38:6F:45:BA:D6:B9:2D:A0
X509v3 Authority Key Identifier:
keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:26:c0:17:aa:a9:70:68:20:52:6b:d3:1c:ac:ea:b7:ac:08:
fe:c8:32:25:0d:7b:b5:fe:00:19:70:79:7f:2b:73:e6:e9:8c:
e3:a5:34:25:a4:db:4d:6f:90:ef:bf:1c:96:fc:ca:c9:fb:b5:
cf:e8:70:21:72:25:e4:92:14:1d:a5:38:a4:53:5f:c7:f3:5b:
57:70:8f:f3:6e:ed:ef:e1:46:53:6d:4e:1a:fe:c7:da:e0:31:
18:8b:9a:64:46:c8:be:95:f7:ab:10:3c:bd:ef:9f:d9:ed:6e:
17:0c:f7:54:0d:3f:5e:8e:c0:87:25:d1:71:2c:b9:fc:0b:4a:
57:64:28:a7:b7:b7:27:84:d6:b7:3b:8d:d6:e0:21:95:d8:a7:
a0:2d:37:34:ea:89:32:74:46:1c:1b:d5:40:a4:01:e7:dc:fe:
f9:9f:33:eb:92:10:d5:f8:8b:4f:49:d2:fa:3a:0f:a8:c9:ae:
91:28:98:70:e2:80:96:88:e4:24:90:2d:38:a7:0d:90:58:f7:
57:7c:ee:ef:bf:eb:17:3b:c7:46:7a:18:df:f8:e3:d5:2a:d7:
30:11:d8:92:f2:aa:5a:de:3f:a5:36:f9:bf:0d:c4:04:8f:6c:
9f:f8:09:f1:23:1e:b4:b8:f8:9b:e1:d8:3e:d1:f2:01:88:ab:
e1:a3:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:21 2025 by rpki-client