Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: DbzqKJh6cIDKuDIOpxi2it6ENQoOQhMZNl+d+7KBRkc=
Subject key identifier: C1:66:18:36:11:7F:F3:7E:F5:36:82:E2:33:E0:2C:D7:12:3F:80:27
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 0198D6605629C4347269BD6EAE5A400916E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0C1E
Signing time: Sat 23 Aug 2025 10:01:34 +0000
Manifest this update: Sat 23 Aug 2025 10:01:34 +0000
Manifest next update: Sun 24 Aug 2025 10:01:34 +0000
Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=)
2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: 7cWTS5C4zY/3EG7ipFcQMS1B9DSL78qxe/HnBVzZ1W8=)
3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:56:29:c4:34:72:69:bd:6e:ae:5a:40:09:16:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Aug 23 10:01:34 2025 GMT
Not After : Aug 24 10:01:34 2025 GMT
Subject: CN=c1661836117ff37ef53682e233e02cd7123f8027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:51:ca:4f:1c:ad:9c:a1:f8:21:14:ff:c0:
73:59:3e:76:29:cb:d2:17:70:42:96:19:54:74:02:
09:77:56:bc:d2:a5:19:73:e9:72:8d:a9:e2:9d:7a:
a0:d8:2d:8a:de:25:80:86:51:c6:53:a1:4c:27:7c:
c0:58:4e:17:97:e7:bd:15:e3:49:60:3a:52:44:e0:
27:36:b3:53:a2:c8:c7:6b:2d:8c:8b:f1:c2:77:3f:
c1:2c:eb:9d:de:11:f8:e9:66:d1:d1:33:89:13:2e:
2d:43:a7:62:4b:42:f3:e4:d7:43:a1:78:e3:5e:dd:
0c:cc:78:da:77:93:d3:d0:b8:d7:38:ea:74:50:ec:
c6:8a:99:c4:f4:b9:b7:e2:83:ca:a2:25:ad:22:c6:
ba:8c:1e:82:36:e9:72:2b:49:41:16:e8:93:41:05:
78:9f:79:c7:63:7b:a1:e1:91:53:d5:70:de:12:18:
f2:5b:cf:10:6d:51:ae:d7:b3:18:32:84:3a:bf:bc:
73:89:a4:28:6b:c3:33:3a:9d:56:3e:b4:0c:b0:cc:
4a:7a:2e:73:3d:6e:96:a8:75:6d:76:1a:28:aa:73:
79:0c:16:8d:4d:fd:3a:f3:56:95:da:be:f2:83:58:
0e:e3:dc:ca:dd:11:3c:ca:d4:cf:42:42:87:1a:81:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:66:18:36:11:7F:F3:7E:F5:36:82:E2:33:E0:2C:D7:12:3F:80:27
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:40:b4:d8:90:ea:0b:7a:98:45:26:8f:56:b6:35:3a:97:41:
ca:da:3a:69:ed:d9:26:f8:d1:db:13:a5:55:a4:8d:aa:21:fa:
b0:24:0c:8c:8c:f2:0c:bc:56:73:13:cc:ae:6c:91:cd:dc:c7:
fa:7e:bd:77:c0:b9:24:d1:fa:a3:dc:0f:89:e4:34:a1:f5:85:
c8:9d:1b:8d:c1:48:d7:48:ae:79:22:d8:9b:61:e3:e2:1e:9b:
ef:02:e5:9a:11:52:05:96:64:b4:00:0d:41:64:29:a3:cd:1e:
19:dd:4d:6c:08:72:4c:3a:be:b7:b9:85:0b:fb:0e:73:5d:58:
83:2c:27:0a:c1:a3:c5:7b:f5:0f:30:84:d9:49:32:a5:d6:07:
76:53:3d:9e:01:ca:e0:dc:ec:05:ef:18:0e:34:0d:0c:6c:ff:
57:8d:0d:f7:47:38:fc:a0:0d:0e:c2:19:20:6a:b7:0a:e9:1e:
c4:b0:32:6b:0d:6f:35:54:ce:92:88:6a:ed:ca:82:35:49:ce:
99:f7:26:d3:73:7a:45:aa:9c:ee:77:42:9e:0d:f6:32:a4:e1:
7e:7e:5a:67:e8:c5:36:bb:c5:bf:3b:58:7a:7b:05:e0:c6:2a:
f0:c6:8a:56:6d:f1:14:51:9f:c1:6a:7e:12:37:28:d6:6c:68:
1d:01:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:22:59 2025 by rpki-client