Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: uPvN2iUbbZMjLq10DywSZRN9ShRJxyyVBShjHVnzGhY=
Subject key identifier: 46:9B:04:D5:06:78:7E:D5:E2:A0:36:17:85:AD:70:D8:01:1F:6F:78
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 0197BAB44FDCA3206019CA8D97EF9C345F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 08:01:08 +0000
Manifest this update: Sun 29 Jun 2025 08:01:08 +0000
Manifest next update: Mon 30 Jun 2025 08:01:08 +0000
Files and hashes: 1: 1cBDORiVvrRChAcdm2hc6y292d0.roa (hash: XIDQHNSLIfpf1kaFUtLQNCl28oalABx/0LdYZxGeMgk=)
2: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: GiKagSKvnoqXX+wzS4mqjP5idXa1dzuDOKX5mEcGQ98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:4f:dc:a3:20:60:19:ca:8d:97:ef:9c:34:5f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Jun 29 08:01:08 2025 GMT
Not After : Jun 30 08:01:08 2025 GMT
Subject: CN=469b04d506787ed5e2a0361785ad70d8011f6f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:60:5a:34:73:1f:01:2c:2f:1b:e5:eb:c5:
c4:ca:e9:eb:ed:87:72:a3:a3:44:ed:96:53:11:1c:
fb:ce:44:60:d2:1b:64:30:ff:8a:5a:34:e0:f7:6f:
16:c2:72:31:3b:49:d9:c1:24:ab:c3:9e:34:0a:49:
b3:41:c7:64:25:3d:0d:58:de:7e:7d:ec:14:2a:c8:
4a:5e:5d:31:79:2a:11:9f:14:64:0f:bd:04:f5:79:
ae:a0:54:f6:78:64:53:9c:e6:0f:8a:6f:15:85:0f:
18:51:49:1d:b9:87:97:b9:18:dc:a4:12:61:e1:a6:
b7:32:6e:78:eb:24:27:f5:3d:5a:9c:44:25:34:f3:
fb:eb:53:b0:c5:27:3e:6d:a4:00:da:1c:a5:6a:f2:
51:f6:a6:8f:f5:93:4b:3c:f1:52:e8:0e:e6:e2:ab:
ab:a4:41:34:08:26:2f:71:ee:7e:a3:80:55:b4:66:
ad:2d:76:f7:7a:7a:4f:63:fd:b2:d2:ad:7c:0e:55:
61:84:c3:cd:d6:b7:2e:96:b0:99:9c:24:57:81:6f:
35:6f:90:9e:cf:30:06:f4:19:44:ae:58:59:e3:ac:
56:f5:67:f9:bc:ce:2d:b0:3e:ff:82:69:d7:94:32:
6b:31:3e:4f:9c:7a:e2:eb:34:6f:9c:3a:3a:e6:38:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9B:04:D5:06:78:7E:D5:E2:A0:36:17:85:AD:70:D8:01:1F:6F:78
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a3:56:cf:b0:f5:35:f5:5f:b8:c1:cc:2d:f7:e3:37:fe:05:
f7:3e:af:57:cc:01:20:ce:b2:75:96:8f:17:ed:ef:97:56:6b:
6c:87:68:41:ad:71:d2:3f:a9:3b:aa:5d:54:73:1e:d0:18:01:
90:8f:ec:66:39:bf:eb:60:00:f2:41:54:2e:c3:ae:35:5c:6e:
4a:ba:b3:86:f1:a4:59:15:85:0e:83:f8:3d:17:9a:09:c7:3e:
1e:19:36:91:19:69:c3:46:fe:37:92:c4:bf:d8:1d:b1:bd:2d:
f7:4f:c9:23:c5:04:b2:69:45:e2:b8:41:b0:ff:bc:b2:af:a8:
1e:99:e1:a3:78:81:9e:e0:68:93:7c:3e:e4:a7:45:d0:8d:79:
76:24:bd:48:86:67:47:cd:a2:f2:22:54:79:d0:5c:94:da:7c:
e3:a7:32:90:e7:5d:d3:ac:d2:56:42:cb:f6:57:5b:10:73:00:
ce:0f:e1:7f:c8:69:87:02:d3:02:4e:d4:3c:ad:2b:09:e7:c9:
da:20:d3:d6:88:a3:82:07:f1:c9:bb:f2:34:9e:3c:32:c9:b9:
b9:87:5d:ee:45:8b:66:86:d5:82:73:e2:1e:5c:4c:4c:b0:fa:
36:e7:0a:de:a7:c2:19:6b:7b:f2:3d:9a:7d:a5:fb:40:3e:df:
79:c4:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:46 2025 by rpki-client