Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: dGR+cDrtqhgMPg3TStm8FVt7F66WXlnTFfoPBHHCYvM=
Subject key identifier: DE:5E:3F:52:E0:1B:92:B0:D0:0E:6F:FF:98:8E:75:F1:D5:A2:F3:B6
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 0198D4A7DAE12FA9238703604D553F6C4DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:26 +0000
Manifest this update: Sat 23 Aug 2025 02:00:26 +0000
Manifest next update: Sun 24 Aug 2025 02:00:26 +0000
Files and hashes: 1: 1cBDORiVvrRChAcdm2hc6y292d0.roa (hash: XIDQHNSLIfpf1kaFUtLQNCl28oalABx/0LdYZxGeMgk=)
2: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: O69K3iTobfeL9QnRf8dvW2hegNb8NyDuaROguNhCP1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:da:e1:2f:a9:23:87:03:60:4d:55:3f:6c:4d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Aug 23 02:00:26 2025 GMT
Not After : Aug 24 02:00:26 2025 GMT
Subject: CN=de5e3f52e01b92b0d00e6fff988e75f1d5a2f3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:15:95:af:03:05:fb:39:26:88:b1:ec:26:
ca:33:6d:c1:d8:16:29:07:b8:65:05:42:85:aa:16:
f9:62:97:86:d4:3d:9d:3a:9a:b7:71:a2:b4:35:72:
69:fd:ec:a7:82:0a:a7:a5:97:d9:2d:df:bd:62:ec:
37:3a:26:60:f3:f9:d5:2b:2e:c8:70:c2:70:83:b3:
6b:0d:59:21:f0:72:2a:16:75:9e:02:17:bf:16:a5:
83:c9:2a:58:22:57:01:8f:b5:85:d5:5f:a7:8b:63:
ea:87:dd:d6:65:d8:f0:5c:02:95:0d:a1:3a:f1:ae:
5b:e8:4d:4f:ac:90:3a:81:3e:17:d8:7c:ee:4c:28:
b5:67:de:3b:21:aa:85:0d:2c:79:55:8a:f7:d2:6f:
6e:b6:4a:33:dd:4c:70:24:6b:06:be:d2:eb:db:79:
a4:bc:76:5a:a9:92:cd:8d:2f:87:f0:e3:52:cb:a4:
76:9a:6f:e0:4c:29:a2:22:84:9a:b5:5b:a0:1e:ee:
b5:d7:9c:32:78:22:0a:d9:5a:b9:45:8f:63:b2:f0:
bd:6b:41:54:3a:db:04:ec:11:5c:b8:aa:4b:51:da:
75:2c:89:5f:47:10:a5:8b:da:fb:3c:a1:7a:57:fe:
26:63:d3:a7:7a:f3:4d:03:35:20:3a:7f:04:5e:ca:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5E:3F:52:E0:1B:92:B0:D0:0E:6F:FF:98:8E:75:F1:D5:A2:F3:B6
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7f:b5:2d:3d:d6:96:94:9c:05:f3:3d:74:cb:da:ca:3a:a2:
7f:43:0c:d9:17:e5:3f:ec:d9:a3:ac:76:f6:da:08:43:d5:49:
b8:4d:22:86:12:6e:f4:5a:53:7d:1c:ef:83:23:c9:5b:a5:7c:
12:c6:f0:9f:0f:e3:f8:e2:6a:b5:11:df:0d:f1:c1:78:d1:df:
40:bd:2e:76:09:79:c1:cd:ae:c3:36:ad:98:fa:e3:b0:e4:d5:
17:13:da:e3:ac:14:e7:68:8c:b8:e7:18:d4:7e:28:b7:35:e6:
ee:3b:81:80:dc:e3:21:d3:43:6a:dc:4a:24:6b:53:d2:8f:e7:
ce:e9:8b:63:7d:c4:be:c2:5d:0e:6a:b1:75:bd:1f:b0:be:85:
05:ac:06:04:67:4f:7f:89:82:d0:86:b0:2d:75:57:00:98:2f:
6e:47:61:20:3c:cd:39:5e:2a:69:c7:fc:dd:6c:90:4c:16:44:
de:da:bc:5f:a6:e7:67:63:00:fe:89:1c:ef:11:5a:61:ec:8e:
4b:c8:65:72:2c:5c:01:4b:c5:74:f2:9a:67:64:91:29:10:ee:
cd:55:b4:37:03:6d:6d:06:5e:0f:cf:0f:30:7c:39:66:dc:6c:
33:3f:63:c5:3b:c3:78:7e:32:64:2c:d4:73:fe:c9:86:0f:4a:
11:fc:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:02 2025 by rpki-client