Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: BcgOweAV6TgTyNu07xHEML+XNQAqnDe9z3cGrmk6cIk=
Subject key identifier: B1:56:EF:D2:42:59:AA:04:5F:12:CB:E4:DE:61:B1:97:7B:72:BE:2A
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 0199FFFE798BB9D940C86CA1764B8CE3588E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 05:01:31 +0000
Manifest this update: Mon 20 Oct 2025 05:01:31 +0000
Manifest next update: Tue 21 Oct 2025 05:01:31 +0000
Files and hashes: 1: 1cBDORiVvrRChAcdm2hc6y292d0.roa (hash: XIDQHNSLIfpf1kaFUtLQNCl28oalABx/0LdYZxGeMgk=)
2: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: GLF4qfzV/cOe5HJgjisseYoCQkTVcgZzk7GK/0nvzSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:79:8b:b9:d9:40:c8:6c:a1:76:4b:8c:e3:58:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Oct 20 05:01:31 2025 GMT
Not After : Oct 21 05:01:31 2025 GMT
Subject: CN=b156efd24259aa045f12cbe4de61b1977b72be2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:c0:59:fc:2b:64:c6:02:7d:c2:03:ce:99:
03:b8:11:ce:d0:54:50:b2:d7:85:80:72:18:d8:07:
bc:31:9d:df:24:23:cc:cf:57:13:9c:00:cd:e0:1b:
f2:f2:6d:66:98:b3:31:ac:0c:de:10:2c:f7:a7:00:
06:4d:5a:5c:8d:8c:ef:4e:9e:08:41:6a:1d:79:4e:
44:9f:87:03:0f:a4:e9:3d:db:fd:b5:f5:05:7c:bd:
20:dc:5e:d7:31:c0:5d:f0:1d:81:44:34:d9:e0:92:
a9:ed:18:23:dc:88:de:e3:85:ad:15:6f:5c:36:87:
0e:4c:c3:7f:9e:50:68:a9:73:d1:59:ea:d2:89:e9:
a3:60:1e:9c:32:3a:2f:a8:b9:a3:2a:f0:cc:a6:5e:
b5:b9:e1:40:c4:31:5c:ed:8a:fe:77:d7:b4:66:e4:
4a:8c:bf:3e:b6:a8:2c:da:8e:28:4c:80:91:98:0d:
1b:e8:36:50:78:b5:57:87:b6:0f:c1:f1:52:33:03:
0b:bf:55:50:b8:6f:7c:83:a3:38:f4:51:fa:92:0f:
29:a9:f1:fb:c5:f5:ea:46:41:22:67:02:9a:40:0c:
26:13:db:01:b8:80:14:ff:94:9a:06:da:65:95:ea:
06:35:7f:29:90:ac:58:e5:08:d1:87:17:84:7f:c9:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:56:EF:D2:42:59:AA:04:5F:12:CB:E4:DE:61:B1:97:7B:72:BE:2A
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:62:cd:62:1c:e7:d2:29:9c:8d:c5:36:cd:65:c5:63:4d:4c:
08:07:91:e1:da:27:e7:bf:2a:f5:24:24:b9:ec:4f:16:75:23:
48:f0:de:5a:2d:f7:89:55:74:0c:b2:fb:d1:5d:8b:e2:89:9f:
7a:2e:c1:0f:51:7d:b1:0e:8e:e8:68:14:02:ef:1b:96:8e:f9:
8f:4f:8f:ce:02:5c:6f:2b:8a:a0:e1:b0:ac:9c:34:b1:76:11:
b9:42:b2:af:3d:22:78:eb:83:85:20:2b:a9:d0:84:9d:e5:99:
7c:ac:13:cc:a1:17:30:01:4f:fb:c0:11:cb:a4:ed:3b:5a:96:
ce:0a:aa:9d:42:9f:dc:db:c4:3f:ec:8d:0a:a3:73:7c:a8:8b:
6a:43:42:1d:50:fa:ed:d7:b4:7f:6b:41:5c:12:62:56:39:d1:
02:5a:05:b3:c5:71:ec:fa:78:82:12:fe:d1:96:da:c6:59:e7:
fc:60:c4:81:cd:26:15:c6:5e:a9:73:65:38:30:c9:33:d0:6d:
0a:84:d2:62:f6:ee:21:bb:13:77:0f:4c:48:a8:73:12:3d:cc:
42:27:76:fe:a4:3e:b1:3a:08:21:ad:7f:5c:49:e5:4a:c6:79:
a8:bd:5c:8b:2d:fa:3a:c3:2b:cf:af:a8:fe:9d:b0:dd:9b:71:
c3:a1:b6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:40 2025 by rpki-client