Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
File: dkyOsD7yMmpiDfEAVI0fBth0VRo.mft (raw, json)
Hash identifier: 3fU5Pbbw1q9LaOHHeANtfL5Ia5kQEbEt3fcMpi8npuU=
Subject key identifier: ED:02:E9:4F:42:89:93:A4:C7:1F:DE:AD:B8:35:42:0E:C7:DA:F8:FD
Authority key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
Certificate issuer: /CN=764c8eb03ef2326a620df100548d1f06d874551a
Certificate serial: 0199FFC8A8197F87B8765B4A3B148471A1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
Manifest number: 0F99
Signing time: Mon 20 Oct 2025 04:02:44 +0000
Manifest this update: Mon 20 Oct 2025 04:02:44 +0000
Manifest next update: Tue 21 Oct 2025 04:02:44 +0000
Files and hashes: 1: 6pQ6t4bP0J0fbsLbhEpUyG2VFpw.roa (hash: dOWAwUrFgwCtFG9Vv9gPLuYcFdBlCoehZxFbI34HH6c=)
2: dkyOsD7yMmpiDfEAVI0fBth0VRo.crl (hash: Vtym3d+ff/cGibzMfeDzIGqjuddM0MaANNA6A0BNlBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:a8:19:7f:87:b8:76:5b:4a:3b:14:84:71:a1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764c8eb03ef2326a620df100548d1f06d874551a
Validity
Not Before: Oct 20 04:02:44 2025 GMT
Not After : Oct 21 04:02:44 2025 GMT
Subject: CN=ed02e94f428993a4c71fdeadb835420ec7daf8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:7e:33:e9:84:c8:cc:1f:ed:36:d8:c9:ca:
93:7c:e9:84:12:84:3e:e3:6a:94:ca:b7:9d:ba:4d:
4b:9a:9c:04:95:f6:1b:57:1d:0b:6a:de:ff:ff:4c:
84:f7:d4:6c:7c:65:f1:bb:e0:2b:9d:1b:65:bd:d1:
8b:0d:8f:45:0d:6d:73:f4:f1:5f:f8:6e:70:a1:6d:
15:9a:1e:22:f2:4f:bf:cf:45:4b:3b:d5:f2:62:5a:
30:45:ab:46:12:10:f7:01:e8:47:f3:61:9b:f1:5d:
04:d3:e5:a7:78:bd:34:ae:55:10:58:b0:32:61:41:
c4:cf:39:41:8c:e2:6f:2f:9b:03:39:4a:18:74:34:
7a:6e:1a:04:24:41:7c:0f:ba:0e:4f:2a:20:a6:a1:
5d:9e:e2:cd:d1:52:29:b8:37:b5:28:24:15:34:e9:
ef:e7:ea:6e:b6:56:16:c5:30:0e:dd:de:ec:01:e7:
65:67:18:87:6f:72:1b:e8:79:40:31:ce:33:71:7c:
04:c9:b6:5f:ba:75:83:7a:92:52:7e:dd:ef:ea:a0:
fe:95:87:59:33:4f:1a:78:d9:59:8b:c8:15:1a:41:
7b:48:ac:83:85:da:27:1b:fd:4a:33:eb:5e:39:a2:
ac:53:03:7c:64:d3:26:71:c1:bd:18:19:81:42:c4:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:02:E9:4F:42:89:93:A4:C7:1F:DE:AD:B8:35:42:0E:C7:DA:F8:FD
X509v3 Authority Key Identifier:
keyid:76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3d:2c:58:5b:eb:1e:eb:8f:ce:13:07:e5:0b:00:a6:c2:c6:
6d:1c:e8:7f:44:3a:08:4f:b8:cd:cb:8e:b7:14:5c:5e:15:b3:
bb:0a:e3:38:81:28:89:ed:1e:34:11:87:7f:d9:58:33:96:1e:
40:86:c5:96:fc:10:6c:d6:ab:e1:e2:7f:5b:41:d9:9b:cc:fd:
91:00:2d:ed:f2:bb:0d:2b:b5:4a:8d:6a:a6:d1:fd:cc:88:64:
3e:ba:ff:d3:c7:1c:7d:32:c2:52:49:90:a7:27:e3:5c:10:77:
d2:bf:2a:b3:01:74:8c:ff:1d:29:fe:76:83:bc:fb:37:a3:23:
8e:83:c7:7e:45:cc:d2:8f:d1:a8:e7:09:92:59:97:25:b7:bc:
fb:1f:42:0a:1e:72:56:dd:dc:74:8a:85:3d:d4:e0:d4:bc:53:
06:b9:e7:64:60:59:3c:93:1c:b7:7e:ed:47:f8:84:30:1c:7f:
52:85:56:e2:87:52:c0:30:98:a4:8a:a0:de:b3:9b:f9:53:3f:
e2:24:e6:8a:86:63:c1:30:60:e3:75:45:fe:89:a8:7e:75:3e:
1b:8c:a7:2f:6d:38:0e:9c:6b:5e:59:8c:d7:45:50:cc:0b:ce:
15:04:a8:46:18:d8:50:55:56:c6:27:9b:87:c2:6a:bf:49:b3:
a2:4d:89:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:22 2025 by rpki-client