Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
File: dkyOsD7yMmpiDfEAVI0fBth0VRo.mft (raw, json)
Hash identifier: ShhPWs+FfY7Ih0T7WFGEqCiE7coF6nIIozEYKWBOHIw=
Subject key identifier: 3F:5B:11:53:4A:3B:99:45:66:BA:C8:9A:D4:A9:11:3B:97:2E:D6:2F
Authority key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
Certificate issuer: /CN=764c8eb03ef2326a620df100548d1f06d874551a
Certificate serial: 0198D65F242C34CC472B4769EC86497A753C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
Manifest number: 0EFF
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: 6pQ6t4bP0J0fbsLbhEpUyG2VFpw.roa (hash: dOWAwUrFgwCtFG9Vv9gPLuYcFdBlCoehZxFbI34HH6c=)
2: dkyOsD7yMmpiDfEAVI0fBth0VRo.crl (hash: bOFDWgjgoOrz4gZ7Se9N2rumKPCb0B5PlIprub52Twg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:24:2c:34:cc:47:2b:47:69:ec:86:49:7a:75:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764c8eb03ef2326a620df100548d1f06d874551a
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=3f5b11534a3b994566bac89ad4a9113b972ed62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:0c:1c:3e:ce:08:6d:d2:a1:68:6d:23:44:
b7:ed:b0:8a:ea:e2:be:60:27:09:3e:96:59:25:49:
b3:bd:62:1a:e1:b9:92:65:6f:43:bb:0d:88:81:60:
14:95:f6:73:5f:b1:94:f0:f9:52:ba:57:6c:cb:28:
72:e9:2e:be:f4:a6:d3:5f:21:df:91:47:d5:3f:98:
3e:71:b6:af:85:6d:94:99:6e:d8:c7:52:da:f1:5c:
47:ac:27:3b:e3:ca:09:41:31:7d:02:7d:b2:77:72:
2d:e1:e3:73:84:2f:15:f1:b1:51:65:9f:83:db:c0:
db:96:8a:22:fc:5a:13:2a:51:47:5a:cc:f3:bb:d2:
d9:4b:fc:f5:a3:99:74:41:a9:cd:9e:0a:82:0f:a4:
35:cf:06:4c:69:93:e2:f5:94:cc:6f:00:ce:1c:6c:
33:eb:d6:b3:4a:81:e1:f1:7c:1f:67:51:28:1b:7c:
3d:46:fd:a2:9e:8c:8a:13:ac:9a:bb:60:6b:8b:9c:
21:72:59:fe:1c:04:92:76:8a:dc:70:b5:99:27:9f:
23:1e:e4:24:82:c4:87:f5:7e:71:b5:28:4e:89:78:
02:cc:e9:51:f0:f8:b2:02:07:ba:9a:ce:18:75:39:
63:d9:b9:8c:1b:bd:49:34:06:fc:9e:fd:dc:16:ff:
fb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5B:11:53:4A:3B:99:45:66:BA:C8:9A:D4:A9:11:3B:97:2E:D6:2F
X509v3 Authority Key Identifier:
keyid:76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fc:c2:98:f6:3b:94:88:d1:e1:bc:af:90:c6:02:9e:0c:dd:
08:2c:1f:12:ec:c7:00:ae:51:ef:23:67:6f:a1:ba:c0:2f:91:
75:33:64:86:5b:fa:9e:0d:7d:c3:33:9c:2c:f8:d3:e3:a6:cd:
7a:dc:dd:cd:44:44:60:1e:a5:07:71:8d:b3:3f:d0:71:86:6a:
64:c7:73:81:67:75:32:20:3b:c2:80:b2:4c:bd:99:32:af:2d:
e2:ee:c6:a1:6f:d0:be:9e:dc:76:ca:ca:11:e4:56:e9:e3:e8:
29:13:43:4c:a5:31:1d:59:3f:10:af:98:16:cc:98:b8:fb:3d:
35:ec:96:68:2e:1c:0b:78:c1:ba:e4:c9:63:d3:d6:62:6c:81:
6e:d1:c0:e6:75:f7:a8:20:3f:b7:0e:60:7e:d7:6f:66:a5:e4:
c7:6d:5f:b9:bc:33:3d:53:dd:16:27:b1:cb:01:0b:fa:ce:c4:
ef:24:ae:55:a3:28:12:8b:e6:d5:17:ea:c7:ca:55:f5:6d:63:
6d:13:e7:7e:fd:20:ef:0b:bc:e8:27:31:6d:43:83:19:ce:ee:
34:e1:8c:c5:9d:b9:27:28:81:9b:c5:0e:71:c5:c0:9c:65:30:
40:18:b6:3b:e3:91:e0:9b:34:cd:c3:32:94:6e:6b:8b:5c:5d:
76:2f:61:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:39 2025 by rpki-client