
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
File: dvkMwSPQ0gRp05xsNFXzHqYSP04.mft (raw, json)
Hash identifier: kOlMfOhzqG7VAWn/Qx0X+/rw/TCnNik75I0/rzTwWs8=
Subject key identifier: 4B:E1:BF:6F:A7:65:92:26:CA:78:D4:94:52:A9:EC:62:B0:8D:9F:FB
Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
Certificate issuer: /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Certificate serial: 0199FFC870D4263B635871050D3363385F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 04:02:30 +0000
Manifest this update: Mon 20 Oct 2025 04:02:30 +0000
Manifest next update: Tue 21 Oct 2025 04:02:30 +0000
Files and hashes: 1: dvkMwSPQ0gRp05xsNFXzHqYSP04.crl (hash: PIB8rGuuWy3VvwtKLOc6yAZOfzn5OdPzXcAdCIJ+4p0=)
2: u3lxxc1lkavM0xc30bqZfpWxvHo.roa (hash: UHLRAbtjmSCDadx2fBrU+RDEoeooREQATwB2er11mzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:70:d4:26:3b:63:58:71:05:0d:33:63:38:5f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Validity
Not Before: Oct 20 04:02:30 2025 GMT
Not After : Oct 21 04:02:30 2025 GMT
Subject: CN=4be1bf6fa7659226ca78d49452a9ec62b08d9ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:fa:9e:45:c4:72:d8:dd:a0:17:7a:5c:69:
9b:cd:ee:25:7b:e4:c6:8c:81:12:49:09:2e:2c:d3:
ce:a8:99:58:89:44:97:12:b3:51:94:2e:c5:8f:05:
a0:cf:e3:a6:b2:c8:ab:b7:90:7f:74:dd:1a:80:58:
26:d4:bb:45:cf:c3:98:32:56:57:38:31:9a:f8:5f:
96:68:81:f0:d1:6f:6b:b1:3f:02:08:26:35:0c:63:
0f:50:69:f4:a8:2d:7a:00:47:e9:35:fe:20:30:52:
d4:d5:54:dc:f3:3b:5e:52:c5:cf:33:6e:ec:a1:2e:
7f:5a:62:f3:95:6b:7b:9d:17:77:be:02:e9:bc:b4:
f5:53:b3:30:70:60:6a:af:b2:c0:54:e5:37:43:f0:
23:fb:49:77:5e:23:90:d7:d1:30:fa:98:56:7a:fb:
1f:a2:89:18:b3:6d:19:41:8d:d3:95:00:1e:0c:d4:
ef:e5:13:d1:70:6b:23:c0:1d:b4:99:ec:a6:33:81:
c8:85:1f:b9:32:f7:8f:b5:77:6c:15:31:7c:c6:c9:
88:6f:35:74:9d:45:61:6c:72:e8:27:e6:8a:89:05:
5b:9c:27:80:e9:b0:89:33:61:e5:55:26:e6:fb:a0:
12:82:17:73:ea:e8:e2:fb:96:1c:42:19:aa:d4:e0:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E1:BF:6F:A7:65:92:26:CA:78:D4:94:52:A9:EC:62:B0:8D:9F:FB
X509v3 Authority Key Identifier:
keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:90:0f:e5:5f:78:d7:dc:c4:d8:d9:6c:9d:3d:c1:8b:89:36:
44:54:86:0d:04:25:3f:6b:5c:86:2d:86:25:8d:c2:49:64:ef:
12:f6:69:94:56:9a:95:cf:80:af:ed:55:04:24:0e:b9:97:82:
9d:b1:c3:f2:d0:89:62:fe:dc:b6:a8:e4:ae:f7:52:e7:27:f9:
41:dc:09:37:29:66:0e:2e:10:41:94:c7:fb:69:2c:0a:63:ad:
4c:27:28:f5:25:55:b4:c7:1d:71:f2:64:70:2d:82:e0:cb:77:
9c:93:9e:cc:e9:68:0d:38:3c:2c:a2:44:2e:e4:bf:1b:63:dc:
3b:3b:0c:6b:cb:0f:6b:f3:0b:5a:09:8a:8a:ba:9f:7e:99:2c:
f0:8c:0b:14:54:34:43:6f:57:a0:4d:b2:b6:cd:cf:e5:2f:eb:
8c:af:7f:47:da:6b:b5:19:f3:3d:95:48:c2:b7:59:5a:9e:f9:
be:8a:67:35:29:c3:40:2b:07:ac:c4:90:e2:e1:5e:b0:d5:53:
2b:e3:2d:a2:a5:6f:e7:65:54:df:0f:39:ba:df:01:dc:a1:dc:
10:67:a8:de:99:53:03:00:15:79:37:95:31:ad:47:22:1f:e9:
60:be:47:23:94:5f:2c:ec:5b:3c:d6:83:71:18:67:58:55:dc:
62:9e:7a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:39:44 2025 by rpki-client