Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: oBmwsBJr0TQr7l3euWI+dpf3kLKGIYTQCH+ElS4WNoY=
Subject key identifier: 26:4C:E5:04:AD:36:F9:16:FB:B0:7D:52:E6:6C:D9:CB:0B:A0:A4:82
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0199FDDA4EE70369CA1422579645C4F0D286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 1767
Signing time: Sun 19 Oct 2025 19:02:46 +0000
Manifest this update: Sun 19 Oct 2025 19:02:46 +0000
Manifest next update: Mon 20 Oct 2025 19:02:46 +0000
Files and hashes: 1: ILTLOyoWPc07Zu5uedVl9OoSM7g.roa (hash: rrMZtSbTq6ORLNPo8ZtTEklQIan0rtyS360P6d5+a8w=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: wGfWJADWCHHmMQaUnzpt39Cmxc1Hh6+k19wx6vyw9FI=)
3: pygSYveYfJ18y88VT99Py8VI8Ck.roa (hash: oWrjqJqkXBJagZmzia7A5lPs/2l0PT9MnEzwS9nzSRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:4e:e7:03:69:ca:14:22:57:96:45:c4:f0:d2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Oct 19 19:02:46 2025 GMT
Not After : Oct 20 19:02:46 2025 GMT
Subject: CN=264ce504ad36f916fbb07d52e66cd9cb0ba0a482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:cf:0f:c8:b0:57:c7:33:76:f5:ed:3a:c8:
1c:81:2e:45:fa:d9:cd:6b:da:f0:5b:e2:57:f5:25:
57:3b:a2:0c:89:1b:f9:09:a6:37:cf:18:3d:86:5f:
c1:53:08:f7:a2:85:e1:3a:8a:fd:ff:f3:11:35:17:
0d:df:e1:f7:fe:5a:c4:2f:c7:cf:45:62:b7:b8:e5:
09:23:e3:c3:e1:b4:22:30:8e:4b:52:46:14:53:06:
29:ab:4d:24:b9:2d:4b:38:a8:3d:72:73:5e:e8:5f:
9d:c5:8d:c6:aa:7f:90:6f:e2:53:45:94:b5:5e:a8:
d9:7c:f5:58:e3:28:88:d0:cf:8d:38:6e:65:47:54:
13:4f:73:42:36:d5:01:05:c6:40:d9:9f:c6:7d:eb:
b6:99:d8:6e:f5:ac:f7:fa:fb:90:f8:04:3d:55:29:
7f:4b:7f:78:40:5a:30:a5:a4:c4:0a:f5:3d:40:a5:
fe:92:c0:35:7e:17:25:69:52:2c:a9:66:2f:f1:af:
f9:02:00:b0:78:df:ec:b3:b2:b0:98:3b:8b:8e:7e:
08:fb:88:02:76:9f:97:9a:f2:d3:cb:ec:61:24:77:
38:76:74:2e:9a:f6:43:cc:7b:dd:f0:6f:d4:af:01:
c1:6b:52:9d:85:32:2e:55:94:b2:c3:b4:0a:22:00:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4C:E5:04:AD:36:F9:16:FB:B0:7D:52:E6:6C:D9:CB:0B:A0:A4:82
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4e:7a:89:b1:d2:fb:de:4d:d0:7f:23:44:a9:13:86:3d:25:
c4:da:0f:e8:4f:aa:59:ca:47:a9:18:b8:d8:3e:42:43:bd:32:
55:cb:1b:f7:0f:61:4b:8f:0b:f3:df:27:59:83:e3:29:d2:2e:
18:1f:67:56:f4:5b:9c:05:8c:f6:6f:2e:df:fe:47:f1:11:4b:
a6:c0:08:2d:57:59:04:25:22:b3:58:32:93:70:4f:dc:b1:c9:
43:e6:08:3a:40:50:1e:ed:be:52:31:9f:5e:0a:2b:89:a1:78:
ad:7a:7d:43:2c:f7:f1:f8:14:c6:1f:8c:c9:d7:87:0b:e5:8d:
88:a4:3b:aa:1b:5b:af:92:39:75:74:6d:34:c1:94:9e:34:be:
dd:a0:66:4e:a4:bb:95:71:88:9c:a2:32:a6:72:53:54:e4:41:
0d:55:45:29:ad:77:8c:4a:c0:64:00:da:3a:f9:20:b7:ea:0c:
c7:28:63:3c:4c:5b:e7:2d:74:06:ca:ed:4e:3e:6f:1f:b9:b2:
68:f8:b1:84:bf:17:92:38:13:c6:3d:15:d7:78:2d:cb:3d:0b:
00:1e:54:4d:87:d0:a0:08:52:a3:ce:ce:87:a1:60:d0:87:c1:
88:e4:e5:91:1e:3b:80:d8:8c:ec:61:d3:cc:dc:7d:39:ec:13:
de:e0:3c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:01 2025 by rpki-client