Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
File: DkTxM_OHWTqvor6rOIhJBPrJvRk.mft (raw, json)
Hash identifier: gkfkn+dbkW5ECZ2tiKB2J+ksPzlPb7EqiuL951idujY=
Subject key identifier: 29:06:DA:41:DA:94:77:6B:B9:9A:84:90:76:A8:5F:09:9D:BD:3A:29
Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
Certificate issuer: /CN=0e44f133f387593aafa2beab38884904fac9bd19
Certificate serial: 0199FCC654A08C58DB488CACC2D3DD18AD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
Manifest number: 036E
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: DkTxM_OHWTqvor6rOIhJBPrJvRk.crl (hash: 94IUVYvvHgbprNd9NC8kpujmYQCpnbMzfliJmLvdRp0=)
2: Wiv0DHdRF2zh8D5DY6J3_PLSV6Q.roa (hash: /xs5AGgsSlLOCnLD+1aaT+DfL+K36ivL9muQHygs7c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:54:a0:8c:58:db:48:8c:ac:c2:d3:dd:18:ad:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=2906da41da94776bb99a849076a85f099dbd3a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:79:67:da:60:7e:d4:49:c4:fa:08:1e:e2:
7e:09:a1:97:2e:f8:71:73:1e:69:a1:29:f7:2d:fc:
96:8d:69:1e:56:08:01:7c:57:f1:4f:91:79:c9:10:
f7:40:98:f8:c9:f4:2b:8e:c6:a7:1d:b2:88:86:ca:
d6:69:ff:de:1e:c8:80:b6:9d:67:e7:6d:b7:e5:56:
bf:8b:b8:a8:b5:41:cc:8d:3c:82:6e:be:ed:fa:b1:
9f:d2:6f:9d:db:48:2e:db:8b:c9:30:a5:d6:9c:cb:
a0:2e:b2:7c:cb:ea:23:36:c2:52:4c:19:ba:77:2d:
a8:f8:59:f7:97:87:7f:2c:e1:fe:41:29:72:10:a4:
54:fb:71:c1:dc:bf:e6:cc:19:d9:ce:b4:15:b9:f7:
dd:53:ad:70:88:b2:4b:a0:4e:0a:09:95:c8:38:5b:
06:7c:db:7d:76:f2:90:e7:d9:ad:dc:c2:cc:8b:91:
5d:da:e9:88:44:8e:41:24:6b:e6:fc:aa:67:59:00:
3e:8a:2f:6f:5a:9d:84:fb:a3:82:84:57:84:ca:3b:
a0:01:5e:f6:8a:e8:5a:de:99:93:dc:25:e6:83:fb:
4b:04:8c:68:36:19:eb:e0:be:49:47:a0:3a:89:10:
9b:d8:01:9b:99:77:a9:20:37:d1:cc:8f:73:86:ef:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:06:DA:41:DA:94:77:6B:B9:9A:84:90:76:A8:5F:09:9D:BD:3A:29
X509v3 Authority Key Identifier:
keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3c:89:06:cd:3d:ad:c2:9c:3c:1d:cf:3d:58:35:81:66:7c:
bf:c9:40:a3:15:05:34:49:20:3b:61:95:47:6b:30:12:0a:17:
bb:64:89:76:9f:9e:29:b1:cc:80:a9:a8:8d:0a:9c:0a:f9:3d:
14:35:65:66:fe:4d:d1:1a:88:8a:fe:bd:51:85:91:c0:84:0a:
72:83:82:f2:f5:08:b7:b9:45:1e:60:3f:54:48:23:b9:de:3b:
4d:42:72:39:ef:3d:dd:e2:43:8c:ab:73:73:f3:e2:64:e3:55:
8f:9e:a5:1a:d0:33:70:5f:42:74:80:f4:65:0c:d4:23:bf:4f:
b4:33:40:e1:67:72:66:5d:3c:37:c3:86:6e:e3:99:a2:e1:00:
1d:de:16:76:dd:6b:78:0e:ea:da:6e:d4:cc:04:19:bc:ae:24:
c6:27:e1:69:42:81:b8:45:f8:76:db:a0:b6:95:ee:a6:de:21:
59:5f:e0:69:b0:61:f0:2e:af:c0:b4:20:91:21:55:e3:28:4d:
08:03:63:19:9b:4c:c3:88:ec:59:21:03:a2:c0:61:cb:df:cb:
86:65:2c:05:30:7a:e9:d1:68:fb:69:e9:8b:a9:bd:9a:24:bf:
07:1c:ae:2c:a7:a1:a8:eb:ca:11:5f:49:f0:1c:c5:05:a6:52:
67:35:31:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:46:25 2025 by rpki-client