Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: ZM5VXyx4p1FroduflaJKT17ly2sSpSZoetFPlvF74I8=
Subject key identifier: C2:B7:8C:49:DF:E4:2E:4E:BE:44:68:0F:3E:46:59:A2:56:4B:8D:C2
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 0199FD6B63AEB0D3E528DC95129A40C3B66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:37 +0000
Manifest this update: Sun 19 Oct 2025 17:01:37 +0000
Manifest next update: Mon 20 Oct 2025 17:01:37 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: CLMZhIgg2WaSX7AUyWoDlbFMQrE2icxsaAGV/w3KR3Y=)
2: OsEqbh-MgAhZY6dEETKTLoVhiek.roa (hash: 8l+J0cXRIwFphYGIY8ShZlRzu2XOdk8YK7YXmH85akQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:63:ae:b0:d3:e5:28:dc:95:12:9a:40:c3:b6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: Oct 19 17:01:37 2025 GMT
Not After : Oct 20 17:01:37 2025 GMT
Subject: CN=c2b78c49dfe42e4ebe44680f3e4659a2564b8dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8e:7f:ec:f7:59:6e:10:25:1a:92:b4:c7:ed:
56:b0:69:f1:14:55:a9:03:18:b5:d7:99:ae:33:d0:
b1:44:98:22:40:7a:d4:14:75:94:29:f6:4e:05:66:
76:7a:43:a7:d4:04:c2:94:9a:f1:70:94:68:95:c1:
c2:bf:65:6b:ff:a2:d0:a4:02:fc:81:57:af:ec:95:
bb:67:09:ad:bd:fc:2e:bf:f9:27:02:37:1b:77:6d:
b4:6e:13:fe:63:81:4c:40:79:c7:d7:44:78:79:f8:
80:f4:ab:b4:ca:e3:32:8e:da:75:aa:96:a8:8b:dc:
2d:93:f7:ce:9a:cb:93:95:e4:05:63:4b:dc:79:56:
c7:bb:46:11:48:70:3d:13:21:2c:e5:af:c6:4e:44:
2d:ae:6a:75:80:85:65:db:83:ef:58:40:d0:3e:8d:
a4:01:31:66:15:80:95:ca:44:e7:c1:8e:eb:2a:71:
59:23:1b:ae:fd:89:43:ea:5c:b0:9e:9b:31:62:f7:
3c:6a:91:64:08:06:03:d5:81:19:de:98:72:ff:20:
5a:c7:8f:00:cb:f5:64:e6:4a:ac:7f:37:c8:f9:f3:
e5:61:c5:00:f8:75:b4:ba:93:73:c2:30:8e:a3:4b:
a2:00:41:7b:f5:17:b9:79:32:b1:1c:c6:4b:b9:dd:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B7:8C:49:DF:E4:2E:4E:BE:44:68:0F:3E:46:59:A2:56:4B:8D:C2
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:6b:14:e8:df:90:9e:5c:f8:b3:6b:3f:0f:d7:36:6c:b6:57:
2e:18:c0:e4:45:0d:68:02:a7:ed:58:a8:d0:26:d8:38:04:aa:
e8:d5:3c:ff:7f:c2:a6:a0:3f:04:10:40:12:68:13:a4:53:c8:
9c:b0:b9:fe:9d:ef:ff:de:96:ee:35:78:b0:a6:16:17:3b:1c:
57:d1:6e:a3:5e:42:83:6b:40:69:67:79:d3:11:f7:ba:db:b7:
e9:5d:92:46:74:9a:8d:d7:a7:ec:70:16:e2:eb:cb:a0:ff:79:
bd:49:61:c8:0b:70:0d:9e:8b:b4:39:47:07:2b:fa:38:c6:19:
88:13:5d:ff:01:a4:67:75:45:db:a9:49:08:64:f4:b4:ec:02:
02:c9:95:b2:27:8f:c2:50:98:e1:2b:51:a9:f4:fe:c5:b1:8c:
75:57:0c:ae:92:de:be:c5:55:47:5a:51:16:49:02:1d:0c:e6:
5a:aa:ab:a5:e7:f2:f4:d0:bd:c2:01:48:07:c0:92:37:15:e0:
6d:2d:08:6c:2b:7f:bd:c5:b4:0a:d7:e3:08:91:33:35:0a:a4:
dc:05:00:a3:3f:40:4a:12:62:00:73:a8:be:e3:e2:b4:52:b1:
57:f9:4a:0e:91:eb:14:70:ae:a0:31:7e:c2:75:1f:14:8a:2c:
6e:ff:ee:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:10 2025 by rpki-client