Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: 60ETxVuq22taiEAz2+05OYMVbk0XXm4tBZyZAqJFmdQ=
Subject key identifier: 9B:5C:E0:1E:36:B8:3D:9A:59:2F:D8:9F:6D:0D:64:27:F7:37:CD:23
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 0197B8213C6790128D0287C6D2FFAD58835E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:01:15 +0000
Manifest this update: Sat 28 Jun 2025 20:01:15 +0000
Manifest next update: Sun 29 Jun 2025 20:01:15 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: J7Tjgrr+306m/4s2ya7Dm1hOrGgUs8IBg6WimQfqS/o=)
2: OsEqbh-MgAhZY6dEETKTLoVhiek.roa (hash: 8l+J0cXRIwFphYGIY8ShZlRzu2XOdk8YK7YXmH85akQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3c:67:90:12:8d:02:87:c6:d2:ff:ad:58:83:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: Jun 28 20:01:15 2025 GMT
Not After : Jun 29 20:01:15 2025 GMT
Subject: CN=9b5ce01e36b83d9a592fd89f6d0d6427f737cd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3c:58:b0:62:d2:1e:cb:1e:99:b8:9a:b1:56:
51:9e:29:24:e9:65:78:b0:d5:50:5a:a1:11:9b:db:
60:31:e7:7f:84:fc:c8:65:b2:1e:c5:76:35:cf:e6:
99:5f:0d:db:d4:8e:b1:3f:3b:f7:bb:26:81:c6:42:
bb:6c:06:ba:61:fd:be:af:1d:d2:21:22:67:d8:7e:
cb:c1:07:a2:f1:59:30:20:17:e7:db:cf:86:e5:5b:
30:2b:e9:61:d2:14:93:f2:c7:f7:1e:83:7b:44:a2:
0f:c5:f9:14:15:32:26:e8:8c:6a:69:d5:65:67:49:
05:ff:d5:f7:e0:4d:df:36:cf:f1:d5:d6:66:60:95:
5e:32:7f:79:65:17:76:f5:38:21:2f:9a:06:fb:19:
7d:9c:4e:52:f2:aa:f1:41:b0:a1:b6:77:e0:d1:6b:
e5:eb:90:03:69:23:73:ff:8f:34:7a:5b:26:f0:50:
75:fc:c5:0e:e0:25:9c:0a:98:70:0e:8c:88:ae:a8:
89:03:b5:2b:85:bd:6b:a0:73:18:df:82:04:ed:d8:
88:b3:d8:04:dc:f7:56:31:7d:70:7d:c3:18:28:d8:
f2:aa:20:64:d1:f0:17:f0:5a:b2:bd:07:1f:12:a8:
16:f4:e3:24:8b:54:ef:ae:98:4a:9a:3f:54:56:c4:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:E0:1E:36:B8:3D:9A:59:2F:D8:9F:6D:0D:64:27:F7:37:CD:23
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:90:a1:a3:cd:b6:84:f7:1c:b3:4f:33:23:4f:96:f9:49:80:
6d:5a:e3:fc:2e:7d:c0:df:09:37:c2:50:de:70:48:cf:cf:31:
27:f4:3b:b2:1b:bf:c5:9d:d8:f3:fa:d0:fc:aa:33:3b:20:6a:
79:72:64:cc:9b:57:45:21:01:45:95:d1:c2:70:ad:16:47:00:
58:f9:dc:cc:75:82:a4:d5:9e:bf:38:b5:31:e8:6d:25:5a:9a:
24:54:48:e1:f4:0d:3e:ff:46:ba:e4:88:67:61:24:5a:be:92:
8c:d9:cd:ca:22:fa:bf:49:71:b9:11:4d:c2:82:70:5c:07:b4:
d0:e4:76:a1:4c:7b:d4:a5:be:a7:68:57:9c:c7:99:f9:d8:18:
bc:23:4e:f6:e0:49:a2:3f:23:6d:4a:fa:f1:72:ba:7f:6e:68:
65:76:82:25:71:be:30:f3:01:11:c6:7c:f3:2f:0e:74:e3:2c:
c9:01:1a:98:b6:2a:68:36:c0:72:48:fc:3b:9d:89:dc:f3:56:
35:96:51:4c:f8:e1:e3:f8:f0:2a:a2:ff:f0:bd:4c:b3:0c:38:
8f:84:8a:0e:ed:a9:69:f6:c7:42:75:c1:3e:d6:37:c2:34:0e:
7f:8e:8d:c8:4d:07:63:e0:5f:7d:d8:75:c3:15:36:76:fa:c8:
d2:cc:ac:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:27 2025 by rpki-client