Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier: SCHcJ41hbhchPHTgSBVp4Gq1eGExq1eQpTzNY2G7JYs=
Subject key identifier: 41:4C:72:A6:9A:56:68:7D:06:1B:79:9C:02:D0:EB:5A:98:02:8A:0B
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial: 0199FC58E3406EAB386A92A3E2C93B23A5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number: 13F9
Signing time: Sun 19 Oct 2025 12:01:47 +0000
Manifest this update: Sun 19 Oct 2025 12:01:47 +0000
Manifest next update: Mon 20 Oct 2025 12:01:47 +0000
Files and hashes: 1: 8JHdroSmFbW7TogZWDAIS298pfo.roa (hash: goVtVxuEC9QAmF+Kz0vzUzxl+/V8u83qUjrsL0jlHNw=)
2: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: S6ruAWN24THkEEZjcFHVG7dyGRstPM4/yOLvYYeD9Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e3:40:6e:ab:38:6a:92:a3:e2:c9:3b:23:a5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Validity
Not Before: Oct 19 12:01:47 2025 GMT
Not After : Oct 20 12:01:47 2025 GMT
Subject: CN=414c72a69a56687d061b799c02d0eb5a98028a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:c6:b5:bf:88:b6:37:a3:29:95:e7:25:dd:
72:e0:34:71:c1:9d:1b:5b:a7:45:7c:ee:a6:9c:58:
13:24:e2:e7:4a:a2:18:26:2f:f4:6c:01:84:6e:00:
c4:9b:39:2a:7d:b5:4a:f0:bc:fd:fa:27:16:07:83:
31:4d:b6:84:12:d3:de:eb:cf:07:0f:c0:33:2c:e7:
6f:35:3d:56:5d:79:df:6d:4d:b7:d4:c4:18:a2:e3:
5b:f0:78:8f:38:7f:99:0a:78:c0:a0:8c:db:29:1f:
ce:4f:7b:d8:c5:20:29:6e:3a:f2:7b:cc:09:2f:f4:
cf:f5:65:48:46:eb:69:d7:0d:19:86:8c:71:e8:97:
0e:61:5c:a1:06:6c:e8:46:f3:65:33:75:fa:9f:3b:
93:8d:c6:83:2f:3a:76:1a:33:55:fb:81:64:5c:70:
71:bc:12:69:fb:e0:f2:40:46:06:b6:53:b1:ed:59:
c2:06:ef:7d:01:80:46:42:be:02:9d:ed:c2:be:ba:
b7:de:55:03:c3:1e:a4:c9:d6:93:1d:ea:33:96:5f:
25:f1:07:04:45:f3:e1:f2:78:2d:ad:b6:54:fe:06:
c8:99:5e:e8:20:46:f8:da:1c:6a:bc:83:9c:06:3f:
75:4d:00:47:b6:49:bd:be:63:f5:fb:0c:87:af:1d:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4C:72:A6:9A:56:68:7D:06:1B:79:9C:02:D0:EB:5A:98:02:8A:0B
X509v3 Authority Key Identifier:
keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b8:47:ec:4b:53:a6:a5:10:50:47:ae:1e:ba:44:bb:72:de:
51:ff:4f:67:7f:a2:fb:4e:f1:bf:04:aa:17:af:72:ca:54:a4:
5a:f8:a5:c3:6e:b1:18:22:6c:63:5f:12:75:66:7a:b9:d9:44:
df:81:1d:a7:b8:22:f3:f2:20:b4:0b:f6:2b:c4:39:71:1b:3f:
60:cc:17:f9:a9:3f:24:b9:8f:7a:aa:7d:7d:25:34:b0:c8:69:
93:3a:28:85:06:16:4a:88:52:d9:96:a7:46:d3:7b:bd:f0:83:
21:6e:a2:bb:89:3c:dc:51:c2:29:90:5e:05:57:a5:f0:d9:2f:
6f:32:a4:5d:af:5c:fc:ea:bd:b0:06:63:9e:c0:bd:f6:84:2b:
11:24:9c:76:5c:e7:32:b4:b3:80:30:d9:13:ce:fc:42:53:a8:
7f:13:bc:29:cb:3e:2a:c9:4d:34:39:4c:e2:cc:3b:95:29:67:
cc:89:95:ef:3a:4a:8c:c2:3f:da:3e:8a:00:83:f5:39:f3:5d:
7a:4d:42:94:75:cc:c3:4b:53:ee:e1:14:99:f0:10:29:cc:fa:
6e:4d:ef:8c:25:83:3b:93:d7:94:38:c5:81:ac:81:cf:a8:54:
ce:8f:71:03:95:bd:4c:3f:6d:e3:a9:e4:0d:78:07:a6:36:c6:
6d:cb:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:44 2025 by rpki-client