Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: 6hVsARkP+mgOxIWujGF1bozqjrglfLjTHjDNu9V3PVQ=
Subject key identifier: 32:06:55:97:7C:84:D6:EF:33:3D:9A:6D:BC:E2:45:BE:E1:93:E3:94
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 0199C5D88BFB9403698EEB80CE1DF522226A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0C9A
Signing time: Wed 08 Oct 2025 22:02:07 +0000
Manifest this update: Wed 08 Oct 2025 22:02:07 +0000
Manifest next update: Thu 09 Oct 2025 22:02:07 +0000
Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=)
2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: Ly8JkEcP1hhV5JRBMEM6UmeUg2M+hszCSbuhYNJNZOI=)
3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d8:8b:fb:94:03:69:8e:eb:80:ce:1d:f5:22:22:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Oct 8 22:02:07 2025 GMT
Not After : Oct 9 22:02:07 2025 GMT
Subject: CN=320655977c84d6ef333d9a6dbce245bee193e394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:2c:cc:8f:25:48:4a:80:f3:18:bf:1a:c6:
26:20:fe:ef:dc:c4:d1:85:e0:b8:81:5d:0c:8c:86:
98:99:5e:5c:ba:e5:0a:86:3d:72:c7:8e:8e:93:0d:
76:86:5b:e3:c8:9c:8e:6d:2f:9d:98:d9:5e:da:3c:
8b:85:8c:93:26:60:f7:80:01:c8:29:7d:8b:ae:cb:
38:d2:90:50:ce:68:b3:70:d2:18:13:c6:97:fa:d6:
e6:45:b5:0a:9f:99:ce:08:cc:40:0c:07:b9:1f:1b:
5d:b5:63:d1:f7:5c:60:0b:93:fa:15:c7:fd:50:38:
d3:08:50:df:e0:67:e7:76:6e:5e:8e:3f:1e:e0:68:
38:11:1c:1b:df:cd:ff:00:6e:d3:94:54:63:ae:c8:
07:d4:80:18:d4:ea:69:2f:e0:b9:17:56:a6:62:0d:
9b:da:9b:ea:94:3f:f7:0a:a5:a9:ad:29:bb:1a:87:
35:71:d4:0e:7a:f7:8a:ec:4e:3c:ae:7f:f7:59:d3:
1f:12:d1:03:85:e5:37:93:62:5a:85:b6:09:e2:5d:
b5:37:35:ba:f3:2f:b7:4f:5c:08:dc:64:95:dc:0b:
13:24:87:53:47:4c:bd:fb:5b:94:29:7b:4d:fb:1e:
4f:68:1d:d4:30:75:d3:99:b8:fd:22:5e:10:87:75:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:06:55:97:7C:84:D6:EF:33:3D:9A:6D:BC:E2:45:BE:E1:93:E3:94
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:95:22:70:45:44:92:9c:c3:30:82:c6:59:df:7b:83:70:2f:
21:ee:f0:67:26:98:93:86:e7:75:19:ea:60:1c:e4:13:4b:26:
f3:40:51:79:b3:0f:38:68:62:df:ab:05:f8:03:2a:6d:5b:eb:
e0:28:b9:7a:88:42:57:6a:54:40:a7:05:a8:ee:6d:eb:9f:42:
c8:70:dc:fe:11:f4:95:de:e6:78:ea:86:ed:cb:7e:a1:02:7d:
29:a5:e9:c9:9a:31:3e:7b:0c:2a:fe:08:c2:8b:dc:c1:03:4d:
75:1b:a2:f9:09:16:87:f6:ee:cf:cb:9b:c7:f0:79:d3:ab:61:
ef:ce:ab:53:3b:96:39:18:78:72:1a:c9:a4:ab:93:95:cf:6f:
7d:74:2a:5d:81:ad:59:be:6f:7e:a9:64:bd:43:cd:7f:6a:18:
08:62:4f:a8:ea:b1:6c:f0:0e:f1:e1:2f:b4:86:b6:31:b0:85:
bd:38:0e:61:d7:0d:f5:82:51:c3:2d:f9:a2:31:ce:cb:be:0d:
d8:ff:5d:d0:56:4e:45:87:83:c6:2d:b7:f7:ce:27:d6:6e:9d:
d9:13:21:2c:2d:b9:1b:28:79:db:55:6d:cd:aa:b4:d9:8c:6d:
04:2f:57:f3:f1:e9:77:9b:74:26:22:96:e5:98:76:6b:17:3b:
ec:30:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:31:52 2025 by rpki-client