Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: N+LxXbWpgAXjoTFEkaH82I/C1YrDcBaXIauwEUbc9kI=
Subject key identifier: A2:52:E5:A8:04:AC:AA:0D:97:E6:16:F4:9C:AE:23:25:D3:7A:8C:01
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 019847AE009249F72F66348DE47B4670F976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 17:00:42 +0000
Manifest this update: Sat 26 Jul 2025 17:00:42 +0000
Manifest next update: Sun 27 Jul 2025 17:00:42 +0000
Files and hashes: 1: 1cBDORiVvrRChAcdm2hc6y292d0.roa (hash: XIDQHNSLIfpf1kaFUtLQNCl28oalABx/0LdYZxGeMgk=)
2: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: OTC5aF/Hd6aplseKUNkuC/+DCnaAz8EZ4eYfiPdPBE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ae:00:92:49:f7:2f:66:34:8d:e4:7b:46:70:f9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Jul 26 17:00:42 2025 GMT
Not After : Jul 27 17:00:42 2025 GMT
Subject: CN=a252e5a804acaa0d97e616f49cae2325d37a8c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:38:60:56:01:94:94:09:8d:c7:8c:34:32:
fd:5d:b1:d4:6e:79:d3:4a:d4:f1:d8:b1:c4:3e:6a:
02:57:c1:93:b4:b6:d4:c4:43:07:8a:4e:48:ad:01:
95:84:3f:73:0e:51:98:bd:f0:50:4d:9b:d3:16:46:
ec:b5:33:4a:46:05:72:31:05:83:48:e1:53:b1:8a:
50:87:e6:9a:16:d8:24:fd:fb:35:bb:22:72:ef:84:
8c:20:e5:a1:7d:7c:ac:69:29:38:51:4c:bb:1c:ab:
af:a6:4d:5c:d0:0e:53:ac:ce:18:64:bf:83:47:1a:
a2:2c:a6:bd:bc:4a:25:45:40:79:d3:e7:d4:ed:e2:
6e:99:75:e2:ba:0f:6b:5c:20:0d:f8:58:2b:20:eb:
66:ed:3e:3b:54:c4:5c:73:37:5c:36:b5:2c:85:55:
79:ef:d0:4e:f8:5d:00:eb:60:42:60:01:59:9d:24:
dc:62:fd:a2:2c:d1:67:10:2c:f9:a4:79:a9:ad:5a:
52:3d:3c:8f:09:e7:ae:eb:2c:7e:c6:b1:33:2c:52:
db:49:6e:b8:48:4d:fa:a6:79:6c:f1:47:5e:24:1a:
3d:91:61:20:3b:7d:bf:49:21:86:93:1c:ba:79:1d:
70:b4:a3:4d:27:a8:fc:7b:a9:8b:ff:9e:26:b3:e2:
40:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:52:E5:A8:04:AC:AA:0D:97:E6:16:F4:9C:AE:23:25:D3:7A:8C:01
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c6:81:33:00:f7:18:fb:f2:ec:5a:28:b2:23:10:a6:30:a4:
23:5a:7b:0f:34:3c:ae:b4:4a:10:0c:b1:91:59:7b:a7:8c:e8:
d2:05:60:69:9c:fb:21:6f:ba:6d:c1:70:8d:9c:d8:aa:1c:11:
74:92:b6:3c:94:8a:62:ed:4f:96:8b:da:24:89:92:83:af:41:
52:70:2c:e0:62:66:aa:37:29:7b:86:96:40:a8:e1:e6:9e:0d:
e0:01:3d:ea:f8:70:c9:99:2c:f2:f6:43:c3:38:99:2e:67:a7:
a5:9b:7d:fc:24:dc:3e:81:8d:df:23:94:90:cb:46:be:78:a2:
6c:e8:b3:de:5d:d1:8c:4f:f3:53:fb:41:b0:be:6d:37:1a:36:
f1:b8:79:4a:31:71:a6:22:d2:23:fa:e6:6e:46:a6:f8:59:e0:
7e:2c:07:4c:07:a3:b0:c8:93:64:65:3c:12:1a:fa:12:83:a5:
36:db:da:06:69:76:03:22:4d:c9:1e:97:32:86:3f:10:64:3b:
f1:15:12:9c:57:32:5f:90:49:15:d7:d9:bb:90:0a:6d:2d:7e:
59:2d:e4:15:54:6a:77:57:79:47:bf:55:1f:4f:57:2f:b3:71:
46:05:ec:9b:3c:70:a5:bc:82:79:19:ad:90:ad:fa:ce:b0:ae:
9c:c2:f0:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrgCSSfcvZjSN5HtGcPl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYTRiYjY5YjNmNTY4MDUxNDBlZmFlMjQzZTRkZDRiMzZj
MGRkMWIwHhcNMjUwNzI2MTcwMDQyWhcNMjUwNzI3MTcwMDQyWjAzMTEwLwYDVQQD
EyhhMjUyZTVhODA0YWNhYTBkOTdlNjE2ZjQ5Y2FlMjMyNWQzN2E4YzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo44YFYBlJQJjceMNDL9XbHUbnnT
StTx2LHEPmoCV8GTtLbUxEMHik5IrQGVhD9zDlGYvfBQTZvTFkbstTNKRgVyMQWD
SOFTsYpQh+aaFtgk/fs1uyJy74SMIOWhfXysaSk4UUy7HKuvpk1c0A5TrM4YZL+D
RxqiLKa9vEolRUB50+fU7eJumXXiug9rXCAN+FgrIOtm7T47VMRcczdcNrUshVV5
79BO+F0A62BCYAFZnSTcYv2iLNFnECz5pHmprVpSPTyPCeeu6yx+xrEzLFLbSW64
SE36pnls8UdeJBo9kWEgO32/SSGGkxy6eR1wtKNNJ6j8e6mL/54ms+JADQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJS5agErKoNl+YW9JyuIyXTeowBMB8GA1UdIwQY
MBaAFAyku2mz9WgFFA764kPk3Us2wN0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQt
ZDdmNDVlMGE3NzM2LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQtZDdmNDVlMGE3NzM2
LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsaBMwD3
GPvy7FoosiMQpjCkI1p7DzQ8rrRKEAyxkVl7p4zo0gVgaZz7IW+6bcFwjZzYqhwR
dJK2PJSKYu1PlovaJImSg69BUnAs4GJmqjcpe4aWQKjh5p4N4AE96vhwyZks8vZD
wziZLmenpZt9/CTcPoGN3yOUkMtGvniibOiz3l3RjE/zU/tBsL5tNxo28bh5SjFx
piLSI/rmbkam+FngfiwHTAejsMiTZGU8Ehr6EoOlNtvaBml2AyJNyR6XMoY/EGQ7
8RUSnFcyX5BJFdfZu5AKbS1+WS3kFVRqd1d5R79VH09XL7NxRgXsmzxwpbyCeRmt
kK36zrCunMLwJA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:03:59 2025 by rpki-client