Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
File: DkGjlotidBs200i-DSyRxdSxM6I.mft (raw, json)
Hash identifier: Nl7HCGacxCRyUm0c5QR9MGEebu//fUJdq+FCQWwJDGI=
Subject key identifier: 52:AA:07:DC:CD:73:26:E9:E8:B9:B2:21:C1:82:2A:C7:4D:4F:E7:47
Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
Certificate issuer: /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Certificate serial: 019922C375BF9943F02A1A5A197BCFE335BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 06:00:58 +0000
Manifest this update: Sun 07 Sep 2025 06:00:58 +0000
Manifest next update: Mon 08 Sep 2025 06:00:58 +0000
Files and hashes: 1: DkGjlotidBs200i-DSyRxdSxM6I.crl (hash: d5PFxfWhUndlJ896YzeAW3N8jdJnan7qPRGgEyagDkA=)
2: nHnuu4F-Ic_WUkHgNlM9Go5lrwU.roa (hash: 5dkmrGwUAjAB3N+7M+2yibV5BDpF46oezVix+Yio7q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:75:bf:99:43:f0:2a:1a:5a:19:7b:cf:e3:35:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Validity
Not Before: Sep 7 06:00:58 2025 GMT
Not After : Sep 8 06:00:58 2025 GMT
Subject: CN=52aa07dccd7326e9e8b9b221c1822ac74d4fe747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:92:b4:78:8c:a0:52:fe:43:41:fd:3b:90:
98:41:ba:bd:08:47:f7:36:9e:bb:d2:0a:94:a3:44:
2d:98:3e:1f:8a:71:12:02:dc:cc:f2:33:40:90:4d:
86:0f:e9:4b:f5:c0:ec:ab:af:f3:a9:69:43:79:eb:
8f:f5:a5:8d:16:99:db:4e:9b:aa:1e:53:c2:20:05:
63:e8:03:fc:58:e2:2b:18:05:49:c4:f7:34:b6:de:
b1:08:66:41:02:56:32:f6:e2:1e:d7:98:36:44:f5:
38:8d:f4:d0:2d:f3:78:a5:f5:c5:bf:28:9d:e8:3d:
2a:cb:45:28:a4:99:d5:52:01:a6:23:ee:20:f8:26:
6e:90:49:e3:32:11:8a:9c:2d:48:38:95:23:65:d0:
a3:4c:e8:00:40:4e:63:d4:76:f5:6a:b0:3b:11:4c:
3a:08:0f:ab:88:b4:a9:9d:83:78:4f:81:99:a2:53:
95:45:56:07:32:a3:ab:b1:47:92:56:a8:25:e3:27:
65:96:df:32:de:bd:81:39:31:bb:a2:db:52:a2:5b:
70:cf:9b:05:fb:18:c5:ce:b5:aa:a6:27:4f:09:70:
3b:1f:64:42:1b:55:0a:aa:f7:cb:1f:73:9e:3f:5f:
9c:b1:fd:2f:cf:68:c4:84:dc:19:a6:a1:c6:ec:3c:
73:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:07:DC:CD:73:26:E9:E8:B9:B2:21:C1:82:2A:C7:4D:4F:E7:47
X509v3 Authority Key Identifier:
keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f5:c3:7e:ac:b9:cd:20:4f:19:f6:5b:3e:c7:98:2e:08:d9:
8a:1b:07:0f:4c:8d:08:54:75:e2:cc:f5:95:e0:e2:cd:ed:75:
33:8a:56:be:ca:fd:cf:d8:51:48:8e:81:0b:6e:6a:d1:50:12:
86:85:bf:f1:44:e0:5d:7a:6d:e2:59:c6:d2:ba:ed:3d:0c:ca:
dd:b4:dd:2c:0f:bc:9f:87:66:40:a0:0a:fc:41:cb:b8:74:c7:
03:54:58:a5:b7:36:a1:92:4a:2d:ec:32:0c:39:5f:be:87:48:
9b:36:1a:70:a5:cf:18:67:96:1e:84:6b:73:d0:87:24:bd:a9:
7f:9e:8a:c8:1b:ea:f9:a5:1a:7e:8f:6a:19:e6:50:87:27:d5:
42:10:21:0f:70:ed:ec:0b:cf:fd:db:bf:20:9f:e5:88:cc:21:
f4:98:aa:1f:70:da:4e:71:9d:d9:d9:27:e1:29:91:62:ab:85:
97:70:ff:7a:16:e1:c9:e3:85:f6:93:2a:ea:7f:a8:99:54:36:
ed:c5:ac:70:e2:08:cb:13:13:82:7f:9a:bc:3d:d0:8c:7d:f0:
8e:7b:f3:6e:30:08:ca:7d:69:7e:96:ba:ec:64:4d:0c:16:e6:
bf:9c:b5:52:74:df:a4:93:a8:48:97:00:30:77:67:5e:91:d4:
15:9f:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:18 2025 by rpki-client