Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: rle30TzGwIhaSGEnn/kmMjW6Fj+ftxWf3Vb/6voByVA=
Subject key identifier: 5A:81:71:C4:1E:59:76:48:D6:2E:5C:00:C9:C2:2B:89:2E:AB:4A:81
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 0198C6EE50FB3B3DADA34928F395CE9C63FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0C16
Signing time: Wed 20 Aug 2025 10:02:43 +0000
Manifest this update: Wed 20 Aug 2025 10:02:43 +0000
Manifest next update: Thu 21 Aug 2025 10:02:43 +0000
Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=)
2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: hIOhbwLqJCJODZ1zzasptfmL0E80Lci5VQa/jx5d8WE=)
3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 10:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ee:50:fb:3b:3d:ad:a3:49:28:f3:95:ce:9c:63:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Aug 20 10:02:43 2025 GMT
Not After : Aug 21 10:02:43 2025 GMT
Subject: CN=5a8171c41e597648d62e5c00c9c22b892eab4a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:7b:6b:3e:74:03:9c:27:d4:d7:12:f9:8a:
1b:18:39:22:1e:66:aa:a0:f5:ac:c2:12:3c:93:5c:
f8:e8:5a:67:72:59:90:fd:01:40:52:4a:00:b5:65:
cd:3e:ba:42:21:9a:7a:e0:ff:12:0c:be:6a:95:c0:
f2:17:c3:14:bf:e2:33:43:0e:1a:93:e5:6a:57:76:
f9:b4:dc:2f:ba:47:55:eb:07:b1:95:dc:a7:ff:64:
e3:d4:0b:9e:8f:bb:2d:ca:c5:57:cf:4c:8f:b1:61:
3d:5f:c4:43:22:7d:a3:1f:53:a8:dd:e8:dc:e5:13:
b5:f4:fa:39:06:64:97:c8:c4:4c:42:ce:d9:ac:0b:
89:71:6a:0f:06:f9:c7:a4:ed:34:a3:a1:3c:b3:34:
a1:e7:c7:4e:7d:c3:84:3f:7f:3b:cc:15:37:06:ab:
22:ad:84:2f:b0:30:3e:1f:f5:5f:16:f4:21:1b:19:
74:74:83:6c:08:f5:f3:f1:a8:1f:02:16:87:ed:51:
18:12:88:1a:5d:10:cf:4d:46:97:27:4c:c1:a2:27:
d4:63:1c:02:43:bc:34:3b:40:ec:f9:a0:3b:02:cd:
96:75:8f:65:6f:e9:f2:06:1a:8b:60:ec:5c:c1:31:
8d:39:15:1c:ba:71:19:93:61:c3:97:75:7f:78:32:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:71:C4:1E:59:76:48:D6:2E:5C:00:C9:C2:2B:89:2E:AB:4A:81
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:63:ec:15:c1:6c:9e:06:84:43:9c:21:76:3a:ab:97:a2:ac:
05:dd:84:85:26:4d:b0:92:cb:82:82:cd:75:1c:aa:5b:47:35:
39:d8:57:50:96:f3:ed:79:e6:f7:eb:e4:19:7a:8e:f6:65:47:
40:2e:31:34:c8:d5:38:f4:26:25:e4:73:a6:18:7b:70:ec:8c:
95:01:5d:5c:01:20:9a:d5:97:5a:e6:4d:0f:b4:60:26:e8:17:
c5:72:66:ce:a9:e6:3e:4b:c6:25:65:62:25:59:80:c6:f4:f0:
3b:00:16:57:f6:8e:6a:48:d4:16:5a:66:f7:7d:44:0d:f1:a2:
ae:52:c4:54:b5:80:7a:79:b5:25:43:a6:8f:ee:fc:51:bc:db:
0e:be:85:b8:a8:4c:8f:f7:81:08:84:59:1a:ce:d7:e2:45:7f:
3a:8c:ad:3b:d3:d8:a5:4e:64:40:d9:51:34:bf:f8:d6:7a:a2:
66:90:d9:49:0a:2d:5b:8c:91:a2:7c:9d:a4:b0:6f:5c:95:65:
08:9f:15:a9:44:af:6e:07:4e:27:56:7c:01:ba:80:ab:84:4b:
52:b9:c3:4e:47:e3:fc:1b:7b:e1:37:90:4b:8f:8a:8a:d3:36:
1b:ae:e0:db:13:b7:82:5e:6e:60:c1:ff:29:73:e6:01:a1:b5:
e4:c4:b5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:25:05 2025 by rpki-client