Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: Y36LYKYI5BKFLf+Jq6NnYDnGJH4J9Ooqdzj469yGJB8=
Subject key identifier: 75:2D:46:E9:C2:69:79:7D:80:03:62:C9:9B:FD:DA:83:3A:B6:23:6D
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 0199315ACE50E14AE4C08ECF788607CCB351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 02:00:58 +0000
Manifest this update: Wed 10 Sep 2025 02:00:58 +0000
Manifest next update: Thu 11 Sep 2025 02:00:58 +0000
Files and hashes: 1: 1cBDORiVvrRChAcdm2hc6y292d0.roa (hash: XIDQHNSLIfpf1kaFUtLQNCl28oalABx/0LdYZxGeMgk=)
2: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: vFAtWZdRHuFcqPdwoxPZgCkh1paGy33Qbz82pOXVU8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:ce:50:e1:4a:e4:c0:8e:cf:78:86:07:cc:b3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Sep 10 02:00:58 2025 GMT
Not After : Sep 11 02:00:58 2025 GMT
Subject: CN=752d46e9c269797d800362c99bfdda833ab6236d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:b6:8a:9b:4f:91:dd:1e:c9:1a:38:3b:c3:
f6:35:5b:79:f3:09:ce:2c:02:cd:b9:d0:cd:51:6f:
8f:fe:d7:7d:09:f3:c8:ac:a2:af:ed:5b:a0:2f:a8:
d5:bd:4d:e9:c2:0c:47:4f:d9:d8:40:7d:71:b5:99:
d5:d1:ad:03:ed:20:4c:45:e9:2f:a9:51:98:63:fb:
09:01:b8:d1:d0:20:c9:4e:eb:85:9c:f3:f1:86:bb:
ca:1e:15:a1:26:26:fc:c1:95:1b:18:62:01:c6:d8:
b2:8b:f6:8e:de:0d:c7:ee:45:d9:88:87:d9:57:9e:
ce:dd:9f:88:31:4c:9f:eb:c3:69:26:11:b2:a1:f2:
4e:d8:15:75:bd:f4:5c:32:08:ee:af:fd:85:c5:c8:
71:e2:b0:c3:c8:f8:a3:f2:80:1a:e3:bc:d0:66:e4:
3d:6f:32:6e:85:27:77:a3:cf:de:8e:16:aa:d9:c8:
e2:e6:73:3a:83:f7:9b:95:10:be:34:9b:e8:97:dd:
22:87:ee:de:8f:6b:68:1a:2b:a0:97:d8:2d:89:c4:
00:47:b0:7e:ae:a9:55:71:51:c8:cb:a9:7f:26:f0:
36:23:2a:eb:40:f2:d8:bb:a7:55:61:25:dc:7d:19:
e4:82:5e:b2:45:ba:a5:95:d0:44:9b:f6:dc:0c:ad:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2D:46:E9:C2:69:79:7D:80:03:62:C9:9B:FD:DA:83:3A:B6:23:6D
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7c:06:73:76:1b:e5:f9:65:67:73:b9:eb:7c:30:95:a3:47:
be:06:3a:8e:4e:c1:52:a7:64:c3:36:02:12:fc:e4:b5:76:b7:
e7:69:72:2a:02:53:18:a4:6c:d6:9f:e9:de:f8:b7:d5:9b:03:
79:c8:f8:02:18:08:87:e0:06:a3:0e:47:44:ba:73:5d:36:14:
8a:36:be:1c:d9:bd:4c:ba:32:9f:94:62:34:f2:2d:5a:61:36:
f8:c3:07:ee:ef:ae:63:c2:e3:68:ed:05:4e:34:70:d8:70:5e:
67:d6:73:ee:e8:ff:a6:af:b9:6c:18:f2:1c:08:3d:19:03:7f:
09:2d:bf:8d:14:44:bc:27:da:cd:04:02:1f:af:45:3c:7e:34:
81:78:fa:9e:77:e8:2a:1e:f1:41:11:a1:04:43:54:3b:47:3c:
39:7b:b7:b3:28:91:b6:26:10:9c:61:31:e8:a1:1d:5e:3b:75:
de:70:34:2e:80:e4:e8:13:e8:d6:c2:0d:e1:7e:ec:72:44:63:
dd:57:0e:5b:60:45:36:57:e4:33:fc:37:07:85:c2:02:68:c4:
6f:fa:d3:8e:e1:f3:15:41:69:9c:4d:67:61:41:ca:38:39:ee:
d5:12:3f:2f:62:9e:dc:2f:93:6f:eb:1e:c8:ee:5d:f8:5b:b8:
36:f7:75:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:13:04 2025 by rpki-client