Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: CHK4PEadUfgeLNxFYmmvNnZCj9Wsv42aE41JXLNK2Do=
Subject key identifier: 55:9B:50:10:DA:B8:B8:AA:90:91:4F:D7:1C:E6:AD:6E:DA:B8:BA:0E
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 019A288BA2D1E0817D65743EC0D8A304C6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 02:00:31 +0000
Manifest this update: Tue 28 Oct 2025 02:00:31 +0000
Manifest next update: Wed 29 Oct 2025 02:00:31 +0000
Files and hashes: 1: 1cBDORiVvrRChAcdm2hc6y292d0.roa (hash: XIDQHNSLIfpf1kaFUtLQNCl28oalABx/0LdYZxGeMgk=)
2: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: Jrrz/lNwRLyt5Qpd89gHJjL9dhpQyL/57Rntfrp7iRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:a2:d1:e0:81:7d:65:74:3e:c0:d8:a3:04:c6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Oct 28 02:00:31 2025 GMT
Not After : Oct 29 02:00:31 2025 GMT
Subject: CN=559b5010dab8b8aa90914fd71ce6ad6edab8ba0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:01:23:34:3b:3d:ee:54:04:7b:6a:69:62:
67:63:bc:6b:bd:e8:a6:49:cd:ca:20:be:c5:d2:f0:
17:a7:88:e6:3f:19:23:7d:98:ff:48:9d:32:62:cb:
72:a5:bb:ef:84:6f:66:4f:f1:3e:d8:ea:2d:d1:8a:
b8:b8:a9:7e:5b:15:60:e6:c4:40:97:14:5a:97:d3:
f6:e8:66:e7:ac:6d:fe:0f:ca:48:b9:d3:7e:27:fe:
8e:f0:e6:e1:00:e1:e7:89:f7:78:80:12:8b:10:f5:
5b:d3:f7:1f:0d:fe:1d:b9:d8:0a:7e:05:95:41:e9:
39:59:78:75:6b:ea:1b:28:af:a2:b0:a1:8d:55:b1:
a5:0c:f8:3b:6c:bf:05:0d:ae:19:f0:95:4d:b0:d5:
27:a6:43:95:21:21:7f:0c:9e:6f:3a:ea:f0:6d:39:
fb:e9:4e:f1:a9:c9:c8:a5:37:27:eb:22:f5:80:9f:
77:e3:bb:6e:fb:99:e6:39:16:16:58:f9:b7:58:3d:
be:40:84:da:87:d5:0d:a2:77:bd:dd:bd:e9:89:ab:
2a:9f:a0:34:f2:bf:29:04:71:90:b7:b9:96:d3:16:
1e:5b:5a:fd:dc:9a:a5:ff:7c:a5:e9:4a:d1:bf:99:
71:db:71:79:ed:3d:46:b6:99:f5:a0:88:26:fc:6a:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9B:50:10:DA:B8:B8:AA:90:91:4F:D7:1C:E6:AD:6E:DA:B8:BA:0E
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cb:43:64:c5:3c:74:95:ee:21:a9:f4:e0:eb:b9:76:2f:d0:
16:ae:5b:ed:b7:18:ed:cd:08:f4:fa:a5:66:ea:0a:ec:12:94:
d5:9d:20:53:2e:37:a5:49:5e:9a:03:c7:e7:dc:fd:a8:3c:00:
aa:ed:e9:57:32:4d:c8:28:3e:7a:2f:49:fa:d9:27:2c:99:b8:
6d:23:af:34:97:4f:71:12:af:01:a7:16:2c:38:7e:4b:35:3e:
98:b4:db:cf:35:1e:03:f5:2b:44:5c:48:c7:8a:37:ba:e5:82:
78:8f:dc:6b:95:b7:d7:94:4e:81:23:84:4f:92:8f:17:f9:06:
b5:7c:af:00:12:f7:67:a3:b8:01:b7:12:a5:1a:5b:b5:24:0c:
29:87:25:5c:c5:43:5c:bd:ab:7e:e0:b6:e7:c6:ae:63:35:56:
b1:d6:aa:d4:68:eb:3d:fb:da:83:6f:a6:09:46:43:c4:f1:ab:
4a:ce:fb:f1:8d:1a:e2:56:a9:14:04:75:30:6b:ca:3c:90:b2:
27:3f:08:d0:07:38:28:da:6a:5b:dc:c0:a9:5d:e9:75:1b:20:
6b:82:ae:8e:ef:81:af:c2:c0:0e:84:6b:8d:ef:29:fe:57:48:
52:fd:6b:e4:b5:db:5f:b2:10:01:0b:2c:86:c9:be:dd:46:02:
49:7d:61:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:14:43 2025 by rpki-client