Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
File: dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json)
Hash identifier: gABwt0aDHV9nT7NVMlzfKXdT+ARfSoqBt4IHfDYvdh0=
Subject key identifier: 01:62:2C:97:C1:5F:9B:BD:83:F4:49:6C:31:5B:07:0C:47:28:59:9A
Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Certificate serial: 0199221F17AD396C0099A1E3E85E1808B722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
Manifest number: 12C4
Signing time: Sun 07 Sep 2025 03:01:26 +0000
Manifest this update: Sun 07 Sep 2025 03:01:26 +0000
Manifest next update: Mon 08 Sep 2025 03:01:26 +0000
Files and hashes: 1: 6S1fN0Slf3Y95btQEfpy__y_tiw.roa (hash: 5FWi2gr8yiM3yt2DtW3oiI0p1G9KyA1KVfzD3/JWlJI=)
2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: 4YQXIOzg6ypxgsXiOxoQj9SXPJLkZC10PBmUWZez62k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:17:ad:39:6c:00:99:a1:e3:e8:5e:18:08:b7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Validity
Not Before: Sep 7 03:01:26 2025 GMT
Not After : Sep 8 03:01:26 2025 GMT
Subject: CN=01622c97c15f9bbd83f4496c315b070c4728599a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:f6:a6:7a:36:c6:21:10:7d:36:99:2a:ae:
70:32:2e:a0:74:95:2c:ac:20:13:d5:fa:5f:52:13:
9f:f7:15:c4:28:39:7d:9b:37:57:9b:51:0b:b1:98:
59:d0:57:85:ff:a4:4f:ba:65:ad:7e:2c:94:6e:2e:
80:4a:a4:58:5d:4c:7c:3f:65:6a:ef:d7:8e:ab:06:
3a:fd:ad:85:41:f4:e5:9a:e0:34:0b:80:99:59:88:
06:c7:30:a5:e3:3c:3d:66:19:38:4d:3b:5f:cb:2b:
54:11:05:96:99:a1:2b:85:bc:a4:8d:72:8f:b1:33:
de:15:30:ad:23:b6:83:e4:0b:70:cd:12:b7:33:bd:
af:4a:7c:10:00:7a:f0:7a:18:d5:87:8e:c1:eb:f7:
0e:5a:05:bb:90:48:e3:e4:25:de:5a:3b:bb:44:55:
dd:1b:15:1f:19:f2:b0:54:c0:4b:eb:6e:40:2d:b5:
e3:14:2a:81:36:90:e2:0e:df:6c:43:d3:fb:84:74:
ba:52:0f:c9:2a:3d:5d:6d:ac:4d:59:a2:d1:eb:8c:
69:0c:b2:f5:cf:d7:f5:98:c2:f5:6f:12:71:20:dc:
7b:9e:cd:2a:4b:14:93:68:9a:44:64:6d:25:8d:99:
0f:3d:40:54:cb:c0:e6:23:e2:36:d1:fc:db:84:71:
b1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:62:2C:97:C1:5F:9B:BD:83:F4:49:6C:31:5B:07:0C:47:28:59:9A
X509v3 Authority Key Identifier:
keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d4:98:fe:fd:0b:f5:bd:fe:7d:33:59:d3:f2:65:15:63:80:
53:9f:51:8e:03:94:ce:b8:ad:85:45:03:7c:3f:63:10:7f:77:
c6:f2:83:16:7e:aa:82:d0:3c:5c:19:7b:1d:74:df:24:e5:19:
4e:1b:c7:7c:31:2b:03:a9:3b:a5:01:79:7c:a6:62:8e:e5:ae:
28:ee:da:d1:48:77:22:76:12:8f:c8:2c:0f:8e:b5:ba:55:ad:
8d:c0:e5:ed:22:ed:17:4c:b6:9f:b1:df:05:86:6c:2b:ef:33:
fc:d8:48:61:70:ca:46:29:1d:82:73:2d:b2:0f:d2:0d:64:88:
0a:e1:0a:15:e0:32:5f:7a:64:8f:a5:54:b0:0b:c5:86:a9:4e:
af:0f:f1:17:e9:66:a1:d7:d7:b0:0e:d2:16:54:07:a2:4d:ee:
f2:8d:23:f0:11:74:01:c1:a6:50:16:d7:d8:49:27:c3:a2:05:
0a:fe:f2:d9:62:2d:0f:47:67:6e:51:61:7a:30:1a:4d:b2:d6:
6c:42:0b:f7:b3:94:7a:6d:30:d6:60:e8:23:e3:3f:b6:6c:2a:
0b:9a:55:1b:84:55:5e:ec:70:26:24:8d:fb:3d:12:f1:fc:67:
ac:7a:8f:9f:0c:8c:ff:5e:cf:85:06:0e:e4:46:4f:3e:26:a9:
2f:1c:81:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:25 2025 by rpki-client