Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
File: dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json)
Hash identifier: +B9KFnPgFWpAB8dnWkQM6r+pozhEZExN9HHRQjdS9io=
Subject key identifier: 7D:5A:17:77:AB:7B:D0:23:BB:52:C5:42:9E:48:5D:FB:9D:F6:B8:AF
Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Certificate serial: 019A22F7C885A1E241326429520A4E0D7136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
Manifest number: 1349
Signing time: Mon 27 Oct 2025 00:00:55 +0000
Manifest this update: Mon 27 Oct 2025 00:00:55 +0000
Manifest next update: Tue 28 Oct 2025 00:00:55 +0000
Files and hashes: 1: 6S1fN0Slf3Y95btQEfpy__y_tiw.roa (hash: 5FWi2gr8yiM3yt2DtW3oiI0p1G9KyA1KVfzD3/JWlJI=)
2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: 91aPHDYo42w4oxnqNTDXQCf7EBW0KUa8nXV9AanGPEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:c8:85:a1:e2:41:32:64:29:52:0a:4e:0d:71:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Validity
Not Before: Oct 27 00:00:55 2025 GMT
Not After : Oct 28 00:00:55 2025 GMT
Subject: CN=7d5a1777ab7bd023bb52c5429e485dfb9df6b8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:dd:ea:c9:24:7b:af:65:13:50:65:9f:e2:
9f:c8:19:7e:f2:9a:c8:61:a7:6d:b1:a7:6b:2a:5c:
59:27:64:b8:2e:8b:8f:04:51:aa:66:43:14:58:62:
51:4d:98:22:04:24:46:57:69:90:90:24:cb:7b:4c:
ef:ec:ef:10:47:50:bb:9e:c3:d3:a4:d9:4e:76:f7:
bc:34:78:ed:45:ab:08:48:b3:5a:ae:f4:67:cc:a1:
e0:e5:be:25:78:d0:36:ac:cf:97:8c:50:44:85:e2:
fa:04:e5:75:52:8d:10:eb:f5:fe:b6:08:54:5c:16:
be:3b:da:c4:0d:b5:04:d1:43:c0:5d:23:93:a1:04:
02:60:77:e2:5c:fd:03:6d:ef:5c:9f:6c:d3:3d:03:
40:d2:95:e2:02:bb:1b:1c:c0:52:15:c4:35:cb:33:
aa:68:49:b9:28:c3:3e:7d:d9:cb:8f:fb:5e:33:72:
e0:f4:06:fe:b0:2d:76:af:b8:3b:c6:09:e1:b3:61:
a5:c6:ac:12:97:2d:04:be:07:ea:e0:72:a0:fa:47:
c5:34:d5:f3:43:da:df:1b:e6:92:27:0a:9f:ef:60:
64:d3:db:c4:03:2c:7c:9b:ba:21:ee:0c:21:65:f3:
ed:54:21:1a:fc:df:7b:e4:04:4b:7e:79:4f:d2:3b:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5A:17:77:AB:7B:D0:23:BB:52:C5:42:9E:48:5D:FB:9D:F6:B8:AF
X509v3 Authority Key Identifier:
keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9b:69:2b:8e:fa:98:dc:2d:46:2a:85:d9:3f:da:30:95:a2:
51:40:82:54:57:5b:fc:e6:6a:e3:5a:63:fe:3b:99:47:7d:1e:
3c:4e:ef:e5:ca:f2:b2:60:ae:e5:0c:1f:af:24:31:96:59:24:
72:4e:2a:1c:c5:e5:ed:1f:30:8e:f1:81:19:59:21:e0:1a:8f:
8c:d4:bf:1d:4a:2b:f5:93:3c:c2:4d:cc:84:56:36:05:7d:45:
3a:ac:87:95:41:60:73:4d:fb:a1:99:18:8a:6a:0a:94:dd:ad:
7c:33:b6:15:a4:c3:cd:53:53:15:bc:db:1a:e0:d8:cf:11:54:
6b:38:f4:5e:42:36:cf:fd:5d:b2:7a:bf:38:5f:9f:b9:74:b2:
01:e4:1b:60:64:b5:e2:1f:1d:8a:73:ec:6b:69:7a:e5:51:e7:
49:cd:94:f1:79:17:05:e7:49:db:69:e1:71:4f:6d:46:e2:98:
43:32:12:90:8d:f9:37:20:a2:f7:2c:b3:96:6e:48:a0:fe:5b:
19:46:3a:7c:1b:8d:1d:3c:6b:1d:89:a8:2a:70:49:f3:ed:5a:
7b:45:42:39:f8:2d:a5:b0:4f:1c:f2:9c:d6:b9:6c:4e:27:d6:
99:47:92:41:ca:4f:85:2a:ca:e9:e6:c9:33:bd:f4:66:5f:e6:
7e:16:b6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:34:51 2025 by rpki-client