Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
File: DkTxM_OHWTqvor6rOIhJBPrJvRk.mft (raw, json)
Hash identifier: JxUieaCWuJGy8fONnpzrdSOK4n4ncE7PZX2w3vsiDec=
Subject key identifier: A1:DE:BB:68:86:60:A3:5F:5E:C0:C2:F4:AD:6A:21:8D:07:97:BB:73
Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
Certificate issuer: /CN=0e44f133f387593aafa2beab38884904fac9bd19
Certificate serial: 019A70A50305FC196C0B8D630152CDAFA974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
Manifest number: 03AA
Signing time: Tue 11 Nov 2025 02:00:53 +0000
Manifest this update: Tue 11 Nov 2025 02:00:53 +0000
Manifest next update: Wed 12 Nov 2025 02:00:53 +0000
Files and hashes: 1: DkTxM_OHWTqvor6rOIhJBPrJvRk.crl (hash: MMy6KULUu29p4SHdT3+ysnk7oT6R5CDboOja2bEnEQM=)
2: Wiv0DHdRF2zh8D5DY6J3_PLSV6Q.roa (hash: /xs5AGgsSlLOCnLD+1aaT+DfL+K36ivL9muQHygs7c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:03:05:fc:19:6c:0b:8d:63:01:52:cd:af:a9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19
Validity
Not Before: Nov 11 02:00:53 2025 GMT
Not After : Nov 12 02:00:53 2025 GMT
Subject: CN=a1debb688660a35f5ec0c2f4ad6a218d0797bb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:9a:4a:25:91:35:01:a9:be:c3:77:c4:4a:
2f:a9:7c:cb:32:92:5a:d1:51:b3:de:9a:75:64:5f:
56:18:56:83:d8:9c:c5:1b:d5:48:1d:bf:40:2e:fc:
27:d9:f7:9e:91:af:fa:38:41:30:f5:92:30:d9:ca:
88:b9:21:8d:63:0f:5a:ef:ff:75:4c:ab:c7:ac:1f:
cc:cf:a3:49:93:c5:c2:f9:7e:a0:43:c9:ed:ec:65:
d7:ff:bc:b6:59:66:1d:04:63:42:19:d1:b2:6f:45:
59:0c:63:08:ec:ce:f9:51:e5:3d:de:6a:df:26:b9:
ad:a9:bf:8e:f4:94:88:d3:48:8f:cf:3e:fa:06:e0:
15:74:c6:d8:17:3b:24:87:20:9f:3d:86:57:0c:1e:
3a:e9:08:9f:0a:b5:79:50:29:bb:a6:ad:2b:b5:37:
f6:df:aa:91:7a:67:28:18:5e:48:59:1d:88:34:84:
20:be:09:39:41:8a:31:32:92:b0:98:7d:7f:8d:90:
d0:71:83:e7:94:20:8d:e3:11:d8:e5:92:10:6f:9d:
55:a6:45:3a:77:bc:3a:81:5c:93:7e:b8:22:6d:52:
91:dc:22:8c:37:87:4d:f7:9c:3a:a3:85:92:01:a9:
56:eb:11:86:b3:9e:b2:5d:73:59:d4:e5:1f:b0:e2:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DE:BB:68:86:60:A3:5F:5E:C0:C2:F4:AD:6A:21:8D:07:97:BB:73
X509v3 Authority Key Identifier:
keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fb:71:68:26:e6:92:07:c6:c9:17:29:75:be:53:41:a0:8a:
86:7b:11:a4:e9:34:2f:b2:01:c8:bf:8f:06:88:fc:00:21:45:
f3:7d:cf:2d:23:ef:f6:f9:46:ff:a6:0c:3b:15:83:83:cc:94:
f1:fb:2f:60:3d:e1:79:d1:5f:a5:9e:99:8e:7a:16:35:ca:fc:
91:70:86:bb:c0:b8:70:12:02:72:f3:6f:c0:03:8b:68:0f:03:
4b:ed:52:79:d5:23:ff:3b:b5:4f:98:33:96:09:66:4b:e0:6d:
18:5c:ed:3b:46:c0:06:40:d0:08:5e:3d:bb:66:14:99:5d:d2:
f8:8a:9d:fb:40:15:f5:5a:d7:6c:68:a0:f0:15:e2:b8:4a:1c:
41:5b:c0:21:1b:21:4e:fc:ca:56:2a:be:4d:61:df:2e:a2:7b:
1a:c2:ab:98:c5:da:90:78:bc:54:92:0c:69:e3:c7:31:20:1d:
0d:bf:d6:6b:42:9f:a7:71:23:3a:eb:f8:78:5a:b4:15:c0:82:
b0:3a:fe:ef:3f:95:5c:2d:87:c1:3c:e3:92:35:3a:3d:ae:fd:
83:14:04:61:ca:1d:44:86:4e:29:25:90:f7:0a:f2:31:88:51:
b9:78:14:3b:74:f6:a6:1b:10:9c:b0:f1:75:20:73:3d:b7:d8:
7b:b4:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:03 2025 by rpki-client