Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: T3xeMFGE8svmiPwtfhys3fmrBtAITKHV9yEiV/tmxJI=
Subject key identifier: D2:0C:05:BF:1E:CA:CA:34:0C:67:C9:46:ED:89:30:46:F9:28:A7:7B
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 019A7149A17E622E01805772202944CD6F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:00:42 +0000
Manifest this update: Tue 11 Nov 2025 05:00:42 +0000
Manifest next update: Wed 12 Nov 2025 05:00:42 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: ElzLty8CbaqyygWYo9aVzgcilC3xszS1p3WgX+xVkmU=)
2: OsEqbh-MgAhZY6dEETKTLoVhiek.roa (hash: 8l+J0cXRIwFphYGIY8ShZlRzu2XOdk8YK7YXmH85akQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a1:7e:62:2e:01:80:57:72:20:29:44:cd:6f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: Nov 11 05:00:42 2025 GMT
Not After : Nov 12 05:00:42 2025 GMT
Subject: CN=d20c05bf1ecaca340c67c946ed893046f928a77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:32:bc:c3:b8:33:1b:07:3b:70:16:fc:6c:
13:d3:72:bb:a8:f5:8a:55:d9:f8:d2:98:19:da:62:
de:71:05:35:a4:52:12:b0:73:84:47:4c:bb:e3:ce:
23:32:9f:1f:2b:5a:d4:9b:86:c5:85:48:bd:69:04:
c3:9d:f4:16:19:a3:98:e5:70:b4:9b:6a:44:b5:95:
25:8c:0f:cc:c1:3d:6e:6d:bc:55:b5:a9:79:c2:eb:
41:b1:c1:1f:cc:76:63:a5:94:e1:43:03:4f:96:dd:
9d:34:18:0e:ef:65:c0:f0:5b:f4:9a:dc:7c:22:09:
58:fe:0f:e0:f2:48:9a:42:c6:f0:13:45:e1:a0:ca:
65:ca:24:fe:95:57:b5:c2:fd:ce:8c:70:18:98:54:
21:4f:49:83:d4:c5:0e:92:19:ff:10:74:f0:02:e2:
d8:0c:38:33:dd:1c:b8:d0:cf:66:66:d5:ae:00:47:
68:fe:0f:2a:e8:ac:89:24:ea:5c:c8:9f:f0:9d:01:
55:de:43:59:65:fb:87:d1:a8:ec:ae:66:c2:f8:29:
07:b9:a3:2c:a3:b5:75:3e:82:bb:a6:de:c9:3b:1d:
02:8c:cf:3e:e6:8f:25:60:ec:4c:76:50:f4:35:cc:
8d:54:ee:89:33:62:2e:07:64:d4:ae:f4:64:aa:78:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0C:05:BF:1E:CA:CA:34:0C:67:C9:46:ED:89:30:46:F9:28:A7:7B
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:42:d1:5f:fe:fb:21:9c:3e:ec:24:28:92:0e:2b:d2:06:4d:
1e:02:60:92:63:a0:f6:43:0a:5e:9e:d8:3d:1c:b2:56:fc:dc:
2d:4c:d1:f7:49:6c:56:8d:c4:7e:1a:ab:6e:1e:3a:07:0d:7b:
3a:d0:b5:fc:99:e0:cb:ab:d9:81:29:1f:9d:bb:85:8c:8b:62:
66:a2:ac:2a:fe:9b:3a:a0:15:27:a0:54:e2:27:4f:3d:5e:72:
6e:27:53:11:9f:ec:6d:4e:b8:79:91:32:9e:97:65:1b:88:3b:
ff:b0:d8:8d:31:fe:23:ed:54:44:7e:d6:b1:8b:45:9d:be:01:
07:15:7e:63:b8:8c:9d:67:1b:33:54:c3:38:54:f0:af:ae:7b:
04:89:b4:41:bc:28:e8:7a:db:22:ce:f8:15:88:7b:f7:c9:bd:
84:57:6b:91:8c:cc:f5:df:56:b4:7a:d9:fe:38:77:33:b5:aa:
1c:0a:f9:4c:bc:3c:45:c0:9c:7f:84:86:b8:9b:60:cc:7d:d5:
73:bd:ef:1a:d0:6e:2f:81:f5:1f:67:a3:d0:d5:c4:ca:1d:ca:
e1:5d:74:06:6c:93:6e:dd:5a:14:34:f6:4e:59:02:bf:32:29:
c4:88:3d:1f:f2:d3:d5:70:10:9a:99:3b:59:8e:c6:1f:5e:ae:
6e:40:11:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:18 2025 by rpki-client