Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: JoFMq5vB6mI4kmMJX8VFr3ljLHtpA/2XY3wFznOxKsI=
Subject key identifier: 5C:A2:44:5F:D1:8F:70:1E:4D:80:61:BC:70:C5:05:61:12:C3:71:17
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 019A71B889EE723C8A9CC74D7C52B91D3C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: urAx4pcmNh3jmx2sbQ75YpZhEGHv2KTj2amS/jPf4bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:89:ee:72:3c:8a:9c:c7:4d:7c:52:b9:1d:3c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=5ca2445fd18f701e4d8061bc70c5056112c37117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:34:33:a8:bd:1e:81:7d:b2:a4:97:5f:e5:ee:
6a:0a:27:8a:40:24:8c:77:69:15:39:d8:49:cc:b5:
3a:6f:21:03:c9:71:73:75:4a:9c:df:e9:2e:bf:05:
33:cc:8d:53:2a:8e:b7:e5:2e:13:5f:b3:70:3b:09:
f4:4e:71:ba:b6:7d:a3:88:da:68:f6:a7:4c:8a:57:
44:4d:c1:cd:f5:cf:43:c5:f7:59:c5:5e:59:a6:dc:
61:08:9c:b1:d5:80:df:23:99:a7:45:77:ab:b2:7b:
77:05:b6:3b:9c:08:84:ee:74:50:13:a9:92:56:6b:
98:e8:87:03:16:66:75:5f:09:2d:ce:ad:22:66:12:
75:5c:1b:c5:68:0d:d5:ba:d4:50:e2:16:25:fc:ae:
91:45:97:c4:5d:62:44:b1:8c:ea:15:56:e7:e8:5d:
5f:b9:05:3c:07:ce:bd:f7:11:16:4d:df:12:f8:94:
87:f6:15:b4:a8:14:dd:92:b1:27:97:08:0d:e3:9e:
e7:e7:6b:c8:8d:59:07:60:a5:99:bb:07:03:f7:44:
47:d0:db:c6:cd:14:14:ba:09:51:ae:e0:e4:90:24:
63:d4:c2:26:45:0f:57:a3:62:86:58:29:b0:0a:8c:
9a:9b:96:56:27:ed:e6:11:37:e1:7d:41:8b:77:56:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A2:44:5F:D1:8F:70:1E:4D:80:61:BC:70:C5:05:61:12:C3:71:17
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7a:9d:a2:e1:89:c1:62:2d:57:c3:99:b1:1b:25:72:bb:e1:
07:1d:ff:a5:b5:25:bd:cc:92:17:24:69:19:fb:0f:b4:cc:1a:
4b:69:9f:f7:d4:59:60:45:b9:12:65:0f:e2:c2:6f:06:a0:03:
98:f0:57:c2:f4:30:fe:ed:6b:e6:14:e8:47:97:20:08:df:b5:
a9:e7:98:a1:64:72:8f:52:53:ba:95:b7:6d:33:8a:0c:84:34:
3c:22:03:7e:09:a9:38:f8:69:b5:27:73:5a:1d:68:f7:a6:7b:
6b:39:af:0a:17:95:50:92:36:31:c7:3e:26:88:ef:e4:91:a5:
48:91:32:e8:be:7d:16:9a:e6:cf:15:a3:ca:ff:00:be:99:6a:
9a:1c:d9:79:bc:be:a8:65:38:5a:d9:ae:6c:ad:85:0d:b1:1a:
70:f1:be:d3:8a:32:68:29:2e:10:1e:49:a3:b0:95:6a:0c:59:
91:62:21:8d:c9:4c:58:12:57:85:d6:56:41:71:15:14:95:b9:
2c:df:c2:95:47:32:4a:69:f0:98:ef:24:9f:7f:60:ad:29:88:
8c:89:97:5c:dd:53:69:08:f7:eb:4c:ba:e1:aa:a5:6a:23:08:
1d:f4:e5:e6:62:2d:e1:27:b8:75:6e:75:c8:7d:85:07:f0:ea:
d3:64:a4:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuInucjyKnMdNfFK5HTx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDZmMWViNmRkZDRmZmVmZTE4MzgwMDMwMmJlNjM2Y2Zl
OTY1MzcwHhcNMjUxMTExMDcwMTUwWhcNMjUxMTEyMDcwMTUwWjAzMTEwLwYDVQQD
Eyg1Y2EyNDQ1ZmQxOGY3MDFlNGQ4MDYxYmM3MGM1MDU2MTEyYzM3MTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DQzqL0egX2ypJdf5e5qCieKQCSM
d2kVOdhJzLU6byEDyXFzdUqc3+kuvwUzzI1TKo635S4TX7NwOwn0TnG6tn2jiNpo
9qdMildETcHN9c9DxfdZxV5ZptxhCJyx1YDfI5mnRXersnt3BbY7nAiE7nRQE6mS
VmuY6IcDFmZ1Xwktzq0iZhJ1XBvFaA3VutRQ4hYl/K6RRZfEXWJEsYzqFVbn6F1f
uQU8B8699xEWTd8S+JSH9hW0qBTdkrEnlwgN457n52vIjVkHYKWZuwcD90RH0NvG
zRQUuglRruDkkCRj1MImRQ9Xo2KGWCmwCoyam5ZWJ+3mETfhfUGLd1bnSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyiRF/Rj3AeTYBhvHDFBWESw3EXMB8GA1UdIwQY
MBaAFA5G8ett3U/+/hg4ADAr5jbP6WU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81NThhZmUtNDlmZS00MzhlLWJkMzct
ZjRmY2VkMzViMzUyLzEvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81NThhZmUtNDlmZS00MzhlLWJkMzctZjRmY2VkMzViMzUy
LzEvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHqdouGJ
wWItV8OZsRslcrvhBx3/pbUlvcySFyRpGfsPtMwaS2mf99RZYEW5EmUP4sJvBqAD
mPBXwvQw/u1r5hToR5cgCN+1qeeYoWRyj1JTupW3bTOKDIQ0PCIDfgmpOPhptSdz
Wh1o96Z7azmvCheVUJI2Mcc+Jojv5JGlSJEy6L59FprmzxWjyv8AvplqmhzZeby+
qGU4WtmubK2FDbEacPG+04oyaCkuEB5Jo7CVagxZkWIhjclMWBJXhdZWQXEVFJW5
LN/ClUcySmnwmO8kn39grSmIjImXXN1TaQj360y64aqlaiMIHfTl5mIt4Se4dW51
yH2FB/Dq02SkjQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:16 2025 by rpki-client